Courseiva

Cisco Implementing Cisco Collaboration Core Technologies (CLCOR, 350-801, v2.0 blueprint, CCNP Collaboration) (CLCOR) (CLCOR) — Questions 151–225

259 questions total · 4 pages · All types, answers revealed

Page 2

Page 3 of 4

Page 4
151
MCQmedium

You are configuring QoS for a Cisco Unified Communications Manager (CUCM) deployment. You need to ensure that audio media traffic between endpoints is marked correctly. Which DSCP value should be assigned to RTP audio traffic according to the Cisco SRND best practices?

A.DSCP 46 (EF)
B.DSCP 34 (AF41)
C.DSCP 24 (CS3)
D.DSCP 0 (BE)
AnswerA

DSCP 46 maps to Expedited Forwarding, the per-hop behaviour the Cisco SRND specifies for voice RTP media. EF provides low latency, low jitter and guaranteed bandwidth through priority queuing, matching the marking requirement for audio media between endpoints.

Why this answer

Cisco SRND best practices mark voice RTP media with DSCP EF (46), which maps to the Expedited Forwarding per-hop behavior defined in RFC 3246. EF provides low latency, low jitter, and low loss — exactly what voice media requires. Call signaling is marked CS3 (24), and video is typically AF41 (34), so EF is reserved for audio.

Exam trap

CLCOR often tests whether candidates confuse voice (EF 46), video (AF41 34), and signaling (CS3 24) markings — mixing up these three is the most common QoS mistake.

How to eliminate wrong answers

Option B is wrong because DSCP 34 (AF41) is the standard marking for interactive video, not voice audio — using it for voice would put audio in the wrong queue and degrade call quality. Option C is wrong because DSCP 24 (CS3) is used for call signaling (SCCP, SIP) and other control traffic, not for RTP media. Option D is wrong because DSCP 0 (BE) is best-effort with no QoS treatment, which would cause voice quality problems under congestion.

152
MCQmedium

You are designing a Cisco Collaboration deployment for a hospital where 911 calls must always be routed to the nearest Public Safety Answering Point (PSAP) based on the physical location of the calling device. The hospital has multiple buildings across a campus, and wireless IP phones (Cisco 8821) are used by nurses who roam between buildings. Which CUCM feature should you implement to ensure that emergency calls are routed with the correct location information?

A.Enhanced Location Call Admission Control (ELCAC) in CUCM
B.Cisco Unified Survivable Remote Site Telephony (SRST)
C.Cisco Emergency Responder (CER) integrated with CUCM
D.Device Mobility in Cisco Unified Communications Manager
AnswerC

Cisco Emergency Responder tracks the switch port or wireless access point to determine the exact physical location of the caller. For wireless phones, it uses the associated access point or switch information to update the emergency response location dynamically. This ensures that 911 calls are routed to the correct PSAP and that the location is transmitted to the emergency dispatcher.

Why this answer

Cisco Emergency Responder is the dedicated solution for E911 location tracking in Cisco Collaboration. It integrates with CUCM and network infrastructure to map devices to emergency response locations. Device Mobility, SRST, and ELCAC serve different purposes and do not provide the required location granularity for emergency calls.

Exam trap

The trap here is assuming that Device Mobility or ELCAC can provide location tracking for E911, but they are designed for call routing and bandwidth management, not emergency location.

153
MCQeasy

A user's Cisco IP Phone 8841 is registered to Cisco Unified Communications Manager but cannot place calls to any internal or external numbers. The phone displays 'Registration Complete' but every call attempt results in a fast busy tone. Which configuration element is most likely missing or misconfigured for this phone?

A.The phone's Device Security Profile is set to Non-Secure.
B.The phone's Network Locale is set to United States.
C.The phone's Device Pool is not assigned to a Region.
D.The phone's Calling Search Space does not include the partitions containing the dialed numbers.
AnswerD

The Calling Search Space (CSS) determines which partitions a device can search for dialed numbers. If the CSS does not include the partitions where the route patterns or directory numbers reside, the phone cannot match any dialed digits, resulting in a fast busy tone. This is a common misconfiguration when a phone can register but cannot make calls.

Why this answer

A registered phone that cannot place any calls typically has a Calling Search Space that lacks access to the partitions containing the dialed numbers. The CSS must include the partitions where directory numbers and route patterns reside. Without this, digit analysis fails and the phone receives a fast busy tone.

Other settings like Region or security profile do not block call placement in this manner.

Exam trap

The trap here is assuming that registration success means all configuration is correct; however, a phone can register without having a functional Calling Search Space for dialing.

154
MCQeasy

What is the primary function of a 'Class Map' in a Cisco IOS QoS configuration?

A.To categorize and match specific traffic flows
B.To define the action taken on traffic
C.To set the DSCP value for a packet
D.To assign a specific interface for traffic
AnswerA

A class map defines match criteria such as ACLs, DSCP values or protocol ports, identifying which packets belong to a traffic class. It performs classification only; the policy map then applies actions, so the class map's primary function is categorising and matching specific traffic flows.

Why this answer

A Class Map in Cisco IOS QoS is used to identify and classify traffic by matching criteria such as ACLs, DSCP, CoS, or NBAR protocols. It defines 'what' traffic to match, and is later referenced by a Policy Map that defines the action. This separation of classification (class-map) from action (policy-map) is the foundation of Modular QoS CLI (MQC).

Exam trap

CLCOR often tests the class-map vs. policy-map distinction — candidates confuse classification (match) with action (set/police), picking the option that describes policy-map behavior.

How to eliminate wrong answers

Option B is wrong because defining the action taken on traffic is the role of the Policy Map, not the Class Map — the policy-map references a class-map and applies actions like police, shape, or bandwidth. Option C is wrong because setting the DSCP value for a packet is a marking action performed inside a policy-map (via the 'set dscp' command), not a class-map function. Option D is wrong because assigning an interface for traffic is done via service-policy attachment or routing, not by a class-map, which only matches traffic characteristics.

155
MCQmedium

Which service must be running for a Cisco IP Phone to download its configuration file via TFTP?

A.Cisco CallManager
B.Cisco CTIManager
C.Cisco TFTP
D.Cisco Database Layer Monitor
AnswerC

Cisco TFTP is the service that must be running on the server for a Cisco IP Phone to download its configuration file via TFTP. Without it, the phone cannot retrieve its config and registration fails.

Why this answer

Cisco IP Phones download their configuration files (XML) from the CUCM TFTP service, which runs as the 'Cisco TFTP' service on the CUCM server. Without this service running, phones cannot retrieve their config and will fail to register. The Cisco TFTP service is separate from CallManager and must be active on at least one node in the cluster.

Exam trap

CLCOR often tests the distinction between CUCM services: candidates confuse CallManager (registration) with TFTP (file download), so they pick CallManager when the question asks about configuration file download.

How to eliminate wrong answers

Option A is wrong because Cisco CallManager (Cisco CallManager service) handles call processing and registration, not file downloads. Option B is wrong because Cisco CTIManager provides computer telephony integration (CTI) services for applications like Jabber and contact centers, not TFTP. Option D is wrong because Cisco Database Layer Monitor monitors database replication and health, not configuration file delivery.

156
MCQhard

You need to implement redundancy for a remote site using Survivable Remote Site Telephony (SRST). Which parameter in the Device Pool ensures that the phones fail over to the local router during a CUCM WAN outage?

A.AAR Calling Search Space
B.Cisco Unified CM Group
C.SRST Reference
D.Network Locale
AnswerC

The SRST Reference in the Device Pool points phones to the local router acting as the survivable call-control fallback. When the CUCM WAN link fails, phones use this reference to register with the SRST gateway, satisfying the failover requirement.

Why this answer

The SRST Reference is a Device Pool parameter that points to an SRST Reference object, which contains the IP address of the local router running SRST. When CUCM is unreachable, phones configured with that Device Pool fall back to the SRST router for call processing. This is the specific parameter that enables SRST failover for a remote site.

Exam trap

CLCOR often tests the distinction between CUCM Group (CUCM server redundancy) and SRST Reference (router failover) — candidates confuse the two because both appear in the Device Pool.

How to eliminate wrong answers

Option A is wrong because AAR (Automated Alternate Routing) CSS is used to reroute calls over the PSTN when bandwidth is insufficient — it is not the SRST failover mechanism. Option B is wrong because the Cisco Unified CM Group defines the ordered list of CUCM servers a device registers with for CUCM redundancy, not SRST router failover. Option D is wrong because Network Locale defines tones and ring cadences for a region, unrelated to SRST failover.

157
MCQeasy

Which object acts as the primary container for a specific set of users in CUCM?

A.Device Pool
B.Location
C.User Group
D.Partition
AnswerC

A User Group in CUCM is the primary container for a specific set of users, grouping them for shared feature access, permissions and role assignments. It satisfies the stem's requirement by acting as the direct organisational container, unlike roles or partitions which serve different functions.

Why this answer

In Cisco Unified Communications Manager (CUCM), a User Group is the primary container for a set of users and serves as the mechanism for assigning roles and permissions. It aggregates users for administrative purposes, such as granting them access to CUCM administration or specific features via role assignments.

Exam trap

CLCOR often tests the confusion between User Groups (user administration) and Device Pools (device configuration) — candidates pick Device Pool because it sounds like a grouping mechanism, but it groups devices, not users.

How to eliminate wrong answers

Option A is wrong because a Device Pool defines a set of common device attributes (region, date/time group, softkey template, SRST reference) applied to phones and gateways, not a container for users. Option B is wrong because a Location in CUCM is used for call admission control (bandwidth management) between sites, not for grouping users. Option D is wrong because a Partition (along with Calling Search Space) controls call routing and dial plan access; it organizes directory numbers, not users.

158
MCQeasy

A collaboration administrator needs to verify that the Webex Hybrid Services connectors are healthy and operational. Where in Cisco Webex Control Hub can the administrator check the status of the connectors?

A.Monitoring > Hybrid Services
B.Troubleshooting > Hybrid Services
C.Services > Hybrid Services
D.Users > Hybrid Services
AnswerA

In Control Hub, the Monitoring section includes Hybrid Services, where you can view the health and status of each deployed hybrid service connector. This page shows whether connectors are up, down, or in an error state. It is the central place to monitor the operational status of Hybrid Calendar, Message, Calling, and other services. This is the correct answer.

