2026/March Latest Braindump2go 300-820 Exam Dumps with PDF and VCE Free Updated Today! Following are some new Braindump2go 300-820 Real Exam Questions!
QUESTION 115
Cisco Jabber clients are failing to log in using Mobile and Remote Access. The administrator checked the Jabber problem report logs and saw that connections to the Expressway-E are being refused on TCP port 8443. From a packet capture run on the Jabber client while attempting to log in, there is no response to the TCP SYN packets sent to the Expressway-E by Jabber.
Which two reasons are causing the Expressway-E to be unreachable on port 8443 from the internet? (Choose two.)
A. The Jabber clients using an outdated version.
B. The Unified Communications zone is down.
C. The firewall is blocking the port.
D. The certificate for Jabber is expired.
E. The SRV record for _cisco-uds is misconfigured.
Answer: BC
Explanation:
Traffic is coming from the internet so can not be the cisco_uds record, as it is created on the internal DNS only. Collab_edge is the external DNS record. It has to be port blocked or traversal zone down.
https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway/118798-technote-cucm-00.html#anc6
QUESTION 116
An organization wants to be able to call IP addresses and URI addresses. An engineer must configure Cisco Expressways to manage this request from the endpoints in the organization. How would the engineer configure the Expressways to allow these calls to be completed to external IP addresses?
A. Set calls to unknown IP addresses to direct on the Cisco Expressways, and add a search rule on the Expressway-E
B. Set calls to unknown IP addresses to indirect on the Cisco Expressways, and add a search rule on the Expressway-E
C. Use search rules to manage calls to IP addresses, and the direct/indirect setting on the Expressway is used as a fallback only if the search rules do not exist
D. Set calls to unknown IP addresses to indirect on the Expressway-C and direct on the Expressway-E, and add a search rule on the Expressway-E
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/admin_guide/X14-0/exwy_b_cisco-expressway-administrator-guide/exwy_m_dial-plan-and-call-processing.html
QUESTION 117
When the network requirements are configured for a new Video Mesh deployment, which firewall ports are required so that Video Mesh cascade signaling succeeds?
A. TCP 443 and 444
B. TCP 443 and 8443
C. UDP 5004 and 5005
D. UDP 33432 through 33433
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/wbxt/videomesh/cmgt_b_webex-video-mesh-deployment-guide/cmgt_b_hybrid-media-deployment-guide_chapter_010.html
QUESTION 118
An engineer must configure the zone to connect to an Expressway-E using Single NIC with NAT. The internal IP address is 192.168.10.63, and the NAT address is 203.0.113.5. What must the engineer configure on the Expressway-C to meet this requirement?
A. traversal zone with the peer address 192.168.10.63
B. neighbor zone with the peer address 192.168.10.63
C. traversal zone with the peer address of 203.0.113.5
D. neighbor zone with the peer address of 203.0.113.5
Answer: C
Explanation:
In this example, firewall A must allow NAT reflection of traffic coming from the Expressway-C that is destined for the external address, that is 64.100.0.10, of the Expressway-E. The traversal zone on the Expressway-C must have 64.100.0.10 as the peer address.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-0/basic_config/exwy_b_cisco-expressway-e-and-expressway-c-basic-configuration-deployment-guide-x14-0/exwy_m_advanced-networking-deployments.html
QUESTION 119
Cisco Collaboration deployment has video endpoints that can do B2B calls over the internet, but they also can make audio calls through a gateway. This ability means that someone from the internet can make fraud calls through the system. Which action must an engineer take to set up the search rules for calls that are being headed to the PSTN gateway?
A. Ensure that only requests that are authenticated are allowed to make a PSTN call.
B. Avoid using any wild card in the source settings in the search rules.
C. Add registered devices only in the search rule for the PSTN gateway.
D. Add registered devices only in the zone for the PSTN gateway.
Answer: B
QUESTION 120
An engineer reviews the configuration of a pair of Expressway servers for a company with the domain example.com. The company allows toll fraud calls to reach the Cisco UCM only when it expects externally registered devices to call internal 5-digit extensions. The search history shows that the fraudulent calls have a destination URI of 8 or more digits and several domains. What must the engineer configure to prevent all toll fraud calls from going past the Expressway-E to the internal network?
A. search rules to only route calls with a destination URI of 5 to 8 digits long on the Expressway-E
B. CPL that blocks calls with a destination domain other than example.com on the Expressway-C.
C. search rules to only route calls with a destination domain of example.com on the Expressway-E
D. CPL to block calls with a destination URI with 8 or more digits on the Expressway-E
Answer: D
QUESTION 121
Which two internal SIP endpoints behind a firewall place calls to external devices? (Choose two.)
A. An Expressway-C communicates with the internal endpoint and forwards the media to and from an Expressway-E.
B. A Cisco Endpoint is configured with a publicly routable static NAT SIP address to advertise instead of is private IP address.
C. An Expressway-C communicates directly with the remote party using the ICE protocol
D. An Expressway-E is used as a VPN server to allow remote SIP edge servers to connect calls
E. An Expressway-C rewrites the SIP SDP to advertise its own IP address to the external party.
Answer: AB
QUESTION 122
Which mechanism does TLS use to validate identity?
