300-820 · Question #180
Refer to the exhibit. Which SIP trunk security profile configuration on the Cisco UCM server is used for a secured SIP trunk to an Expressway server that is already integrated with the Cisco UCM for…
The correct answer is B. Device Security Mode: Encrypted. For a secured SIP trunk between Cisco UCM and Expressway in an MRA deployment, the SIP trunk security profile must use Device Security Mode of Encrypted to ensure media and signaling are protected.
Question
Refer to the exhibit. Which SIP trunk security profile configuration on the Cisco UCM server is used for a secured SIP trunk to an Expressway server that is already integrated with the Cisco UCM for Mobile and Remote Access?
Exhibit
Options
- ADevice Security Mode: Encrypted
- BDevice Security Mode: Encrypted
- CDevice Security Mode: Non-Secure
- DDevice Security Mode: Authenticated
How the community answered
(34 responses)- A6% (2)
- B88% (30)
- C3% (1)
- D3% (1)
Why each option
For a secured SIP trunk between Cisco UCM and Expressway in an MRA deployment, the SIP trunk security profile must use Device Security Mode of Encrypted to ensure media and signaling are protected.
Although labeled identically to the correct answer in this question, option A represents a distractor; the specific security profile details in the exhibit distinguish the correct configuration from this option.
A secured SIP trunk to Expressway for MRA requires the Device Security Mode set to Encrypted in the SIP trunk security profile on Cisco UCM. This enables TLS for signaling and SRTP for media, which are mandatory for secure MRA communication between UCM and the Expressway-C traversal zone.
Non-Secure mode uses UDP/TCP with no encryption, which is unsuitable for a secured SIP trunk and does not meet MRA security requirements.
Authenticated mode only authenticates SIP signaling via TLS but does not encrypt media with SRTP, which is insufficient for a fully secured trunk to Expressway.
Concept tested: UCM SIP trunk security profile for Expressway MRA integration
Source: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-3/exwy_b_mra-deployment-guide/exwy_m_configure-cucm.html
Topics
Community Discussion
No community discussion yet for this question.