Why this answer

The health status of Webex Hybrid Services connectors is found under Monitoring > Hybrid Services in Control Hub. This dashboard provides a comprehensive view of each connector's status, including connectivity and any reported errors. Administrators use this page to quickly assess whether hybrid services are functioning correctly and to identify any components that require attention.

Exam trap

The trap here is confusing the configuration page (Services > Hybrid Services) with the monitoring page (Monitoring > Hybrid Services); the former is for setup, the latter for health status.

159
MCQhard

An administrator configures a Translation Pattern of 9XXX in partition INTERNAL_PT with Calling Search Space ROUTE_CSS. A user in partition USER_PT with CSS ROUTE_CSS dials 8001. The Translation Pattern is fully matched, and its Called Party Transformation CSS is set to TRANSFORM_CSS. Which calling search space is used to search for the final translated pattern after the digit transformation is applied?

A.ROUTE_CSS, because it is the calling search space assigned directly to the Translation Pattern.
B.The CSS of the device that originated the call, because device-level CSS overrides pattern-level transformation settings.
C.USER_PT's CSS, because the calling user's original calling search space is preserved throughout translation.
D.TRANSFORM_CSS, because the Called Party Transformation CSS on the Translation Pattern governs the post-transformation search.
AnswerD

When a Translation Pattern transforms the called number, CUCM performs a second lookup using the Called Party Transformation CSS configured on that Translation Pattern. This CSS determines which partitions are searched for the new digits, allowing the administrator to route the translated number differently from the original dialed digits.

Why this answer

A Translation Pattern performs two distinct lookups. The first uses the calling party's CSS to match the Translation Pattern in its partition. The second uses the Called Party Transformation CSS on the Translation Pattern to locate the final destination for the transformed digits.

Configuring TRANSFORM_CSS ensures the translated number is searched only in the intended partitions.

Exam trap

The trap here is assuming the original device CSS or the Translation Pattern's own CSS still controls the final lookup after digit transformation.

160
MCQhard

An administrator is troubleshooting a failed Hybrid Calendar setup. The 'Connector' shows as 'Down' in Control Hub. What is the most likely reason?

A.The calendar integration license is invalid.
B.The Expressway-C host cannot reach the cloud over port 443.
C.The user's password expired.
D.The user is not in the correct group in Active Directory.
AnswerB

The Connector status reflects the Expressway-C's connection to the Cisco cloud. If outbound TCP 443 is blocked, the connector cannot register and shows Down, making this the most likely cause of the failed Hybrid Calendar setup.

Why this answer

The Hybrid Calendar Connector in Control Hub relies on the on-premises Expressway-C (or Cisco Webex Hybrid Services connector) maintaining an outbound TLS connection to Webex cloud endpoints over TCP 443. When that outbound path is blocked by a firewall, proxy, or DNS failure, Control Hub reports the connector status as 'Down' because the heartbeat to the cloud cannot be established. License, user password, and AD group issues would not cause the connector itself to show Down — they would affect calendar processing for individual users, not the connector health state.

Exam trap

CLCOR often tests whether candidates confuse connector health (cloud reachability over 443) with user-level provisioning issues like licensing, passwords, or AD group membership — the connector status reflects the tunnel, not the user.

How to eliminate wrong answers

Option A is wrong because an invalid calendar integration license would prevent specific users from being provisioned for Hybrid Calendar, but the connector's health status in Control Hub is driven by cloud reachability, not licensing. Option C is wrong because an expired user password affects that user's calendar authorization (OAuth token refresh), not the connector's up/down state in Control Hub. Option D is wrong because AD group membership determines which users are synced for calendar services, but a misconfigured group would not cause the connector itself to report Down.

161
MCQeasy

Which protocol is primarily used for the transmission of real-time voice and video data between two endpoints?

A.SCCP
B.TFTP
C.RTP
D.SIP
AnswerC

RTP carries real-time voice and video media between endpoints, running over UDP to avoid retransmission delays. It provides the sequencing, timestamps and payload type identification needed for streaming audio and video, while signalling protocols such as SIP establish the session.

Why this answer

RTP (Real-time Transport Protocol) is the protocol that actually carries the digitized voice and video media streams between endpoints in real-time communications. It runs over UDP to minimize latency and jitter, and is paired with RTCP for quality feedback. SIP, SCCP, and TFTP are signaling or provisioning protocols, not media transport.

Exam trap

CLCOR often tests the distinction between signaling protocols (SIP, SCCP) and media transport protocols (RTP), so candidates who see 'voice and video' and think 'SIP' pick the wrong answer.

How to eliminate wrong answers

Option A is wrong because SCCP (Skinny Client Control Protocol) is a Cisco proprietary signaling protocol used between Cisco IP phones and CUCM for call setup and control, not for carrying media. Option B is wrong because TFTP is a trivial file transfer protocol used to download configuration files and firmware to IP phones, not to transmit real-time voice/video. Option D is wrong because SIP (Session Initiation Protocol) is a signaling protocol for establishing, modifying, and tearing down sessions — it negotiates the media but does not transport it.

162
MCQeasy

An administrator is configuring Cisco Webex Hybrid Directory Service to synchronize users from an on-premises Active Directory to Webex Control Hub. The synchronization is not working, and the connector status in Control Hub shows 'Not Connected'. What is the most likely cause?

A.The Cisco Directory Connector service is not running or is not properly registered with Webex.
B.The Expressway-C certificate has expired.
C.The Active Directory domain controller is not reachable from the Expressway-C.
D.The Webex Control Hub administrator account does not have the 'Directory Synchronization' role.
AnswerA

The Cisco Directory Connector is a Windows service that synchronizes users from Active Directory to Webex. If the service is stopped or not registered correctly, the connector status in Control Hub will show 'Not Connected'. Ensuring the service is running and registered with the correct credentials is essential for synchronization.

Why this answer

Hybrid Directory Service uses the Cisco Directory Connector installed on a Windows server to synchronize Active Directory users to Webex. If the connector service is stopped or not registered, Control Hub will show 'Not Connected'. Checking the service status and registration is the first step to resolve synchronization issues.

Exam trap

The trap here is assuming that the Expressway-C is involved in directory synchronization, when in fact it is not used for Hybrid Directory Service.

163
Multi-Selecteasy

Which THREE components are part of the CUCM redundancy architecture?

Select 3 answers
A.Cisco Unified CM Group
B.The TFTP service.
C.SRST Reference
D.Publisher and Subscriber nodes
E.Cisco Unity Connection.
AnswersA, C, D

A Cisco Unified CM Group defines an ordered list of nodes that devices use for registration failover, so if the primary node fails, endpoints re-register with the next listed node. This satisfies the stem's requirement by supplying the device-side redundancy mechanism within CUCM architecture.

Why this answer

In Cisco Unified Communications Manager (CUCM) redundancy architecture, the Cisco Unified CM Group (option A) is a correct component because it defines the ordered list of CUCM nodes that a device (phone, gateway, or trunk) registers with and falls back to, providing call-processing redundancy. Publisher and Subscriber nodes (option D) are correct because the cluster's database replication model relies on a Publisher providing the master configuration database and Subscribers receiving replicated copies, so if a node fails, others continue call processing. SRST Reference (option C) is correct because it points to a Survivable Remote Site Telephony gateway that provides fallback call processing for remote-site phones when WAN connectivity to the CUCM cluster is lost, which is a key element of the overall redundancy design.

The TFTP service (option B) is not a redundancy component; it is a service used for endpoint configuration file download and firmware, and while it can run on multiple nodes, it is not itself part of the redundancy architecture. Cisco Unity Connection (option E) is a separate voicemail/messaging application, not a component of CUCM call-processing redundancy.

Exam trap

CLCOR often tests the misconception that services like TFTP or external products like Unity Connection are part of CUCM redundancy, when the exam expects the three canonical components: CM Group, SRST Reference, and Publisher/Subscriber nodes.

164
MCQmedium

A CUBE is configured to route calls between Cisco Unified Communications Manager and a SIP provider. The provider sends calls with a '+1' prefix, but the internal dial plan expects calls without the '+'. Which CUBE feature should be used to strip the '+' from the incoming called number before extending the call to Unified CM?

A.dial-peer destination-pattern with 'no +'
B.voice translation-profile
C.voice-class uri
D.SIP normalization script
AnswerB

A voice translation-profile with a translation rule can match the '+1' prefix and strip it, modifying the called number before the call is routed. This is the standard method for number manipulation on CUBE. Applying it to the inbound dial-peer from the provider ensures the '+' is removed before the call is sent to Unified CM.

Why this answer

To strip the '+' prefix from the incoming called number, you should use a voice translation-profile with a translation rule that matches the '+' and removes it. Apply this profile to the inbound dial-peer from the provider. This modifies the called number before the call is routed to Unified CM, ensuring compatibility with the internal dial plan.

Exam trap

The trap here is thinking that SIP normalization scripts are needed for simple digit manipulation, when translation profiles are the correct and efficient tool.

165
MCQeasy

What is the default behavior for DSCP markings on traffic originating from a Cisco IP Phone that has not been configured with specific QoS policies?

A.Marked as DSCP 34 (AF41)
B.Traffic is not marked until a policy-map is applied
C.Marked as DSCP 46 for voice and CS3 for signaling
D.Marked as DSCP 0 (Best Effort)
AnswerC

Absent configured QoS policies, the phone applies its default markings: voice media as DSCP 46 (EF) for low-latency treatment and call signalling as CS3, allowing the network to prioritise voice traffic out of the box.

Why this answer

Cisco IP Phones ship with a built-in QoS trust behavior: voice media (RTP) is marked DSCP 46 (EF) and call signaling (SCCP/SIP) is marked CS3 (DSCP 24) by default, even before any switch or CUCM QoS policy is applied. This allows the phone to self-mark its traffic so the upstream switch can trust it via 'mls qos trust device cisco-phone' or 'trust dscp'. The phone only re-marks if a CUCM softphone/phone security profile or a switch policy overrides it.

Exam trap

CLCOR often tests the assumption that QoS markings require an explicit policy-map on the phone; in reality, Cisco IP Phones self-mark voice as EF (46) and signaling as CS3 by default, and the exam expects you to know those exact values.