A. server certificate
B. shared secret
C. username and a password
D. IP address of the peer
Answer: A
Explanation:
The TLS protocol uses endpoint authentication and encryption to provide secure connections over any network. Encryption protects against eavesdropping, and digital certificates (signed by a trusted CA) protect against tampering and message forgery by authenticating the endpoints.
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wsma/configuration/15-mt/wsma-15-mt-book/wsma-tls.pdf
QUESTION 123
An engineer is investigating failing incoming calls that are expected to connect. The engineer notices that the failed calls all have a port number of 5060 at the end of the URI. The search rules are configured in a way that they do not expect a port to be included. Which configuration allows the routing of this call?
A. * transform with a pattern string of *(.*)@example.com(:5060)?”
* replace a suing of \[email protected]
B. * search rule with a pattern string of “(.*)@example.com(:5050)?”
* replace a string of \1\2@example com
C. search rule with a pattern string of “(.*)@example.com(:5060)?”
* replace a string of \[email protected]\2
D. * transform with a pattern string of “(.*)@example.com(:5060)?”
* replace a string of \[email protected]\2
Answer: A
QUESTION 124
An engineer is deploying Mobile and Remote Access to allow external Cisco Jabber users to sign into a Cisco UCM cluster via Cisco Expressways. The users will sign-in in the format [email protected]. Contact photos for Jabber are hosted on a webserver with the FQDN of phonebook cisco.com. Which configuration must be completed to allow external Jabber users to see contact photos?
A. An HTTP allow list entry must be made on the Expressway-E for phonebook cisco.com.
B. A SIP allow list entry must be made on the Expressway-E for .*@cisco.com.
C. An HTTP allow list entry must be made on the Expressway-C for phonebook cisco.com.
D. A SIP allow list entry must be made on the Expressway-C for .*@cisco.com.
Answer: C
QUESTION 125
An engineer configures a Cisco Collaboration environment to use Mobile and Remote Access for external access for company users. The engineer uses OAuth with refresh on the Cisco UCM SIP lines for extra security and improved user experience. During the setup, Mobile and Remote Access does not work, it is enabled on the Cisco UCM and Cisco Expressways. SIP trunks on ports 5090 and 5091 are configured to avoid conflicts with other SIP trunks between internal Cisco UCM clusters. The traversal zone also uses port 6500. The traversal zone between Expressways shows no errors, and the requests hit Expressway-E from the Internet. What is the reason that the solution does not work?
A. Mobile and Remote Access does not support OAuth with refresh with this configuration,
B. The default port for Mobile and Remote Access is 6001. Therefore, the traversal port must be port 6001 for Mobile and Remote Access to work.
C. The default port for Mobile and Remote Access is 6500, which creates a conflict with the existing traversal zone port.
D. The default port for Mobile and Remote Access is 5091, which creates a conflict with the existing SIP trunks.
Answer: D
QUESTION 126
What is a benefit of Cisco Webex Messenger Cloud deployment?
A. Cloud deployment is more secure than an on-premises deployment.
B. There is no additional cost to use a cloud deployment.
C. Cloud deployment allows interoperability between Cisco Jabber and Webex Teams users.
D. Cloud deployment is faster than using an on-premises deployment.
Answer: C
Explanation:
Cisco Webex Messenger integrates with Cisco Unified Communications Manager and Cisco Webex Meeting Center to support click-to-call, phone control, voice, video, visual voicemail, and web collaboration. It allows you to communicate and collaborate effectively from anywhere you have an Internet connection.
QUESTION 127
Cisco Collaboration endpoints are exchanging encrypted signaling messages. What is one complication in implementing NAT ALG for voice and video devices?
A. NAT ALG is not compatible with the H.323 signaling protocol.
B. NAT ALG introduces latency in the media path.
C. The NAT ALG cannot inspect the contents of encrypted signaling messages.
D. NAT ALG requires the use of NAT reflection, which may not be supported on all firewalls.
Answer: C
QUESTION 128
How are Cisco Webex Video Mesh deployments supported?
A. Video Mesh Dual NIC are supported in demilitarized deployments.
B. Mixed Single NIC and Dual NIC are supported in the same data center deployments.
C. Clustering Video Mesh Nodes over the WAN are supported if Round Trip Time is low.
D. IPv6 and IPv4 deployments are supported for Video Mesh clusters.
Answer: A
QUESTION 129
An administrator is deploying Cisco Expressways for Mobile and Remote Access. The registration domain is “example.com”, and the Expressway-E FQDN is “expe.example.com”. Cisco Jabber clients on the internet cannot discover services via DNS lookup. Which SRV records must be configured in the public DNS to allow Service Discovery?
A. _collab-edge._tls.example.com
B. _cisco-uds_tcp.expe.example.com
C. _cisco-uds_tcp.example.com
D. _collab-edge_tls.expe.example.com
Answer: A
QUESTION 130
How is the communication routed in a Hybrid deployment so that people on Cisco Cloud-Based IM are able to communicate with Cisco Jabber users in the on-premises environment?
