CLCOR Practice Test 3 — 10 Questions

Question 1

A Cisco Webex Room Kit is registered to CUCM on-premises. The administrator wants to enable encryption for signaling and media. Which protocol does the device use for secure signaling when registered to CUCM?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SIP over TLS. Cisco Webex Room devices use SIP over TLS for secure signaling when registered to CUCM. This encrypts the SIP messages, protecting call control information. For media encryption, SRTP is used. Together, they provide a secure collaboration environment. The administrator should ensure that CUCM is configured with a secure SIP profile and that the device trusts the CUCM certificate.

Answer

HTTPS

Answer

TLS for media

Answer

SRTP

Question 2

Which THREE actions are possible using SIP profiles on a CUBE?

Accepted Answer

Modify SIP headers. SIP profiles on Cisco Unified Border Element (CUBE) are used to manipulate SIP signaling by inspecting and altering SIP messages, so option A (Modify SIP headers) is correct because rules within a SIP profile can rewrite existing header values such as From, To, or Diversion. Option B (Add SIP headers) is correct because SIP profiles support the 'request' and 'response' header-insertion rules that inject new headers into inbound or outbound SIP messages. Option C (Remove SIP headers) is correct because SIP profiles can strip unwanted headers via header-removal rules, which is common for privacy or interop scenarios. Option D (Change voice codec) is not a SIP-profile function; codec negotiation is handled by dial peers (codec preference lists, 'codec' commands) and SDP, not by SIP header manipulation. Option E (Route calls to PSTN) is also not a SIP-profile action; call routing is determined by dial-peer matching and translation rules, while SIP profiles only affect SIP message content.

Answer

Change voice codec

Answer

Route calls to PSTN

Question 3

You are configuring Webex Hybrid Data Security (HDS). What is the purpose of the 'Key Management Service' (KMS) in this architecture?

Accepted Answer

To allow the enterprise to maintain control over encryption keys. In Webex Hybrid Data Security (HDS), the Key Management Service (KMS) is a customer-deployed component that stores and manages the encryption keys used to encrypt Webex content (messages, files, whiteboards). Its core purpose is to give the enterprise sole control over those keys, so Cisco cannot decrypt the content — this is the 'hybrid' data security promise. Thus, the correct answer is that KMS allows the enterprise to maintain control over encryption keys.

Answer

To authenticate users against local Active Directory

Answer

To facilitate the storage of encrypted meeting recordings

Answer

To manage SIP signaling encryption

Question 4

A collaboration engineer is deploying Cisco Webex Hybrid Message Service with Cisco Unified Communications Manager (CUCM) and Expressway-C. The requirement is to enable secure instant messaging and presence between on-premises CUCM users and Webex. Which two components are required for this deployment? (Choose two.)

Accepted Answer

Cisco Unified Communications Manager IM and Presence Service. Hybrid Message Service requires the Expressway-C with the Hybrid Message Service connector and the on-premises IM and Presence Service. The connector bridges the on-premises IM and Presence with Webex, enabling secure instant messaging and presence federation. Other components like Webex Meetings Server, VCS, or CUBE are not part of this architecture.

Answer

Cisco Webex Meetings Server

Answer

Cisco Unified Border Element (CUBE)

Answer

Cisco TelePresence Video Communication Server (VCS)

Question 5

When deploying Webex Hybrid Services, what is the purpose of the Expressway-C cluster?

Accepted Answer

To host the connectors that communicate with the Webex cloud.. The Expressway-C (Concentrator) cluster sits inside the enterprise network and hosts the various connectors (e.g., Calendar Connector, Call Connector, Management Connector, and the edge traversal pair) that establish secure outbound connections to the Webex cloud. It acts as the trusted on-premises endpoint that brokers hybrid service traffic between internal resources like CUCM, Exchange, and the Webex cloud.

Answer

To act as a firewall for all enterprise traffic.

Answer

To store all user messages on-premises.

Answer

To manage public DNS records for the organization.

Question 6

An administrator needs to enforce a bandwidth limit for video calls at a specific site in CUCM. Which configuration object should be used?

Accepted Answer

Location. In Cisco Unified CM, the Location object is the configuration element that enforces call admission control (CAC) by defining the maximum audio and video bandwidth available between locations. When a video call is placed, CUCM subtracts the call's bandwidth from the Location's video bandwidth pool, and if the limit is exceeded, the call is denied or rerouted. This makes Location the correct object for enforcing a per-site bandwidth limit for video calls.

Answer

Region

Answer

Partition

Answer

Device Pool

Question 7

What is the primary function of a 'Class Map' in a Cisco IOS QoS configuration?

Accepted Answer

To categorize and match specific traffic flows. A Class Map in Cisco IOS QoS is used to identify and classify traffic by matching criteria such as ACLs, DSCP, CoS, or NBAR protocols. It defines 'what' traffic to match, and is later referenced by a Policy Map that defines the action. This separation of classification (class-map) from action (policy-map) is the foundation of Modular QoS CLI (MQC).

Answer

To define the action taken on traffic

Answer

To set the DSCP value for a packet

Answer

To assign a specific interface for traffic

Question 8

An administrator is troubleshooting a failed Hybrid Calendar setup. The 'Connector' shows as 'Down' in Control Hub. What is the most likely reason?

Accepted Answer

The Expressway-C host cannot reach the cloud over port 443.. The Hybrid Calendar Connector in Control Hub relies on the on-premises Expressway-C (or Cisco Webex Hybrid Services connector) maintaining an outbound TLS connection to Webex cloud endpoints over TCP 443. When that outbound path is blocked by a firewall, proxy, or DNS failure, Control Hub reports the connector status as 'Down' because the heartbeat to the cloud cannot be established. License, user password, and AD group issues would not cause the connector itself to show Down — they would affect calendar processing for individual users, not the connector health state.

Answer

The calendar integration license is invalid.

Answer

The user's password expired.

Answer

The user is not in the correct group in Active Directory.

Question 9

Which log file is most useful for troubleshooting registration issues between an IP phone and CUCM?

Accepted Answer

Cisco CallManager Traces. Cisco CallManager Traces (often called SDI/SDL traces) capture the detailed signaling exchange between the IP phone and CUCM during registration, including SCCP/SIP messages, device state changes, and error codes. These traces are the primary tool for diagnosing why a phone fails to register, as they show the exact point of failure in the registration handshake. Other logs either provide aggregated health metrics or focus on different services (TFTP, Tomcat) that are not directly involved in the registration signaling path.

Answer

System Health Reports

Answer

Cisco TFTP Logs

Answer

Cisco Tomcat Logs

Question 10

A CUBE is receiving calls but rejecting them due to '488 Not Acceptable Here'. What is the most likely reason?

Accepted Answer

Codec mismatch. SIP 488 'Not Acceptable Here' is returned when the called party cannot support the media parameters in the offer — most commonly a codec mismatch where the offered codec (e.g., G.729) is not configured on any matching dial-peer on the CUBE. CUBE rejects the INVITE because it cannot negotiate a compatible codec between the inbound and outbound legs.

Answer

Authentication failure

Answer

SIP registration expired

Answer

Dial-peer inactive