How to eliminate wrong answers

Option A is wrong because DSCP 34 (AF41) is the standard marking for interactive video, not voice; voice media uses EF (46). Option B is wrong because the phone marks its own traffic out of the box — no policy-map is required on the phone for default markings to appear. Option D is wrong because DSCP 0 (Best Effort) is the default for untagged/generic host traffic, not for Cisco IP Phone voice and signaling streams, which are pre-marked.

166
MCQhard

A CUBE is receiving calls but rejecting them due to '488 Not Acceptable Here'. What is the most likely reason?

A.Codec mismatch
B.Authentication failure
C.SIP registration expired
D.Dial-peer inactive
AnswerA

SIP 488 Not Acceptable Here signals that the offered SDP media attributes, typically the codec list, cannot be matched by the receiving endpoint. A codec mismatch between the CUBE and the far end therefore causes calls to be rejected after signalling succeeds.

Why this answer

SIP 488 'Not Acceptable Here' is returned when the called party cannot support the media parameters in the offer — most commonly a codec mismatch where the offered codec (e.g., G.729) is not configured on any matching dial-peer on the CUBE. CUBE rejects the INVITE because it cannot negotiate a compatible codec between the inbound and outbound legs.

Exam trap

CLCOR often tests SIP response code interpretation — candidates see '488' and guess registration or authentication issues, but 488 is specifically a media/codec negotiation failure, not a signaling or registration problem.

How to eliminate wrong answers

Option B is wrong because authentication failures produce 401 Unauthorized or 407 Proxy Authentication Required, not 488. Option C is wrong because an expired SIP registration causes 403 Forbidden or 404 Not Found when the registrar cannot locate the endpoint, not a media negotiation failure. Option D is wrong because an inactive dial-peer typically results in 404 Not Found or 503 Service Unavailable when no matching dial-peer is found, not 488.

167
MCQeasy

In a multisite WAN deployment, which codec should you choose to balance voice quality and bandwidth consumption across a constrained link?

A.G.711
B.G.729
C.AAC-LD
D.G.722
AnswerB

G.729 compresses voice to 8 kbps using conjugate-structure algebraic-code-excited linear prediction, satisfying the constrained-link bandwidth requirement while retaining toll-quality speech. Its lower bitrate than G.711 (64 kbps) reduces consumption across the WAN, and its modest processing delay remains acceptable for multisite voice, balancing quality against available capacity.

Why this answer

G.729 is the correct choice because it compresses voice into an 8 kbps stream using CS-ACELP, delivering toll-quality voice at roughly one-eighth the bandwidth of G.711 (64 kbps). In a multisite WAN with constrained links, this ~8x bandwidth savings per call is the standard trade-off Cisco recommends for WAN voice transport. It is the de facto codec for bandwidth-constrained voice deployments.

Exam trap

CLCOR often tests the misconception that higher-bandwidth codecs like G.722 or G.711 are 'better' choices for quality, when the question's constraint (limited WAN bandwidth) makes the compressed G.729 the only correct answer.

How to eliminate wrong answers

Option A is wrong because G.711 is an uncompressed 64 kbps PCM codec (G.711u/a-law) that consumes the most bandwidth per call and is intended for LAN/high-bandwidth environments, not constrained WAN links. Option C is wrong because AAC-LD is a wideband/low-delay codec used primarily in video conferencing and TelePresence endpoints, not the standard codec for WAN voice call bandwidth optimization. Option D is wrong because G.722 is a 7 kHz wideband codec operating at 48/56/64 kbps — it improves voice quality but does not reduce bandwidth consumption, so it fails the 'constrained link' requirement.

168
MCQhard

You need to prevent certain internal users from making international calls while allowing them to dial local numbers. What is the most efficient way to implement this in CUCM?

A.Use an Application Dial Rule.
B.Modify the device pool's location.
C.Assign a CSS to the device that includes a Partition containing local routes but excludes a Partition containing international routes.
D.Configure a Route Filter on the Route Pattern.
AnswerC

Class of Service controls which partitions a device may dial, so a CSS containing the local-route partition but omitting the international partition blocks international dialling while permitting local calls. This is applied once at device level rather than per-line or via translation patterns.

Why this answer

A Calling Search Space (CSS) assigned to the device determines which partitions the device can search when matching dialed digits. By including a partition with local route patterns and excluding the partition containing international route patterns, the device simply cannot match international dialing patterns, so the call is blocked at the dial-plan level. This is the most efficient approach because it uses the existing CUCM dial-plan hierarchy rather than adding per-call filtering logic.

Exam trap

CLCOR often tests the misconception that Route Filters or Application Dial Rules enforce call-blocking policy, when in fact only CSS/Partition membership controls which dial patterns a device can reach.

How to eliminate wrong answers

Option A is wrong because Application Dial Rules only transform dialed digits (e.g., stripping prefixes or adding digits) before they hit the dial plan; they do not enforce call-blocking policy. Option B is wrong because the device pool's location setting controls bandwidth allocation and CAC between locations, not which dial patterns a device is permitted to match. Option D is wrong because a Route Filter on a Route Pattern filters which specific dialed strings match that pattern (e.g., by numbering plan or called-party prefix), but it is applied per route pattern and is not the cleanest way to deny a whole class of calls to a subset of users; CSS/Partition separation is the standard, most efficient mechanism.

169
MCQmedium

A network engineer is deploying Cisco Unified Border Element (CUBE) and must ensure that voice traffic is prioritized correctly across the enterprise network. Which command correctly maps the voice traffic DSCP value to the correct priority queue in a Cisco IOS-XE router?

A.class-map match-any VOICE; match protocol sip; policy-map VOICE-POLICY; class VOICE; queue-limit 100
B.class-map match-all VOICE; match dscp cs4; policy-map VOICE-POLICY; class VOICE; bandwidth 1000
C.class-map match-any VOICE; match dscp ef; policy-map VOICE-POLICY; class VOICE; fair-queue
D.class-map match-any VOICE; match dscp ef; policy-map VOICE-POLICY; class VOICE; priority 1000
AnswerD

The class-map matches DSCP EF (46), the standard marking for voice bearer traffic, then the policy-map's priority command places that class into the low-latency priority queue with a 1000 kbps guaranteed bandwidth. This satisfies the stem's requirement to map the voice DSCP value to the correct priority queue on IOS-XE.

Why this answer

The correct configuration is to match DSCP EF (46) in a class-map and apply the 'priority' command with a bandwidth value in the policy-map. This maps voice traffic to a low-latency priority queue, ensuring proper prioritization. The 'priority 1000' command creates a strict priority queue with a policed bandwidth of 1000 kbps, which is ideal for voice.

Exam trap

The trap is confusing DSCP values (EF vs. CS4) and the commands for bandwidth guarantee vs. priority; candidates often pick 'bandwidth' or 'fair-queue' because they sound like they provide prioritization, but only 'priority' creates a low-latency queue.

How to eliminate wrong answers

Option A is wrong because it matches protocol sip and uses 'queue-limit' instead of a priority queue; SIP is signaling, not voice media, and queue-limit does not provide priority. Option B is wrong because it matches DSCP CS4 (32), which is not the standard for voice (EF is 46), and uses 'bandwidth' instead of 'priority', which does not provide low-latency queuing. Option C is wrong because it matches DSCP EF correctly but uses 'fair-queue' instead of 'priority', which does not guarantee priority treatment.

170
MCQmedium

A collaboration engineer is deploying Webex Hybrid Calling with Cisco Unified Communications Manager (CUCM) as the call control. The engineer wants to provide PSTN access to Webex Calling users by leveraging the existing on-premises Cisco IOS Voice Gateway. Which solution should be implemented?

A.Cisco Unified Communications Manager (CUCM) SIP trunk directly to Webex Calling
B.Cisco Expressway-E and Expressway-C pair for Mobile and Remote Access (MRA)
C.Cisco Unified Border Element (CUBE) with Local Gateway
D.Webex Calling PSTN calling plan from Cisco
AnswerC

Local Gateway (LGW) allows Webex Calling to route PSTN calls to an on-premises CUBE registered to Webex. This is the recommended hybrid PSTN option when an enterprise wants to retain its existing voice gateway and PSTN circuits. The CUBE acts as the Local Gateway, providing a secure SIP trunk between Webex Calling and the on-premises PSTN. It is a supported and common deployment for hybrid calling.

Why this answer

Local Gateway is the correct hybrid PSTN solution when an organization wants to use its own on-premises CUBE for PSTN connectivity while using Webex Calling for call control. It enables Webex Calling to send PSTN-bound calls to the on-premises CUBE, which then routes them to the PSTN. This preserves existing gateway investments and is a supported deployment option in Webex Control Hub.

Exam trap

The trap here is confusing Mobile and Remote Access (MRA) with hybrid PSTN connectivity; MRA is for endpoint registration, not for routing PSTN calls from Webex to an on-premises gateway.

171
MCQhard

An engineer is troubleshooting one-way audio for calls traversing a Cisco IOS XE router with NAT between an internal CUCM cluster and an external SIP provider. Signaling completes, but RTP from the provider never reaches the internal phone. The engineer confirms the provider is sending media to the signaling address. Which technology should be enabled on the router to allow the correct media address to be signaled to the provider?

A.Media Termination Point
B.SIP Normalization and Transparency
C.Application Layer Gateway for SIP
D.RSVP
AnswerC

The SIP ALG inspects the Session Description Protocol inside SIP messages and rewrites embedded connection and media addresses so the public address is signaled instead of the private one. This lets the provider send RTP to the NAT-translated address, restoring two-way audio for the internal phone behind the router.

Why this answer

When SIP signaling crosses a NAT boundary, the SDP body often carries a private IP address that the far end cannot reach, producing signaling success but one-way or no audio. A SIP Application Layer Gateway on the Cisco IOS XE router inspects the SDP and rewrites the connection and media attributes to the translated public address, so the provider sends RTP to the correct destination and audio flows in both directions.

Exam trap

The trap here is assuming that SIP normalization or an MTP solves NAT traversal, when the specific failure is an unreachable private media address embedded in SDP that only an address-rewriting ALG corrects.

172
MCQeasy

Which DSCP value is recommended for Call Signaling traffic in a Cisco Unified Communications network?