A. The Expressway-C enables a connection directly with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.
B. The Expressway-E located in the DMZ establishes a connection with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.
C. The Cisco Unified IM and Presence server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.
D. The Cisco UC server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.
Answer: A
QUESTION 131
An engineer learns from an end user that calls from outside the company are not being received. Calls are being made to other businesses outside of the company on video using URL addresses. The change management log shows no changes in the configuration of the collaboration solutions. The engineer examines the endpoint, which seems to be registered to the Cisco UCM, and the SIP trunk between the Cisco UCM and sees that the Expressway is also up. In addition, the traversal link shows no errors between the Expressways. Which action must the engineer take to troubleshoot this issue?
A. On the Cisco UCM, run the Real-Time Monitoring Tool to see if any incoming calls fail.
B. On the Expressway-E, run diagnostic logging under maintenance to see if any requests reach the system.
C. On the Expressway-E, check the NTP settings to ensure that TLS will be able to terminate. If the clock is out of sync, incoming calls from other working systems would work bur not outgoing calls from the company.
D. On the Expressway-C, run a network log under administrative tools to see if any requests reach the system.
Answer: B
QUESTION 132
Which protocol and port are used for signaling between on-premises Cisco Webex Video Mesh Nodes and Cloud Media Services?
A. standard SIP over TCP port 5060
B. signaling over HTTPS TCP port 443
C. standard SIP TLS over TCP port 5061
D. signaling over TCP port 444
Answer: B
Explanation:
QUESTION 133
An engineer is supporting an existing Cisco Collaboration deployment that has internal and external home users using the solution without VPN. Business usage also includes B2B calling for voice and video. Suddenly the engineer receives a report that one of the home office users cannot use the Cisco Jabber client, and shortly after, a few more reports come in for the same error. What must the engineer check first to resolve this issue?
A. client logs of the users
B. real-time monitoring toll logs for problems
C. alarms on the Cisco Expressways
D. alarms on the Cisco UCM Cluster
Answer: C
QUESTION 134
Which interworking option must be used on the Expressway for it to act as a SIP/H.323 gateway when no endpoint is registered?
A. enabled
B. registered only
C. off
D. on
Answer: D
QUESTION 135
An employee has recently left an organization and a manager suspects that this employee may have made changes to the system that no one is aware of. Mobile and Remote Access registration is not working. Internal communications appear to be working, but no external system is able to register or call anywhere. While investigating this problem, it is discovered that no internal systems are able to call externally either. What is the TraversalZone missing that is causing this issue?
A. SIP trunk to the DefaultZone
B. route pattern to the DefaultZone
C. link to the DefaultZone
D. pipe to the DefaultZone
Answer: C
QUESTION 136
An administrator configures a secure SIP trunk in Cisco UCM to Expressway-C. The SIP trunk fails to become active, and an examination of a packet capture finds that the TLS handshake failed with a “Certificate Unknown” error from Cisco UCM. To allow the Cisco UCM to trust the Expressway-C and establish a TLS connection, the administrator will upload the Expressway server certificate to the trust store. To which trust store must the certificate be uploaded?
A. tomcat-trust
B. CallManager-trust
C. TVS-trust
D. ipsec-trust
Answer: B
QUESTION 137
An administrator is enabling Mobile and Remote Access login for the Cisco UCM registration domain cisco.com. Phones are registered with a Cisco UCM phone security profile name of securephone.cisco.com. Which two subject alternative names must be configured? (Choose two.)
A. Securephone.cisco.com on the CallManager certificate
B. cisco.com on the Expressway-C certificate
C. Securephone.cisco.com on the Expressway-E certificate
D. cisco.com on the Expressway-E certificate
E. Securephone.cisco.com on the Expressway-C certificate
Answer: DE
QUESTION 138
Cisco Expressways are being deployed for Mobile and Remote Access. The Expressway-E internal interface (LAN1) IP is 192.168.100.10/24, and the external interface (LAN2) IP is 172.16.100.10/24.
The Expressway-C IP is 192.168.20.10/24. The default gateway for each subnet is the first useable address. How must the Expressway-E be configured to allow proper routing to the internal and external networks?
A. IPv4 gateway: 172.16.100.1, and a static route for the 192.168.100.0/24 subnet using LAN1
B. IPv4 gateway: 192.168.100.1, and a static route for the 192.168.20.0/24 subnet using LAN1
C. IPv4 gateway: 192.168.100.1, and a static route for the 172.16.100.0/24 subnet using LAN2
D. IPv4 gateway: 172.16.100.1, and a static route for the 192.168.20.0/24 subnet using LAN1
Answer: D
QUESTION 139
An administrator installs a new webserver (server1.example.com – 10.1.1.90) for storing Cisco Jabber update files to the network, but all Mobile and Remote Access registered clients still run the old Jabber software version, and the update fails. Which configuration task on an Expressway server solves the Jabber software update issue?
