In a Mobile and Remote Access deployment, where must communications be encrypted with TLS?

Question

Options

• ACisco Expressway-E and endpoints outside the enterprise
• BCisco Expressway-C, Cisco Unified Communications Manager, and IM&P
• CCisco Expressway-C, Cisco Expressway-E, and Cisco Unified Communications Manager
• DCisco Expressway-C, Cisco Expressway-E, and endpoints outside the enterprise

• A
  5% (3)
• B
  2% (1)
• C
  2% (1)
• D
  92% (54)

Explanation

In a Cisco MRA deployment, TLS encryption is mandatory on the external leg - from remote endpoints (outside the enterprise) to Expressway-E - and on the traversal zone between Expressway-E and Expressway-C. This covers the full external path: remote endpoints → Expressway-C → Expressway-E. Option A is incomplete because it omits the Expressway-C-to-Expressway-E segment. Options B and C are incorrect because they describe only internal segments (CUCM, IM&P), which are not the segments that MRA mandates TLS for. Answer D correctly identifies all three mandatory TLS segments: Expressway-C, Expressway-E, and external endpoints.

No community discussion yet for this question.