Which two statements about configuring mobile and remote access on Cisco TelePresence Video Communication Server Expressway are true? (Choose two.)

Question

Options

• AThe traversal server zone on Expressway-C must have a TLS verify subject name configured.
• BThe traversal client zone and the traversal server zone Media encryption mode must be set to
• CThe traversal client zone and the traversal server zone Media encryption mode must be set to
• DThe traversal client zone on Expressway-C Media encryption mode must be set to Auto.
• EThe traversal client zone and the traversal server zone must be set to SIP TLS with TLS verify

• A
  4% (2)
• B
  74% (34)
• C
  9% (4)
• D
  13% (6)

Explanation

B is correct: For MRA, both the traversal client zone (on Expressway-C) and traversal server zone (on Expressway-E) must have their Media encryption mode set to Force Encrypted, ensuring all media traversing the firewall is encrypted end-to-end. E is correct: Both the traversal client and traversal server zones must use SIP TLS as the transport protocol, and TLS verify mode must be enabled to validate certificates - this ensures mutual authentication and prevents man-in-the-middle attacks. Option A is partially correct direction but applies to the Expressway-E (server side), not C. Option D setting the traversal client zone to Auto is incorrect for MRA - Auto allows unencrypted media which violates MRA security requirements. Matching Force Encrypted on both sides is mandatory.

No community discussion yet for this question.