A. Add a rule with the URL http://server1.example.com:80/ to the outbound HTTP allow list manually to allow pushing the new software to the clients.
B. Add a rule with the URL http://server1.example.com:80/ to the inbound HTTP allow list manually to allow access to the new web server.
C. Add a rule with the server IP address 10.1.1.90 in the URL to the inbound HTTP allow list because server names and FQDNs are not supported.
D. Run an IM and Presence server discovery process on Expressway-C to add the new web server to the inbound HTTP allow list automatically.
Answer: B
QUESTION 140
What is the first step to restoring an Expressway cluster from a backup?
A. use the backup that is specific to each Expressway peer in the cluster
B. upgrade each Expressway peer to the latest Expressway software
C. remove each Expressway peer from the cluster
D. add all the Expressway peers to the cluster
Answer: C
QUESTION 141
An engineer must configure Mobile and Remote Access. One of the requirements is to expect Cisco Jabber users to enter [email protected] as the login userid. Which DNS record must the engineer modify to start implementing this requirement?
A. _cuplogin._tcp.cisco.com
B. _collab-edge._tls.cisco.com
C. _cisco-uds._tls.cisco.com
D. _cisco-uds._tcp.cisco.com
Answer: B
QUESTION 142
Which commands disable SIP Inspection on the Cisco ASA FirePOWER firewall?
A. hostname#no inspect sip
B. hostname(config)#policy-map global_policy
hostname(config-pmap)#class-map inspection default
hostname(config-pmap)#no inspect_sip
C. hostname(config)#no inspect_sip
D. hostname(config)#policy-map global_policy
hostname(config-pmap)#class-map inspection_default
hostname(config-pmap)#no inspect sip
Answer: D
QUESTION 143
Which dial plan settings can be used to set up different regulations according to the protocol (SIP or H.323) or the source of the query?
A. presearch transforms
B. search rules
C. call policy
D. policy services
Answer: B
QUESTION 144
When external video endpoints are called via a DNS zone, which dialing method requires DNS to be configured in the Expressway server?
A. IP dialing
B. URI dialing
C. DN dialing
D. E.164
Answer: B
QUESTION 145
A company has a single Expressway-E that exhibits high resource utilization. An engineer checks the logs and finds numerous fraudulent attempts from sip:[email protected]. Where must the engineer go to configure a call policy rule and block the desired URI?
A. Call History Configuration > Call Policy > Rules
B. Configuration > Call History > Policy > Rules
C. Configuration > Call Policy > Rules
D. Configuration > Policy > Inbound > Rules
Answer: C
QUESTION 146
How do the Cisco Expressway-C and Expressway-E servers transmit media to each other?
A. RTP and RTCP are multiplexed for all internal and external video endpoints across the traversal link using UDP.
B. When the Expressway-C receives RTP and RTCP media, it establishes a new UDP socket with the Expressway-E.
C. RTP and RTCP are multiplexed for all internal and external video endpoints across the traversal link using TLS.
D. When the Expressway-E receives RTP and RTCP media, it establishes a new UDP socket with the Expressway-C.
Answer: A
Explanation:
The Expressway-E uses media demultiplexing in the following call scenarios:
Any H.323 or SIP call leg to/from an Expressway-C through a traversal zone configured to use Assent.
Any H.323 call leg to/from an Expressway-C through a traversal server zone configured to use H460.19 in demultiplexing mode.
H.323 call legs between an Expressway-E and an Assent or H.460.19 enabled endpoint.
QUESTION 147
An engineer must enable the communication between two separate Expressway-C servers to allow inbound and outbound calling between different endpoints registered on each server. Which configuration must happen?
A. Configure a traversal zone on each server with a destination of the other Expressway-C.
B. Configure a neighbor zone on each server with a destination of the other Expressway-C.
C. Configure a transform on each server to strip the port numbers at the end of the alias.
D. Configure a transform on each server to convert the calling alias into the called alias.
Answer: B
QUESTION 148
A video device registered with Cisco UCM failed to make an outbound B2B call. From Expressway-C diagnostic logs, an engineer found that the destination pattern is “[email protected]:5061”, and the call was dropped with a 404 response code from Expressway-C. The search rule intended for this call-in Expressway-C is configured for Alias Pattern Match, Pattern type “Suffix,” and Pattern “example.com”. How must the configuration be changed to allow the call?
A. Update the route pattern in Cisco UCM to send calls to “example.com” to the correct port.
B. Create a transform on Expressway-C to strip port numbers.
C. Create a call policy rule on Expressway-E to allow calls to port 5061.
D. Update the call policy list in Expressway-C to allow calls to “example.com”.
Answer: B
QUESTION 149
Which type of interface is required when the Cisco Expressway-E is located in a DMZ between two separate firewalls on separate network segments?
A. dual network interface
B. application programming interface
C. command line interface
D. single network interface
Answer: A
QUESTION 150
What is a description of an Interactive Connectivity Establishment?