A.AF31 (26)
B.EF (46)
C.CS3 (24)
D.AF41 (34)
AnswerC

CS3 (24) is the standard DSCP marking for Call Signaling traffic in Cisco Unified Communications networks, matching the voice deployment model's per-hop behaviour classes. This satisfies the stem's constraint: the recommended DSCP value for Call Signaling.

Why this answer

Cisco recommends DSCP CS3 (24) for call signaling traffic in a Unified Communications network, which includes SCCP, SIP, and H.323 signaling between endpoints and call control. CS3 provides a distinct per-hop behavior from voice bearer traffic, which uses EF (46). This separation lets QoS policies prioritize voice media above signaling while still protecting signaling from best-effort traffic.

Exam trap

The trap is confusing voice bearer marking with call signaling marking: candidates who remember 'voice is EF' pick EF for signaling, but EF is reserved for RTP media, and signaling uses CS3 (24).

How to eliminate wrong answers

Option A is wrong because AF31 (26) is typically used for call signaling in some legacy or alternate QoS designs (and for video signaling in others), but Cisco's current UC SRND recommends CS3 for call signaling, not AF31. Option B is wrong because EF (46) is reserved for voice bearer (RTP media) traffic, which requires the lowest latency and jitter; using it for signaling would compete with voice and violate the intended QoS model. Option D is wrong because AF41 (34) is used for interactive video (video conferencing) bearer traffic, not call signaling.

173
Multi-Selectmedium

Which TWO of the following are valid methods to handle digit manipulation in CUCM?

Select 2 answers
A.Route Filter
B.Region Matrix
C.Translation Pattern
D.Location Configuration
E.Calling Party Transformation Pattern
AnswersC, E

A Translation Pattern manipulates digits by matching a dialled string and transforming it into a different number before routing. It satisfies CUCM digit manipulation by rewriting called-party digits at a specific partition and CSS scope.

Why this answer

Translation Pattern (C) is a valid digit-manipulation method in CUCM because it matches a dialed digit string in a partition and applies transformations such as discarding digits (Discard Digits), prefixing digits, or rewriting the called/calling number before the call is routed. Calling Party Transformation Pattern (E) is also valid because it specifically manipulates the calling-party number (and related presentation settings) on inbound or outbound calls by matching the calling number and applying prefix, strip, or transformation masks. Route Filter (A) is not a digit-manipulation tool; it is used with route lists and time schedules to filter which route groups or dial peers can be selected based on dial-peer tags, not to rewrite digits.

Region Matrix (B) governs codec selection between regions for calls, not digit manipulation. Location Configuration (D) is used for call admission control and bandwidth allocation between locations, not for altering dialed digits.

Exam trap

CLCOR often tests whether candidates confuse digit manipulation (translation and transformation patterns) with route selection (route filters) or bandwidth management (regions/locations).

174
MCQeasy

A network administrator is troubleshooting poor voice quality on a Cisco Unified Communications Manager cluster. The administrator suspects that the issue is related to the Differentiated Services Code Point (DSCP) value being used for voice bearer traffic. Which DSCP value is recommended by Cisco for voice bearer traffic to ensure it receives priority treatment in the network?

A.CS3 (Class Selector 3)
B.AF41 (Assured Forwarding 41)
C.EF (Expedited Forwarding)
D.AF31 (Assured Forwarding 31)
AnswerC

EF (Expedited Forwarding), which corresponds to DSCP 46, is the recommended marking for voice bearer traffic. It indicates that packets require low latency, low jitter, and low loss, and network devices should provide priority queueing for EF-marked traffic. This ensures that voice packets are transmitted first during congestion, maintaining voice quality. Cisco's QoS baseline recommends EF for voice bearer.

Why this answer

Cisco recommends marking voice bearer traffic with EF (Expedited Forwarding), which is DSCP 46. This marking ensures that voice packets are placed in a low-latency queue and receive priority treatment across the network. Other DSCP values like AF31, CS3, and AF41 are used for different traffic types such as call signaling and video, and do not provide the strict priority required for voice.

Exam trap

The trap here is confusing voice bearer marking with call signaling marking, leading to the selection of CS3 or AF31 instead of EF.

175
MCQhard

A Cisco Unified Border Element (CUBE) is deployed between Cisco Unified Communications Manager (CUCM) and a SIP service provider. The provider sends an INVITE with a Diversion header containing a redirecting number. The CUBE must pass the redirecting number to CUCM in the History-Info header instead of the Diversion header. Which SIP profile configuration on CUBE accomplishes this?

A.request INVITE sip-header Diversion copy-to History-Info
B.request INVITE sip-header Diversion
C.response INVITE sip-header Diversion copy-to History-Info
D.request INVITE sip-header History-Info copy-to Diversion
AnswerA

This SIP profile command copies the Diversion header value to a new History-Info header in the outbound INVITE. It effectively converts the Diversion header to History-Info, allowing CUCM to receive the redirecting number in the expected header. This is a common normalization technique on CUBE for interworking between different SIP implementations.

Why this answer

To convert a Diversion header to History-Info on CUBE, a SIP profile is used with the command request INVITE sip-header Diversion copy-to History-Info. This copies the value from the incoming Diversion header into a new History-Info header in the outbound INVITE. This ensures CUCM receives the redirecting number in the header it expects, facilitating proper call routing and display.

Exam trap

The trap here is mixing up the direction of the copy operation or using the wrong message type (request vs. response) when manipulating SIP headers.

176
MCQmedium

Which component allows for automatic rerouting of a call if the primary gateway is busy or unreachable?

A.Partition
B.Device Pool
C.Route Group
D.Route List
AnswerD

A route list groups gateways into an ordered priority sequence. When the primary gateway is busy or unreachable, Cisco Unified Communications Manager automatically reroutes the call to the next available gateway in the list, providing the required failover.

Why this answer

A Route List provides ordered, prioritized routing by grouping multiple Route Groups and enabling automatic failover when the primary gateway is busy, unreachable, or returns an error. It is the CUCM component that delivers redundancy for outbound call routing.

Exam trap

CLCOR often tests the distinction between Route Group (same-type gateway pool) and Route List (ordered failover across groups), so the trap is choosing Route Group when the question asks about rerouting across different gateways.

How to eliminate wrong answers

Option A is wrong because a Partition is a logical grouping of dialable patterns used with Calling Search Spaces for access control, not for gateway failover. Option B is wrong because a Device Pool groups devices for common settings (region, date/time, SRST reference, CUCM group) and does not perform call rerouting. Option C is wrong because a Route Group is a collection of gateways of the same type/priority; it can distribute calls among its members but does not itself provide ordered failover across different gateway types — that is the Route List's role.

177
Multi-Selecthard

Which THREE of the following are recommended steps when designing a secure signaling path between CUCM and a CUBE gateway?

Select 3 answers
A.Install and trust CA certificates
B.Configure a SIP Trunk Security Profile
C.Disable SIP digest authentication
D.Enable TLS on the trunk
E.Enable H.323 Fast Start
AnswersA, B, D

Installing and trusting CA certificates lets CUCM and CUBE validate each other's identities during the TLS handshake. This satisfies the secure signalling path requirement by establishing the trust anchor needed before encrypted SIP signalling can be accepted.

Why this answer

Option A is correct because securing the signaling path with TLS requires that both CUCM and CUBE trust each other's certificates, which means installing and trusting the CA certificates (or the specific device certificates) that signed the endpoints' certificates. Option B is correct because a SIP Trunk Security Profile on CUCM defines the security-related settings for the trunk, including device security mode (encrypted/authenticated), incoming/outgoing transport (TLS), and digest authentication, and it must be applied to the SIP trunk toward CUBE. Option D is correct because enabling TLS on the trunk encrypts SIP signaling between CUCM and CUBE, protecting the signaling path from eavesdropping and tampering.

Option C is not a recommended step for securing the signaling path; digest authentication is a separate authentication mechanism and disabling it does not secure signaling, and in many designs it is left enabled or configured per policy. Option E is incorrect because H.323 Fast Start is an H.323 feature and is irrelevant to a SIP-based signaling path between CUCM and CUBE.

Exam trap

CLCOR often tests the inclusion of irrelevant options like H.323 Fast Start or disabling authentication, which are not part of SIP security best practices.

178
Multi-Selectmedium

Which TWO features are managed by the 'Cisco Unified Serviceability' tool?

Select 2 answers
A.IP Phone registration.
B.Bulk phone import.
C.Alarm and Trace configuration
D.User password reset.
E.Service Activation
AnswersC, E

Cisco Unified Serviceability hosts the Alarm and Trace Configuration interface, letting administrators define alarm events, trace levels and log outputs for troubleshooting. This is the tool's dedicated function, satisfying the requirement for a feature managed there rather than in Unified CM Administration.

Why this answer

Cisco Unified Serviceability is the Cisco Unified Communications Manager (CUCM) administration interface dedicated to operational and diagnostic functions, so Alarm and Trace configuration (option C) is correct because this tool is where you enable and configure alarms, traces, and the Real-Time Monitoring Tool (RTMT) alert/log settings for CUCM services. Service Activation (option E) is also correct because Cisco Unified Serviceability provides the Service Activation page used to start, stop, and restart network services and feature services (e.g., Cisco CallManager, Cisco TFTP, Cisco CTIManager) on the cluster nodes. IP Phone registration (option A) is not managed here; it is handled by the phone's configuration in Cisco Unified CM Administration and the registration process via the TFTP/CallManager services, not by Serviceability.

Bulk phone import (option B) is performed with the Bulk Administration Tool (BAT) in Cisco Unified CM Administration, and user password reset (option D) is done through Cisco Unified CM Administration's End User configuration or via the Cisco Unified CM User Options/self-care pages, not through Serviceability.

Exam trap

CLCOR often tests which CUCM GUI tool performs which function — candidates confuse Unified Serviceability (services, alarms, traces) with Unified CM Administration (devices, users, dial plan).

179
MCQhard

A network engineer is deploying a Cisco Unified Border Element (CUBE) for a SIP trunk to an ITSP. The ITSP requires that all outbound calls present a specific calling number and that the SIP From header contain the same number. The engineer must ensure that the calling number is manipulated correctly on the outbound dial peer. Which CUBE configuration command should be used to modify the calling number in both the From header and the P-Asserted-Identity header?

