Which two options should be used to create a secure traversal zone between the Expressway-C and Expressway-E? (Choose two.)

Question

Options

• AExpressway-C and Expressway-E must trust each other's server certificate.
• BOne Cisco Unified Communications traversal zone for H.323 and SIP connections.
• CA separate pair of traversal zones must be configured if an H.323 connection is required and
• DEnable username and password authentication verification on Expressway-E.
• ECreate a set of username and password on each of the Expressway-C and Expressway-E to

• A
  77% (24)
• B
  6% (2)
• D
  3% (1)
• E
  13% (4)

Explanation

A secure traversal zone between Expressway-C and Expressway-E requires two key elements. First (A), mutual TLS certificate trust is mandatory - each peer must trust the other's server certificate to establish a secure TLS connection for the traversal zone. Without this, the TLS handshake fails entirely. Second (C), if H.323 is required alongside SIP, a separate pair of traversal zones must be configured, because H.323 traversal uses different port negotiation (H.460.18/19) than SIP and cannot share a single traversal zone definition with SIP traffic. A single combined zone (choice B) is not supported for mixed H.323/SIP traversal. Choices D and E describe username/password authentication, which is used for traversal zone authentication but is not the primary mechanism for 'securing' the zone in the certificate-trust sense, and the question specifically targets the two mandatory structural requirements.

No community discussion yet for this question.