A. It is used by B2BUA to keep the firewall ports opened for inbound/outbound calls.
B. It allows Mobile and Remote Access endpoints to connect video calls signaling peer-to-peer.
C. It allows calling external endpoints with reduced overhead under VPN connections.
D. It is used to find the best media path between network elements in traversal calls.
Answer: D
Explanation:
Interactive Connectivity Establishment (ICE) is a protocol used to find the best media path between network elements in traversal calls. It does this by first discovering all possible paths between the two endpoints, and then selecting the path with the lowest latency and jitter. ICE is used by many different applications, including WebRTC, SIP, and H.323.
QUESTION 151
An administrator must configure the DNS SRV records for Mobile and Remote Access for a company with the domain example.com, the Expressway-E FQDN is ExpE.example.com, and the Expressway-C FQDN is Exp-C.example.com. What must the administrator configure to allow external clients to discover the Expressway-E server?
A. SRV record _collab-edge._tls.example.com that resolves to ExpE.example.com on port 8443
B. SRV record _cisco-uds._tcp.example.com that resolves to ExpE.example.com on port 5061
C. SRV record _cisco-uds._tcp.example.com that resolves to ExpC.example.com on port 8443
D. SRV record _collab-edge._tls.example.com that resolves ta ExpE.example.com on port 5061
Answer: A
Explanation:
For Mobile and Remote Access (MRA), external clients use the _collab-edge._tls SRV record to discover the Expressway-E server. This SRV record must point to the Expressway-E FQDN and use port 8443, which is the default secure HTTPS port used for MRA traffic over TLS.
QUESTION 152
Within which cache timeline do the Webex App endpoints perform a STUN test to calculate round-trip delay time to available media node clusters?
A. 1 hour
B. 2 hours
C. 4 hours
D. 6 hours
Answer: B
Explanation:
The cache expiry time for media node discovery is 2 hours. When new Video Mesh Nodes are added to a deployment, it may take Webex Teams endpoints up to 2 hours to recognize this event. Restarting a Webex Teams endpoint will force the endpoint to perform connectivity and STUN tests again and to recognize the new Video Mesh Node.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Collaboration/hybrid/12x/hybcvd/hms.html?bookSearch=true
QUESTION 153
A company has an on-premises Cisco collaboration cluster that contains Cisco UCM, IM and Presence, and Cisco Webex in the cloud. The company wants to integrate the on-premises infrastructure with Webex to enable interoperability with the Webex App. An engineer already configured the cluster in Cisco UCM, IM and Presence, and the organization in the Webex Control Hub. Which action must the engineer take to complete the configuration?
A. Deploy Directory Connector.
B. Open the TCP 443 port from IM and Presence to Webex Cloud.
C. Deploy a Webex Device Connector.
D. Deploy a Cisco Expressway Message Connector host.
Answer: D
Explanation:
Hybrid Messageconnects your Unified Communications Manager IM and Presence Service(IM and Presence Service) to Webex to enable interoperability with Webex App.
The Hybrid Messageenables interoperability between these two groups of users. The components that make Hybrid message possible are the message connector, hosted on Cisco Expressway infrastructure on your premises, and the Message Service, running in the Webexcloud.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/spark/hybridservices/messageservice/cmgt_b_spark-hybrid-message-deployment-guide/cmgt_b_spark-hybrid-message-deployment-guide_chapter_00.html
QUESTION 154
Which action is required when using Cisco Jabber for Cloud with Cisco Webex Messenger?
A. Configure, extend, and connect.
B. Configure policies.
C. Configure service discovery for remote access.
D. Configure desk phone control.
Answer: B
Explanation:
Workflow for a Cloud Deployment using Cisco Webex Messenger
Step 1 Configure Policies
Step 2 Create Users for Cloud Deployment
Step 3 Set Up Certificate Validation
Step 4 Configure the Clients
Step 5 Deploy Cisco Jabber Applications and Jabber Softphone for VDI
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/14_0/cjab_b_deploy-jabber-webex-messenger-14_0/cjab_b_deploy-jabber-webex-messenger-129_chapter_010.html
QUESTION 155
During the deployment of a Cisco Webex Video Mesh, where do on-premises SIP endpoints send signaling?
A. On-premises endpoints cannot participate in Cisco Webex Video Mesh
B. to the cloud
C. to the switching services
D. to the call control environment (Unified CM or Expressway)
Answer: D
Explanation:
On-premises SIP endpoints send signaling to the call control environment (Unified CM or Expressway), which then sends it to the Video Mesh node. Media is sent to the transcoding service.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/wbxt/videomesh/cmgt_b_webex-video-mesh-deployment-guide/cmgt_b_hybrid-media-deployment-guide_chapter_010.html
QUESTION 156
A company is implementing Cisco Webex but has existing legacy Cisco video endpoint registered on-premises. The administrator of Webex wants the SIP address of these rooms to appear in the directory listing on Webex registered endpoints and in the Webex App. How can this be configured?
A. Using the Directory Connector, room resources without Webex licenses can be synchronized with Webex to make the SIP address appear in the phonebook of the Webex App or the endpoint.
B. Using the Directory Connector, room resources with flex licenses only can be synchronized with Webex to make the room appear in the phonebook of the Webex App or the endpoint. SIP address is then entered from Control Hub because it will not match the field.