A.voice translation-rule and voice translation-profile applied to the outbound dial peer
B.numbering-type on the outbound dial peer
C.SIP profile with header-passing and privacy settings
D.clid command on the outbound dial peer
AnswerA

Voice translation rules and profiles are the standard method to manipulate calling and called numbers on CUBE. When applied to the outbound dial peer, the translation profile can modify the calling number, which updates the SIP From header and, depending on the profile, the P-Asserted-Identity header. This satisfies the ITSP requirement to present a specific calling number consistently.

Why this answer

The correct method to modify the calling number for SIP calls on CUBE is to use voice translation rules and profiles. These allow granular manipulation of the calling number, which is then reflected in the SIP From and P-Asserted-Identity headers. Applying the translation profile to the outbound dial peer ensures that all outbound calls to the ITSP present the required calling number.

Exam trap

The trap here is assuming that dial-peer commands like clid or numbering-type can rewrite SIP headers, when in fact header manipulation requires translation rules and profiles.

180
MCQhard

You are managing a Cisco Collaboration cluster and notice that database replication is stuck in a '3' (blocked) state. What is the standard troubleshooting step?

A.utils dbreplication reset
B.utils service restart Cisco Database Layer Monitor
C.utils system restart
D.utils network ping
AnswerA

A blocked replication state means the subscriber's data is inconsistent with the publisher, so the standard remedy is utils dbreplication reset, which drops and rebuilds replication between nodes, restoring a clean, consistent state across the cluster.

Why this answer

When database replication is stuck in a '3' (blocked) state in a Cisco Collaboration cluster, the standard troubleshooting step is to run 'utils dbreplication reset' on the publisher or affected subscriber. This command resets the replication and forces a full re-sync of the database, resolving blocked states caused by inconsistencies or network issues.

Exam trap

CLCOR often tests the confusion between restarting services and performing a full replication reset, leading candidates to choose less effective troubleshooting steps.

How to eliminate wrong answers

Option B is wrong because restarting the Cisco Database Layer Monitor service may temporarily alleviate issues but does not perform a full replication reset, which is necessary for a blocked state. Option C is wrong because restarting the entire system is disruptive and not the standard first step for replication issues. Option D is wrong because 'utils network ping' only tests network connectivity and does not address database replication problems.

181
MCQhard

When using 'Call Pickup', how does a user pick up a call that is ringing on another phone in the same pickup group?

A.By dialing the target phone extension.
B.By selecting 'Hold' on their own line.
C.By accessing the CUCM web interface.
D.By pressing the 'Pickup' softkey.
AnswerD

Call Pickup works by dialling the pickup group's feature code or pressing the Pickup softkey, which redirects the ringing call from another group member's line to the answering phone. This satisfies the scenario of retrieving a call ringing on a colleague's phone within the same group.

Why this answer

Call Pickup allows a user to answer a call ringing on another phone in the same pickup group by pressing the 'Pickup' softkey (or dialing the pickup group code). The softkey triggers the Call Pickup feature, which redirects the ringing call to the user's phone. This is a standard CUCM feature for group call answering.

Exam trap

CLCOR often tests the specific softkey or action for call pickup; candidates may confuse it with dialing the extension or using hold, but the correct answer is pressing the 'Pickup' softkey.

How to eliminate wrong answers

Option A is wrong because dialing the target phone's extension would call that phone, not pick up its ringing call. Option B is wrong because pressing 'Hold' only affects the user's own active call, not another phone's ringing call. Option C is wrong because accessing the CUCM web interface is not a phone-based call pickup method; it's for administration.

182
MCQeasy

A network administrator is configuring a Cisco IP Phone 7811 to register with Cisco Unified Communications Manager. The phone is powered on and connected to the network. The administrator notices that the phone is not obtaining an IP address. Which protocol is responsible for providing the phone with an IP address and other network parameters?

A.TFTP
B.DHCP
C.SIP
D.CDP
AnswerB

DHCP (Dynamic Host Configuration Protocol) is used by Cisco IP Phones to obtain an IP address, subnet mask, default gateway, and TFTP server address. Without DHCP, the phone cannot communicate on the network. In this scenario, the phone is not obtaining an IP address, so DHCP is the protocol that should be providing it. This is a fundamental step in the phone boot process.

Why this answer

Cisco IP Phones use DHCP to obtain an IP address and other network settings such as the TFTP server address and default gateway. Without DHCP, the phone cannot proceed with the boot process. TFTP is used later to download configuration files, CDP is for neighbor discovery, and SIP is for call signaling.

Therefore, DHCP is the correct protocol.

Exam trap

The trap here is confusing the order of the boot process, thinking that TFTP or CDP might provide IP addressing when they serve different purposes.

183
MCQmedium

A user complains that they cannot see the 'Transfer' softkey on their phone during an active call. Where is the most appropriate place to check the softkey configuration?

A.Device > Device Settings > Softkey Template
B.System > Enterprise Phone Configuration
C.Device > Device Pool
D.Device > Phone
AnswerA

Softkey templates define which softkeys appear during call states, including Transfer. The template is assigned to the device, so checking Device > Device Settings > Softkey Template confirms whether a template containing Transfer is applied to that phone.

Why this answer

Softkey templates in Cisco Unified Communications Manager define which softkeys appear on a phone during different call states, and they are configured under Device > Device Settings > Softkey Template. The template is then associated with a device pool or directly with a phone, but the actual softkey definitions (including Transfer) live in the template. Checking the template is the correct first step to verify whether the Transfer softkey is enabled for the connected/active call state.

Exam trap

CLCOR often tests the misconception that softkeys are configured on the phone page itself, when the actual definitions live in the Softkey Template under Device Settings.

How to eliminate wrong answers

Option B is wrong because System > Enterprise Phone Configuration sets global phone parameters like background image or URL services, not softkey layouts. Option C is wrong because Device > Device Pool controls region, location, date/time group, and CUCM group assignments, not softkey behavior. Option D is wrong because Device > Phone shows the phone's assigned softkey template but does not let you edit the softkey definitions themselves; the template must be modified under Device Settings.

184
MCQmedium

A Cisco IOS XE gateway is configured with a POTS dial-peer that forwards calls to a PRI interface. Users report that inbound PSTN calls are being rejected with a cause code indicating that all circuits are busy, even though the PRI shows no active calls. Which command should you use to verify that the POTS dial-peer is matching the inbound calls correctly?

A.debug isdn q931
B.debug dialpeer
C.show dial-peer voice summary
D.show voice port summary
AnswerB

The debug dialpeer command shows dial-peer matching details for both inbound and outbound calls, including which dial-peer was selected and why. In this scenario, it will reveal whether the inbound call matched the intended POTS dial-peer or fell through to a default, causing the busy condition.

Why this answer

The debug dialpeer command is essential for troubleshooting dial-peer matching because it logs the inbound and outbound dial-peer selection process. When inbound PSTN calls are rejected with a busy cause despite idle circuits, the gateway may be failing to match a POTS dial-peer. This debug reveals whether the call is matching the intended peer or falling through to a default that rejects the call.

Exam trap

The trap here is assuming that ISDN Q.931 debugging will show dial-peer matching, when it only shows signaling messages and cause codes.

185
MCQeasy

What is the default behavior of CUCM when a phone is moved to a new site and registers with the local CUCM node, but the Device Pool is not updated?

A.The phone registers but keeps old Region/Location settings.
B.The phone refuses to register.
C.The phone forces a factory reset.
D.The phone defaults to the 'Default' device pool.
AnswerA

Moving a phone between CUCM nodes does not rewrite its Device Pool, so Region and Location values persist from the original configuration. The device registers successfully but keeps stale bandwidth and codec settings until the administrator reassigns the Device Pool.

Why this answer

When a phone moves to a new site and registers with a local CUCM node but its Device Pool is not updated, it retains the old Region and Location settings from its assigned Device Pool. The Device Pool defines these settings, and they are not automatically changed based on the registration node.

Exam trap

CLCOR often tests the behavior of Device Pool settings when phones move, and candidates may incorrectly assume that CUCM automatically updates Region/Location based on the registration node.

How to eliminate wrong answers

Option B is wrong because the phone will register successfully as long as it can reach the CUCM node; the Device Pool does not prevent registration. Option C is wrong because CUCM does not force a factory reset on the phone due to a Device Pool mismatch. Option D is wrong because the phone does not default to the 'Default' device pool; it uses the Device Pool assigned to it in its configuration.

186
MCQmedium

What is the impact of removing a node from a Hybrid Video Mesh cluster that is currently hosting active meetings?

A.The node remains active until the last call ends
B.Active calls are dropped or experience disruption
C.The cloud takes over the media immediately
D.The meetings are automatically migrated to another node
AnswerB

Removing a node from a Hybrid Video Mesh cluster forces its hosted conferences to be redistributed or torn down. Because the node is actively serving media, those meetings drop or suffer disruption until participants reconnect via remaining nodes or the cloud.

Why this answer

Removing a node from a Hybrid Video Mesh cluster that is actively hosting meetings will cause active calls to be dropped or experience disruption. The node is immediately removed from the cluster, and any meetings hosted on it are not gracefully migrated, leading to service interruption. This is a known behavior in Cisco Webex Hybrid Video Mesh.

Exam trap

The trap is assuming that the system provides high availability with seamless failover for active meetings; candidates often think the cloud or another node will take over, but removal causes immediate disruption.

How to eliminate wrong answers

Option A is wrong because the node does not remain active until the last call ends; removal is immediate and does not wait for calls to finish. Option C is wrong because the cloud does not take over the media immediately; there is no seamless failover for active meetings. Option D is wrong because meetings are not automatically migrated to another node; they are disrupted and must be re-established.

187
MCQmedium

You are deploying a Webex Room device in a hybrid environment. What is the benefit of registering it to Webex instead of on-premises CUCM?

A.It allows the device to function without an internet connection.
B.It enables full access to Webex cloud features like whiteboarding and AI-driven metrics.
C.It reduces the bandwidth required for video calls.
D.It forces the device to use on-premises media routing.
AnswerB

Registering to Webex gives the Room device native access to cloud-only capabilities such as whiteboarding and AI-driven metrics, which on-premises CUCM registration cannot deliver. This satisfies the hybrid deployment's requirement for full cloud feature parity.

Why this answer

Registering a Webex Room device to Webex (cloud) rather than on-premises CUCM unlocks the full Webex cloud feature set, including Webex Assistant, whiteboarding, AI-driven meeting metrics, and cloud-based management through Control Hub. Cloud registration also simplifies updates and provides native Webex Meetings join experience. On-premises CUCM registration limits the device to CUCM call control features and requires expressway/Collaboration Edge for cloud service access.

Exam trap

CLCOR often tests the misconception that cloud registration is only about call control; the real differentiator is access to Webex cloud-only features like whiteboarding and AI metrics, not bandwidth or offline capability.

How to eliminate wrong answers

Option A is wrong because cloud registration requires internet connectivity to reach Webex; it does not enable offline operation. Option C is wrong because registration method does not change the underlying media bandwidth — video codec and resolution determine bandwidth, not whether the device is registered to Webex or CUCM. Option D is wrong because cloud registration actually enables Webex cloud media routing (Webex Meetings), not on-premises media routing; forcing on-premises media is a CUCM/Expressway design choice.

188
MCQmedium

What is the purpose of the 'Common Device Configuration' in CUCM?

A.To manage trunk security.
B.To manage bandwidth.
C.To manage user passwords.
D.To group shared settings like softkey templates.
AnswerD

Common Device Configuration groups shared device-level settings, including softkey templates, phone button templates and softkey layout, so they can be applied across many phones rather than configured individually. This satisfies the stem's requirement by centralising reusable configuration, reducing administrative effort when deploying or updating large numbers of Cisco IP phones.

Why this answer

The Common Device Configuration in CUCM is a template that groups shared device-level settings — such as softkey templates, phone button templates, and other common parameters — so they can be applied to multiple devices without configuring each one individually. This reduces administrative overhead and ensures consistency across phones.

Exam trap

The trap is mixing up the three template types in CUCM — Common Device Configuration (shared device settings like softkeys), Device Pool (Location/Region/Date-Time/CUCM Group), and Phone Button Template (button layout) — and candidates who do not distinguish them pick an answer about trunks, bandwidth, or passwords.

How to eliminate wrong answers

Option A is wrong because trunk security is configured on the trunk itself (via SIP trunk security profiles or gateway settings), not through Common Device Configuration. Option B is wrong because bandwidth management is handled through Locations and Regions in Device Pools, not Common Device Configuration. Option C is wrong because user passwords are managed under User Management > End User or via LDAP integration, not through device configuration templates.

189
MCQmedium

When managing Webex Calling using the 'Webex Calling' app versus the 'Webex' app, what determines the calling capabilities?

A.The user's assigned license in Control Hub.
B.The firmware version of the desk phone.
C.The location of the user's home network.
D.The operating system of the device.
AnswerA

Calling capabilities are governed by the licence assigned to each user in Control Hub, not by which app interface they open. The Webex Calling app and Webex app both surface whatever telephony features that entitlement grants, so the licence is the determining factor.

Why this answer

In Webex Control Hub, the calling capabilities a user receives are determined by the license assigned to that user. A Webex Calling license (e.g., Professional or Standard) enables PSTN calling, voicemail, and enterprise features, while a Webex Meetings-only license does not. The app used (Webex Calling app vs.

Webex app) is just a client; the backend entitlement comes from the license. Therefore, the assigned license in Control Hub is the determining factor.

Exam trap

CLCOR often tests the misconception that the app or device determines calling features — candidates may pick firmware or OS, but the license is the true entitlement gate.

How to eliminate wrong answers

Option B is wrong because desk phone firmware affects device features but does not grant calling entitlements — a phone without a calling license cannot make PSTN calls. Option C is wrong because the user's home network location does not determine calling capabilities; it may affect quality but not entitlement. Option D is wrong because the device OS (Windows, macOS, iOS) only affects which client can be installed, not the calling features available.

190
MCQhard

A collaboration engineer is deploying a new branch office with Cisco Unified Communications Manager and wants to ensure that voice traffic is marked with the appropriate DSCP value. The service provider requires that voice bearer traffic use EF ( Expedited Forwarding). Which DSCP value should be configured on the IP phones for voice media?

A.AF41 (34)
B.CS3 (24)
C.CS5 (40)
D.EF (46)
AnswerD

EF (Expedited Forwarding) is the recommended DSCP for voice bearer traffic. It provides low loss, low latency, low jitter, and assured bandwidth. The service provider expects EF for voice, ensuring proper treatment across the network. Configuring IP phones to mark voice media as EF aligns with industry best practices.

Why this answer

Voice bearer traffic should be marked with EF (Expedited Forwarding, DSCP 46) to ensure low latency, jitter, and loss. This is a standard recommendation and is often required by service providers. The IP phone configuration must set the voice media DSCP to EF, while call signaling typically uses CS3.

Exam trap

The trap here is confusing voice media DSCP with call signaling DSCP; voice media uses EF, while signaling uses CS3.

191
MCQmedium

A company's main site runs a Cisco Unified Communications Manager (CUCM) cluster. They are adding a new remote branch that will have 50 IP phones. The branch has limited bandwidth and must survive a WAN outage with basic call functionality between local phones. Which design approach should be used at the branch?

A.Deploy a CUCM subscriber at the branch to handle local call processing.
B.Deploy a Cisco Expressway-C and Expressway-E pair at the branch for call processing.
C.Use the existing CUCM cluster at the main site and rely on the WAN for all call processing.
D.Deploy a Cisco Unified Communications Manager Express (CME) router at the branch to provide local call processing.
AnswerD

CME provides call processing at the branch, allowing local calls to continue during a WAN outage. It supports 50 phones and integrates with CUCM using SIP or H.323 trunks for centralized dial plan and voicemail. This design is ideal for small branches with limited bandwidth, as it reduces WAN dependency for intra-branch calls.

Why this answer

For small remote branches with limited bandwidth and a need for local survivability, a Cisco Unified Communications Manager Express (CME) router is the appropriate choice. It provides local call processing and can be integrated with the central CUCM for centralized management and dial plan. This ensures that intra-branch calls continue even if the WAN link fails.

Exam trap

The trap here is confusing survivability solutions like CME with full CUCM nodes or Expressway, which serve different purposes such as MRA or centralized processing.

192
MCQhard

You are deploying Webex Hybrid Data Security (HDS). After deploying the virtual machines for the HDS nodes, you find they are not appearing in Control Hub. What is the first step you should take to troubleshoot the registration?

A.Disable the firewall on the HDS node.
B.Restart the Cisco Webex Hybrid Services host.
C.Check the local log files in the HDS node using the CLI.
D.Re-download the management certificate.
AnswerC

HDS nodes log registration attempts locally, so the CLI log files on the node reveal why Control Hub registration fails, such as connectivity, certificate or configuration errors. Checking them first establishes the actual failure cause before altering network or platform settings.

Why this answer

When HDS nodes do not appear in Control Hub, the first troubleshooting step is to check the local log files on the HDS node via the CLI. The logs will show whether the node successfully reached the Webex cloud, whether the registration token was accepted, and whether there are certificate or connectivity errors. This is the fastest way to identify the root cause before making configuration changes.

Exam trap

CLCOR often tests the tendency to jump to configuration changes (restart, re-download certificate, disable firewall) instead of first gathering evidence from local logs, which is the correct first troubleshooting step.

How to eliminate wrong answers

Option A is wrong because disabling the firewall is a security risk and is not a diagnostic step; the firewall may be the cause, but you should first confirm via logs which ports or destinations are failing. Option B is wrong because restarting the Cisco Webex Hybrid Services host is a broad action that may not address the underlying registration issue and could disrupt other services. Option D is wrong because re-downloading the management certificate is a specific fix that should only be done after logs confirm a certificate problem; it is not the first step.

193
Multi-Selecthard

Which THREE of the following factors impact the quality of video calls in a network?

Select 3 answers
A.Packet loss
B.Interface description
C.Jitter
D.Router uptime
E.Latency
AnswersA, C, E

Packet loss directly degrades video quality: dropped RTP packets cause macroblocking, freezing and audio artefacts, since real-time video cannot retransmit within its latency budget. It is one of the three factors, alongside latency and jitter, that determine call quality.

Why this answer

Packet loss (A) is correct because dropped RTP/UDP packets in a video stream cause visible artifacts, freezing, and audio gaps, directly degrading call quality. Jitter (C) is correct because variation in packet inter-arrival times disrupts the playout buffer, causing choppy audio and stuttering video even when average delay is acceptable. Latency (E) is correct because high end-to-end delay (typically above 150 ms one-way) impairs interactivity and, combined with jitter and loss, degrades the real-time experience.

Interface description (B) is only a text label on an interface and has no effect on traffic handling, and router uptime (D) is an availability metric that does not by itself determine video quality as long as the device is forwarding packets.

Exam trap

The trap is including plausible-sounding but non-QoS factors like interface descriptions or uptime — candidates sometimes pick operational/administrative attributes instead of the three canonical real-time impairments (loss, jitter, latency).

194
Multi-Selecthard

Which THREE of the following items can be defined within a Device Pool?

Select 3 answers
A.Location
B.Date/Time Group
C.Translation Pattern
D.Region
E.Route Partition
AnswersA, B, D

A Device Pool in Cisco Unified Communications Manager can include a Location, which enforces call admission control by limiting the bandwidth available to devices at that site. This satisfies the pool's CAC requirement, preventing oversubscription of WAN links.

Why this answer

In Cisco Unified Communications Manager, a Device Pool is a template that groups common settings applied to devices such as IP phones and gateways. Option A (Location) is correct because the Device Pool specifies the Location, which enforces call admission control bandwidth limits between sites. Option B (Date/Time Group) is correct because the Device Pool defines the Date/Time Group that determines the time zone and date/time format displayed on the devices.

Option D (Region) is correct because the Device Pool assigns the Region, which controls the codec selection for calls between devices in different regions. Option C (Translation Pattern) is not part of a Device Pool; translation patterns are configured under Call Routing > Translation Pattern and are applied during call routing, not as a device-level setting. Option E (Route Partition) is also not defined in a Device Pool; partitions are assigned to directory numbers, route patterns, and translation patterns via Calling Search Spaces, not to device pools.