C. Using the Directory Connector, room resources with flex licenses only can be synchronized with Webex to make the SIP address appear in the phonebook of the Webex App or the endpoint.
D. Using the Directory Connector, room resources without Webex licenses can be synchronized with Webex to make the room appear in the phonebook of the Webex App or the endpoint. SIP address is then entered from Control Hub because it will not match the field.
QUESTION 157
Refer to the exhibit. When a user tries to sign in to the Cisco Jabber client through Mobile and Remote Access, they receive this error message: “Cannot communicate with the server.” The external DNS server is configured with the SRV records listed in the exhibit.
What is the cause of the issue?
A. The
_sips DNS record must target expE-pub.cll-collab.internal and the _cisco-uds DNS record must be removed.
B. The collab-edge DNS record must be added to the DNS server and the _cisco-uds DNS record must be removed.
C. A Cisco CSF device must be configured in UC for the user and the _cisco-uds DNS record must be removed.
D. The HTTP allow list is not allowing communication with the Instant Message and Presence server.
Answer: B
QUESTION 158
What are the steps to access the Service Setup Wizard during the first setup of the Expressway server to license the server?
A. Factory reset the Expressway server to pass from Smart Licensing to PAK-based licensing.
B. From the GUI of the Expressway server, go to Status> Overview> Run service setup.
C. Factory reset the Expressway server to pass from Expressway-C to Expressway-E.
D. From the GUI of the Expressway server, go to Maintenance> Option keys> First Setup Wizard.
Answer: B
Explanation:
The first time you log in to the Expressway web user interface you’ll automatically see the Service Setup Wizard. (For subsequent log ins you’ll see the Status > Overview page, and from that page you can click Run service setup at anytime.)
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-0/basic_config/exwy_b_cisco-expressway-e-and-expressway-c-basic-configuration-deployment-guide-x14-0/exwy_m_run-the-service-setup-wizard.html#concept_8D0B90ED41749AA37FFFA48B2EA8343B
QUESTION 159
What is the last step for domain management in Cisco Webex Control Hub if an engineer adds users already signed in with the company domain?
A. Publish a domain.
B. Add a domain.
C. Verify a domain.
D. Claim a domain.
Answer: D
QUESTION 160
Which user management method uses the Webex Directory Connector to add and synchronize users to the Control Hub organization?
A. Synchronize from Active Directory.
B. Synchronize from Azure AD.
C. Synchronize from “Add using People API”.
D. Synchronize from Okta.
Answer: A
QUESTION 161
An engineer attempts to upload a server certificate to an Expressway-C server but receives an error when they click the upload button that says that the file is invalid. The engineer is advised that this happens because the certificate was signed incorrectly and is missing an attribute. What must the engineer do to upload the certificate?
A. Create a certificate request via Certificate Services Web Page and ensure that the certificate validity period is five years because the Expressway server validates this during certificate import.
B. Create a certificate request via the Certificate Services Web Page and ensure that the Subject Common Name field contains the server FQDN and all Cisco Unified CM phone security profile names.
C. Create a new certificate template with “Server authentication” and “Client authentication” enabled and use this template when signing the Expressway server certificate.
D. Create a new certificate template with the certificate attribute “Allow private key to be exported” enabled and use this template when signing the Expressway server certificate.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X15-0/mra/exwy_b_mra-deployment-guide-x150.pdf
QUESTION 162
A Webex administrator is configuring the Webex Control Hub to enable enterprise users to sign into Webex securely by authenticating to the IdP of the organization. To conform to the SAML specification, to what can the NameID format be set?
A. urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified
B. urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
C. urn:oasis:names:tc:SAML:2.0:nameid-format:transient
D. urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Answer: C
Explanation:
https://help.webex.com/en-us/article/lfu88u/Single-Sign-On-Integration-in-Control-Hub#CMGT_TP_S41BS518_00
QUESTION 163
What is the default DSCP value for video traffic that is routed through an Expressway server?
A. 36
B. 24
C. 0
D. 34
Answer: D
Explanation:
Video: The DSCP value to be stamped onto SIP and H.323 video media traffic routed through the Expressway. Note: you must restart the system for any changes to take effect. Default: 34. Range 0 to 63.
QUESTION 164
An administrator deployed the directory connector to synchronize the on-premises Active Directory with the Webex cloud and needs to map attributes from the AD to the corresponding attributes in the cloud. To which Webex cloud attribute must the user Account Control attribute be mapped to ensure that users are synced properly?
A. givenName
B. ds-pwp-account-disabled
C. SipAddresses:type=enterprise
D. displayName
Answer: B
Explanation:
This attribute is used for user synchronization. Make sure the userAccountControl attribute is mapped to ds-pwp-account-disabled or users won’t be synced properly.
QUESTION 165
What is the result if force encryption for media is enabled in the Expressway on a zone that points to a system/endpoint that is not configured for encryption?