Exam trap

The trap is confusing dial plan elements (Translation Patterns, Route Partitions, Calling Search Spaces) with device-level configuration elements — candidates who do not separate 'device settings' from 'call routing settings' will incorrectly include Translation Pattern or Route Partition.

195
MCQmedium

You are configuring a Cisco IOS XE voice gateway to register with an ITSP over SIP. The provider requires registration to be refreshed every 60 seconds. You have already configured the registrar and credentials under sip-ua. Which command correctly sets the registration expiry timer to 60 seconds?

A.timers expires 60
B.authentication username user password pass
C.registrar ipv4:10.1.1.1 expires 60
D.retry invite 3
AnswerA

Within sip-ua configuration mode, the timers expires command sets the SIP registration expiry timer in seconds. Setting it to 60 causes the gateway to send a new REGISTER refresh every 60 seconds, which matches the provider's requirement. This is the correct and standard way to adjust the registration expiry interval on a Cisco IOS XE voice gateway, ensuring the registration stays active according to the provider's policy.

Why this answer

The registration expiry timer on a Cisco IOS XE voice gateway is configured under sip-ua with the timers expires command. This timer determines how often the gateway sends a REGISTER refresh to the SIP registrar. Setting it to 60 seconds aligns with the provider's requirement for a 60-second refresh interval, preventing the registration from expiring unexpectedly.

Exam trap

The trap here is confusing the registrar command, which specifies the registrar's address, with the timers expires command, which actually sets the registration expiry interval.

196
MCQmedium

Which service in CUCM is responsible for handling the registration of SIP devices?

A.Cisco Database Layer Monitor
B.Cisco CallManager
C.Cisco CTIManager
D.Cisco TFTP
AnswerB

Cisco CallManager (the CallManager service) is the SIP registrar and line-side call-control component in CUCM, so it owns device registration, authentication and keepalive for SIP endpoints. Other services handle TFTP configuration, database replication or media resources, not registration.

Why this answer

The Cisco CallManager service (Cisco CallManager, often abbreviated CCM) is the core call-processing service in CUCM that handles SIP device registration, call routing, and signaling. SIP phones and gateways register with the CallManager service running on a CUCM node, which maintains the registration state and provides call control.

Exam trap

CLCOR often tests the distinction between CUCM services — candidates confuse TFTP (config/firmware delivery) with CallManager (registration/signaling) and incorrectly select TFTP for registration questions.

How to eliminate wrong answers

Option A is wrong because Cisco Database Layer Monitor monitors the health and replication of the CUCM database (IBM Informix), not device registration. Option C is wrong because Cisco CTIManager provides Computer Telephony Integration (CTI) services for applications like Jabber and contact center agents, not SIP registration. Option D is wrong because Cisco TFTP serves configuration files and firmware to endpoints during boot, but registration itself is handled by the CallManager service.

197
Multi-Selecthard

A collaboration engineer is deploying a new Cisco Webex Room Kit Pro in a conference room. The device is registered to Cisco Unified Communications Manager (CUCM) using SIP. The engineer needs to ensure that the device can place calls to external numbers and that the dialed digits are correctly processed. Which two configuration elements must be defined on CUCM to enable external dialing from this endpoint? (Choose two.)

Select 2 answers
A.SIP Profile with Outbound Proxy
B.Route Pattern
C.Device Pool with Region settings
D.Gateway or Route List
E.Translation Pattern
AnswersB, D

A Route Pattern in CUCM defines how dialed digits are routed to external destinations. It matches the dialed string and points to a Route List or Gateway. Without a Route Pattern, the call cannot be routed outside the cluster. For external dialing, the Route Pattern must be configured with the appropriate dial plan, such as 9.@ for outside access. This is essential for the Room Kit Pro to reach external numbers.

Why this answer

To enable external dialing from a Cisco Webex Room Kit Pro registered to CUCM, you must configure a Route Pattern to match the dialed digits and route the call, and a Gateway or Route List to provide the physical connection to the external network. The Route Pattern directs the call to the Route List, which then selects a Gateway. Without these, the call cannot leave the CUCM cluster.

Exam trap

The trap here is confusing dial plan manipulation elements like Translation Patterns with the core routing elements required for external dialing.

198
MCQmedium

In a Cisco collaboration design, you are tasked with identifying the DHCP Option required for Cisco IP Phones to discover the TFTP server address automatically. Which option is standard for this purpose?

A.Option 66
B.Option 128
C.Option 150
D.Option 43
AnswerC

DHCP Option 150 carries a list of TFTP server IP addresses in a single field, which Cisco IP Phones use to locate their configuration files. It is the standard, vendor-specific alternative to Option 66's single hostname, matching the discovery requirement.

Why this answer

DHCP Option 150 is the Cisco-proprietary option that delivers a list of TFTP server IP addresses to Cisco IP Phones during DHCP scope configuration. Phones use this to locate the TFTP server, download their configuration XML and firmware, and register with CUCM. Option 66 is the standard (RFC 2132) TFTP server name option and can also work, but Option 150 is the Cisco-standard answer for IP phone TFTP discovery.

Exam trap

CLCOR often tests whether candidates pick Option 66 (the IETF standard) instead of Option 150 (the Cisco-specific standard) — for Cisco IP phones, Option 150 is the expected answer.

How to eliminate wrong answers

Option A is wrong because although Option 66 (TFTP server name, RFC 2132) can be used, the Cisco-standard and most commonly tested option for IP phone TFTP discovery is Option 150, which supports a list of IP addresses rather than a single hostname. Option B is wrong because Option 128 is not a standard or Cisco TFTP discovery option — it is sometimes used for PXE or vendor-specific purposes but not for Cisco IP phone TFTP. Option D is wrong because Option 43 is used for vendor-specific information (commonly for wireless AP controllers and some VoIP vendors), not for Cisco IP phone TFTP server discovery.

199
MCQmedium

When designing a redundant CUCM deployment, which mechanism ensures that if a primary subscriber fails, phones automatically register to a secondary subscriber?

A.SIP Trunk Security Profile
B.Route List
C.CM Group
D.Device Pool
AnswerC

A CM Group defines an ordered list of subscriber nodes that phones use for registration. If the primary subscriber becomes unreachable, phones fall back to the next subscriber in the group, providing automatic registration redundancy.

Why this answer

A Cisco CallManager Group (CM Group) is an ordered list of CUCM nodes that is assigned to a Device Pool, which in turn is assigned to phones. The CM Group defines the primary subscriber and up to two backup subscribers; if the primary fails, phones fall back to the next node in the list in the order specified. This is the native CUCM device redundancy mechanism for phone registration.

Exam trap

CLCOR often tests the distinction between Device Pool and CM Group — candidates see 'Device Pool' and assume it controls failover, but the Device Pool only references the CM Group that actually defines the ordered subscriber list.

How to eliminate wrong answers

Option A is wrong because a SIP Trunk Security Profile defines authentication, encryption, and digest settings for SIP trunks between CUCM and external systems — it has nothing to do with phone registration failover. Option B is wrong because a Route List is a digit-analysis construct that orders Route Groups for outbound call routing, not for phone registration redundancy. Option D is wrong because a Device Pool groups devices for common settings (region, date/time, CM Group, SRST reference) but does not itself define the failover order — the CM Group referenced by the Device Pool does that.

200
MCQmedium

You are configuring a local gateway for Webex Calling. Which mechanism ensures that the Webex Cloud can communicate with your on-premises edge device without requiring inbound firewall ports?

A.Webex Calling Connector via port forwarding
B.Outbound TLS connection from CUBE to Webex Cloud
C.SIP Trunk over VPN
D.H.323 Gatekeeper registration
AnswerB

CUBE initiates an outbound TLS connection to the Webex Cloud, which is kept open and reused for signalling and media. Because the connection originates from on-premises, no inbound firewall ports are required, satisfying the stated constraint.

Why this answer

The correct answer is B because Webex Calling uses a persistent outbound TLS connection from the on-premises CUBE (Customer Edge) to the Webex Cloud. This connection is initiated from the enterprise side, typically over TCP port 8934 (or 443 for some services), and is kept alive with keepalives. Because the connection is outbound, no inbound firewall ports need to be opened, and the cloud can send messages back over the established TLS session.

This design is fundamental to Webex Calling's cloud-to-edge architecture, ensuring secure and NAT-friendly connectivity.

Exam trap

CLCOR often tests the misconception that cloud services require inbound firewall ports, but Webex Calling specifically uses outbound TLS to avoid that, so candidates might incorrectly choose options that involve port forwarding or VPNs.

How to eliminate wrong answers

Option A is wrong because a Webex Calling Connector via port forwarding would require inbound ports to be opened on the firewall, which contradicts the requirement. Option C is wrong because a SIP Trunk over VPN would still require an inbound connection or a VPN tunnel that typically needs inbound ports to be opened for the tunnel establishment, and it is not the mechanism used for Webex Calling local gateway. Option D is wrong because H.323 Gatekeeper registration is a legacy protocol not used by Webex Calling, and it would require inbound signaling ports, not an outbound TLS connection.

201
MCQmedium

A Cisco Unified Communications Manager (CUCM) administrator is configuring a new phone for a user. The user needs to be able to dial internal extensions, local PSTN numbers, and international numbers. The administrator has created a device pool, a line, and a directory number. Which additional configuration is required to allow the phone to place calls to the PSTN?

A.Add the phone to a device pool that contains the gateway for PSTN connectivity.
B.Assign a calling search space to the phone's directory number that includes the partitions containing the route patterns for PSTN access.
C.Configure a translation pattern that converts internal extensions to E.164 format for all outbound calls.
D.Enable the 'Allow Outbound Calls' checkbox in the phone's configuration page.
AnswerB

The calling search space (CSS) on the directory number determines which partitions the phone can reach when dialing. To allow PSTN calls, the CSS must include the partitions that contain the route patterns for local and international dialing. Without the correct CSS, the phone cannot match those route patterns, and calls will fail with a reorder tone.

Why this answer

In CUCM, call permissions are enforced through calling search spaces (CSS) and partitions. The CSS assigned to the directory number determines which partitions (and thus which route patterns) the phone can access. To allow PSTN calls, the CSS must include the partitions containing the relevant route patterns.