A. The call is dropped.
B. The call works with one end only sending encrypted media.
C. The call renegotiates for unencrypted media.
D. The call uses encryption if available, or it falls back to unencrypted media.
Answer: A
QUESTION 166
A Webex engineer is configuring SSO in Control Hub with Active Directory Federation Services. The engineer wants to authenticate users for all the applications that they are given rights to. The engineer also wants to eliminate further prompts when users switch applications during a particular session. Which action tells ADFS the fields to map to Webex to identify a user?
A. Send LDAP attributes as claims.
B. Create claim rules for Webex authentication
C. Add a relying party trust to the ADFS.
D. Map the E-mail-addresses LDAP attribute to the uid outgoing claim type.
Answer: D
QUESTION 167
What is the name of the Webex core service that delivers group messaging, one-to-one messaging, presence, and file sharing?
A. Cisco Webex Messaging
B. Cisco Webex App
C. Cisco Webex ONE
D. Cisco Jabber Online
Answer: A
Explanation:
https://www.cisco.com/c/en/us/products/collateral/conferencing/webex-meeting-center/datasheet-c78-732060.html
QUESTION 168
An Expressway pairs deployed for Mobile and Remote Access. An administrator installs a new server certificate on the Expressway-E. After installing the new certificate, the UC Traversal zone between Expressway-C and Expressway-E is active. Still, Jabber Mobile and Remote Access clients cannot log in over the Expressway. The certificate Common Name is the FQDN of Expressway-E, “expe01 example.com”, and the certificate contains no additional names. Which Subject Alternate Name must be added to the certificate to allow Jabber Mobile and Remote Access clients to log in successfully?
A. FQDN of the Expressway-C, “expc01.example.local”
B. registration domain, “example.com” or “collab-edge.example.com”
C. Cisco UCM cluster FQDN, “cucmcluster.example.local”
D. FQDN of the Expressway-E, “expe01.example.com”
Answer: B
QUESTION 169
An administrator made changes to a directory connector for Webex AD synchronization. The number of users synchronized is quite large and the change should affect only a limited number of users. How can the administrator check the result before executing the synchronization?
A. Initiate an incremental synchronization from the Director Connector app on the on-premises Windows server because it will ask to save the changes.
B. Initiate a dry run of an incremental synchronization from the Director Connector app on the on-premises Windows server.
C. Initiate a dry run of an incremental synchronization from the Director Connector in Control Hub.
D. Initiate an incremental synchronization from the Director Connector in Control Hub because it will ask to save changes.
Answer: B
Explanation:
To safely preview changes before applying them to Webex, the administrator should perform a dry run of an incremental synchronization using the Directory Connector app on the on-premises Windows server. This dry run simulates the sync and shows which users would be added, updated, or removed — without making any actual changes — allowing the admin to verify that only the intended users are affected.
QUESTION 170
Which two protocols are supported on Expressway Zones? (Choose two.)
A. SIP
B. H.248
C. MGCP
D. SCCP
E. H.323
Answer: AE
QUESTION 171
Which two scenarios need a proper DNS configuration on Expressway servers? (Choose two.)
A. Expressway servers verify the common name attribute in server certificates.
B. Expressway servers route calls based on SIP URI.
C. Admins avoid IP address configuration for neighbor zone peers.
D. Expressway servers use NTP peer authentication for secure time updates.
E. Admins download software updates from the Cisco website via WebUI.
Answer: BC
Explanation:
DNS is essential for SIP URI routing as it allows Expressway servers to resolve domain names to IP addresses, facilitating call routing.
Using DNS eliminates the need to manually configure IP addresses for neighbor zones, allowing for dynamic resolution based on hostname, which simplifies configuration and management.
QUESTION 172
An engineer is configuring the Expressway cluster to allow Jabber clients that are outside the enterprise network to register, make calls, and send instant messages using the internal Cisco UCM. Which action must be taken before a secure UC traversal zone is added to the Expressway-C?
A. Add Instant Message and Presence service clusters.
B. Add a Cisco UCM cluster.
C. Configure SIP OAuth mode.
D. Establish certificate trust between the Expressway-C and Expressway-E.
Answer: D
QUESTION 173
A collaboration engineer is configuring Cisco Webex Edge for video conferencing devices to provide support for Cisco Webex Control Hub configuration management. Which configuration control mode must be set on Cisco UCM for Control Hub to manage the on-premises device configuration?
A. Webex Edge only
B. endpoing only
C. Cisco UCM and endpoint
D. Cisco UCM only
Answer: D
QUESTION 174
Which technique can be used to have media flow directly between two endpoints that have a NAT between them?
A. The endpoints can use a Cisco router API to disable NAT temporarily.
B. Cisco Mobile and Remote Access allows for media traffic directly between two internal endpoints.
C. Cisco access protocol can make a direct path between endpoints on an internal network.
D. STUN makes UDP connections through NAT devices.
Answer: D
QUESTION 175
Refer to the exhibit. An engineer must configure a B2B traversal zone. Trusted certification authority and server certificates are uploaded to Cisco Expressway-C and Expressway-E servers. After the traversal zone configuration is completed in Expressway-C, the error message in the exhibit appears. What are the two reasons for the error? (Choose two.)
A. The peer 1 address in Expressway-C must be replaced by the FQDN of Expressway-C.
B. The peer 1 address in Expressway-C is not the FADN of Expressway-E.
C. The communication port is not set to 7001.
D. The FQDN of Expressway-E cannot be resolved by the DNS server.
E. The traversal zone TLS verify subject name in Expressway-E does not match the FQDN of Expressway-C.
Answer: BE
QUESTION 176
In which mode does the Cisco Expressway act as a SIP-H.323 gateway only if one or more of the endpoints are locally registered?
A. registered only
B. gateway only
C. off
D. on
Answer: A
QUESTION 177
Refer to the exhibit. When users sign in to Cisco Jabber through Mobile and Remote Access, they cannot see their own photo or the photo of their contacts next to each name. Which action must be taken in Cisco Expressway-C to resolve the issue?
A. Add an HTTP allow list for the Instant Message and Presence server.
B. Add an allow call policy rule from the Cisco UCM traversal zone.
C. Upload the missing Instant Messaging and Presence server certificate to fix the connection to its server.
D. Add an HTTP allow list for the web server that contains the photos.
Answer: D
QUESTION 178
When does the Webex App Endpoint send media to the Video Mesh cluster during a meeting?
A. when the Webex cloud media services are offline
B. when there is insufficient bandwidth at the MPLS WAN edge.
C. when the round-trip delay to the Video Mesh cluster is shorter than the round-trip delay to the Webex cloud media services
D. when there is insufficient bandwidth at the internet edge
Answer: C
QUESTION 179
In a larger Cisco Collaboration deployment, a user requires the advanced file transfer function in Cisco Jabber while the client is using Mobile and Remote Access. The deployment has multiple Expressway clusters and internal Cisco UCM clusters. Which configuration must be applied on Cisco Expressway-C for this function to be available?
A. The HTTP Allow List must be manual or use Automatic inbound rules updated to include all Cisco IM and Presence servers.
B. The HTTPS Allow List must be manual or use Automatic inbound rules updated to include all Cisco IM and Presence servers.
C. The HTTP Allow List must use Automatic update rules to include all Cisco UCM servers.
D. The HTTP Allow List must use Automatic update rules to include all Cisco IM and Presence servers.
Answer: A
Explanation:
For the AFT feature to work across Expressway, make sure that all Unified CM IM and Presence Service nodes are on the allow list, whether manually or automatically added.
Automatic Inbound Rules
Edit the HTTP Allow List
Upload Rules to the HTTP Allow List
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X12-5/exwy_b_mra-expressway-deployment-guide/exwy_b_mra-expressway-deployment-guide_chapter_01000.html#task_FED878914C77C914B5FD7C7108F5CDCE
QUESTION 180
Refer to the exhibit. Which SIP trunk security profile configuration on the Cisco UCM server is used for a secured SIP trunk to an Expressway server that is already integrated with the Cisco UCM for Mobile and Remote Access?
A. Device Security Mode: Encrypted
Incoming Transport Type: TLS
Outgoing Transport Type: TLS
Incoming Port*: 5061
B. Device Security Mode: Encrypted
Incoming Transport Type: TLS
Outgoing Transport Type: TLS
Incoming Port*: 6061
C. Device Security Mode: Non-Secure
Incoming Transport Type: TCP+UDP
Outgoing Transport Type: TCP
Incoming Port*: 5060
D. Device Security Mode: Authenticated
Incoming Transport Type: TLS
Outgoing Transport Type: TLS
Incoming Port*: 6061
Answer: B
QUESTION 181
An engineer is configuring Cisco Expressway-E and needs to implement toll fraud prevention. Which configuration meets this requirement?
A. Enable SIP ALG inspection on the network address translation firewall.
B. Enable and configure local call policy.
C. Enable and configure the Expressway-E firewall.
D. Configure the external firewall to block specific IPs.
Answer: B
Explanation:
Toll Fraud Prevention is quite literally one of the reasons Call Policy is even available on Expressways.
QUESTION 182
What is the default file extension for saving Cisco Expressway-C backups when using the Google Chrome browser?
A. .tar.gz.enc
B. .tar.tar.gz
C. .zip
D. .tar.gz.gz
Answer: A
QUESTION 183
In Cisco Expressway, which information from an incoming search request does the pre-search transform configuration allow to be modified?
A. calling party
B. called address
C. Source IP address
D. CLID
Answer: B
Resources From:
1.2026 Latest Braindump2go 300-820 Exam Dumps (PDF & VCE) Free Share:
https://www.braindump2go.com/300-820.html
2.2026 Latest Braindump2go 300-820 PDF and 300-820 VCE Dumps Free Share:
https://drive.google.com/drive/folders/1Y1WEbhtwpz-A0yA773hPEJ5vTZD1eY_9?usp=sharing
3.2026 Free Braindump2go 300-820 Questions Download:
https://www.braindump2go.com/free-online-pdf/300-820-VCE-Dumps(115-183).pdf
Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!