This is the essential configuration step.

Exam trap

The trap here is thinking that device pools or translation patterns directly enable PSTN access, when the actual control point is the calling search space on the directory number.

202
Multi-Selecthard

Which THREE of the following items must be verified during a site-to-site VPN check for collaboration traffic?

Select 3 answers
A.DHCP relay configuration
B.MTU size
C.NTP server reachability
D.UDP port range availability
E.DSCP tag preservation
AnswersB, D, E

IPsec and GRE encapsulation add overhead, so oversized packets get dropped when the path MTU is exceeded. Verifying MTU size prevents fragmentation and black-holed collaboration traffic such as voice and video across the site-to-site tunnel.

Why this answer

Option B (MTU size) is correct because site-to-site VPN tunnels add encapsulation overhead (e.g., IPsec ESP/AH headers), and if the MTU is not adjusted or fragmentation/PMTUD is not handled properly, large collaboration packets such as voice and video streams will be dropped or fragmented, degrading real-time traffic. Option D (UDP port range availability) is correct because collaboration traffic relies heavily on UDP (for example, RTP media streams and SIP signaling), so the required UDP port ranges must be permitted through the VPN and any intervening firewalls/ACLs for the tunnel to carry that traffic. Option E (DSCP tag preservation) is correct because collaboration traffic depends on QoS markings; if DSCP values are not preserved across the VPN (e.g., due to tunnel encapsulation or a misconfigured QoS policy), real-time voice and video packets lose their prioritization and suffer latency, jitter, and packet loss.

Option A (DHCP relay configuration) is not required for a site-to-site VPN check because DHCP relay concerns local address assignment, not the transport of collaboration traffic across the tunnel. Option C (NTP server reachability) is not a mandatory item for this check, since NTP is important for general network health and certificate/logging accuracy but is not a direct requirement for forwarding collaboration traffic over a site-to-site VPN.

Exam trap

The trap here is selecting NTP or DHCP relay as VPN verification items because they are generally important in collaboration, but the question specifically targets VPN traffic handling: MTU, UDP ports, and DSCP.

203
MCQmedium

You are designing a solution for secure voice signaling. Which protocol provides encryption for SIP signaling messages in a CUCM environment?

A.IPsec
B.SRTP
C.TLS
D.SSH
AnswerC

TLS encrypts SIP signalling hop by hop, securing the signalling path between CUCM and endpoints or trunks. It satisfies the requirement for encrypted voice signalling, unlike plain SIP over TCP or UDP, which transmit headers and messages in cleartext.

Why this answer

TLS (Transport Layer Security) is the protocol used to encrypt SIP signaling messages in a CUCM environment. SIP over TLS (SIPS) provides encryption and authentication for signaling, ensuring that messages like INVITE, BYE, and REGISTER are secure. CUCM supports TLS for SIP trunking and line-side signaling.

Exam trap

CLCOR often tests the distinction between signaling and media encryption; candidates may confuse SRTP (media) with TLS (signaling) or think IPsec is used for SIP encryption, but TLS is the correct protocol for SIP signaling.

How to eliminate wrong answers

Option A is wrong because IPsec is typically used for network-layer encryption (e.g., VPNs) and not specifically for SIP signaling encryption in CUCM. Option B is wrong because SRTP encrypts media (voice/video), not signaling. Option D is wrong because SSH is used for secure CLI access, not for SIP signaling.

204
MCQeasy

Which protocol provides the signaling for Webex Room devices when they are registered to CUCM (on-premises)?

A.MGCP
B.SCCP
C.SIP
D.H.323
AnswerC

SIP carries the call signalling — registration, invite and session setup — between Webex Room devices and CUCM. Registering on-premises requires this signalling channel, so SIP satisfies the stem's requirement, while media itself flows separately over RTP.

Why this answer

Webex Room devices, when registered on-premises to CUCM, use SIP (Session Initiation Protocol) for signaling. SIP is the standard protocol for establishing, modifying, and terminating multimedia sessions, and it is supported by Webex devices for call control with CUCM.

Exam trap

CLOOR often tests the confusion between signaling protocols, where candidates might think SCCP or MGCP is used for Webex devices, but SIP is the correct protocol.

How to eliminate wrong answers

Option A is wrong because MGCP (Media Gateway Control Protocol) is used for gateway control, not for endpoint signaling by Webex devices. Option B is wrong because SCCP (Skinny Client Control Protocol) is a Cisco proprietary protocol used by older IP phones, but Webex Room devices do not support SCCP. Option D is wrong because H.323 is an older suite of protocols for multimedia communication, but Webex devices use SIP for CUCM registration.

205
MCQeasy

Which protocol is used by IP phones to register with the Cisco Unified Communications Manager?

A.RTCP
B.SCCP or SIP
C.MGCP
D.H.323
AnswerB

Cisco IP phones register with Cisco Unified Communications Manager using either SCCP, Cisco's proprietary signalling protocol, or SIP, the standards-based alternative. Both are supported registration protocols, so the option correctly names the pair the phones rely on.

Why this answer

Cisco IP phones register with Cisco Unified Communications Manager using either SCCP (Skinny Client Control Protocol) or SIP (Session Initiation Protocol), depending on the phone model and firmware configuration. Both are supported signaling protocols for phone registration and call control in CUCM.

Exam trap

The trap is confusing signaling protocols used for phone registration (SCCP/SIP) with protocols used for gateway control (MGCP), media monitoring (RTCP), or legacy trunking (H.323) — candidates who do not separate 'phone-to-CUCM' from 'CUCM-to-gateway' signaling pick the wrong protocol.

How to eliminate wrong answers

Option A is wrong because RTCP (RTP Control Protocol) is used for monitoring QoS statistics of an RTP media stream, not for phone registration. Option C is wrong because MGCP (Media Gateway Control Protocol) is used by CUCM to control voice gateways, not by IP phones to register. Option D is wrong because H.323 is a legacy VoIP signaling protocol used for gateway and intercluster communication, not the primary registration protocol for Cisco IP phones.

206
MCQmedium

A network engineer is configuring a Cisco IOS router to mark voice bearer traffic with the DSCP value EF (46) and call signaling traffic with CS3 (24). The engineer wants to ensure that both marking operations are applied in a single policy-map on the ingress interface. Which configuration element is required to differentiate the two traffic classes before marking?

A.A class-map that matches on IP precedence 5 for voice and 3 for signaling.
B.A class-map that matches voice bearer and signaling using ACLs or protocol-specific match criteria.
C.A policy-map that uses the 'set ip dscp' command with a table-map to translate incoming markings.
D.A route-map that matches on RTP and SIP ports and sets the DSCP values.
AnswerB

To apply different DSCP markings to voice and signaling, the router must first identify each traffic type. A class-map with match statements such as 'match ip dscp' is not sufficient if traffic is unmarked; instead, matching on UDP port ranges (e.g., 16384-32767 for RTP) or on protocols like SCCP/SIP is needed. This class-map then feeds into the policy-map where 'set dscp ef' and 'set dscp cs3' are applied.

Why this answer

The correct approach is to create a class-map that identifies voice bearer and signaling traffic based on protocol and port numbers, then reference that class-map in a policy-map where DSCP values are set. This ensures that both traffic types are properly marked regardless of their initial markings. Using ACLs or protocol-specific match criteria allows precise differentiation, which is essential for downstream QoS treatment.

Exam trap

The trap here is assuming that matching on existing DSCP or IP precedence is sufficient, but unmarked or differently marked traffic would not be classified correctly.

207
MCQmedium

A Cisco Webex Room Kit is registered to CUCM on-premises. The administrator wants to enable encryption for signaling and media. Which protocol does the device use for secure signaling when registered to CUCM?

A.HTTPS
B.SIP over TLS
C.TLS for media
D.SRTP
AnswerB

SIP over TLS is used for secure signaling between Cisco Webex Room devices and CUCM. When encryption is enabled, the device uses TLS to encrypt SIP messages, ensuring that signaling information such as call setup and teardown is protected. This is part of a secure collaboration environment and is supported by CUCM for endpoints that support TLS, including Webex Room devices.

Why this answer

Cisco Webex Room devices use SIP over TLS for secure signaling when registered to CUCM. This encrypts the SIP messages, protecting call control information. For media encryption, SRTP is used.

Together, they provide a secure collaboration environment. The administrator should ensure that CUCM is configured with a secure SIP profile and that the device trusts the CUCM certificate.

Exam trap

The trap here is confusing signaling encryption with media encryption; SRTP is for media, while SIP over TLS is for signaling.

208
MCQhard

You are configuring Webex Hybrid Data Security (HDS). What is the purpose of the 'Key Management Service' (KMS) in this architecture?

A.To authenticate users against local Active Directory
B.To facilitate the storage of encrypted meeting recordings
C.To manage SIP signaling encryption
D.To allow the enterprise to maintain control over encryption keys
AnswerD

The Key Management Service holds and manages the encryption keys used by the HDS nodes, keeping key custody within the enterprise rather than with Cisco. This satisfies the requirement that the organisation retains control over its encryption keys.

Why this answer

In Webex Hybrid Data Security (HDS), the Key Management Service (KMS) is a customer-deployed component that stores and manages the encryption keys used to encrypt Webex content (messages, files, whiteboards). Its core purpose is to give the enterprise sole control over those keys, so Cisco cannot decrypt the content — this is the 'hybrid' data security promise. Thus, the correct answer is that KMS allows the enterprise to maintain control over encryption keys.

Exam trap

The trap here is confusing KMS with general encryption services — candidates may pick 'storage of encrypted recordings' because KMS sounds like it stores data, but it only manages keys, not content.

How to eliminate wrong answers

Option A is wrong because user authentication against Active Directory is handled by the Expressway/Connector and Webex Identity, not by KMS. Option B is wrong because KMS manages keys for encryption, but the storage of encrypted meeting recordings is handled by Webex storage services, not KMS itself. Option C is wrong because SIP signaling encryption (TLS) is managed by CUCM/Expressway certificates, not by the HDS KMS.

209
Multi-Selectmedium

A collaboration engineer is deploying Cisco Webex Hybrid Message Service with Cisco Unified Communications Manager (CUCM) and Expressway-C. The requirement is to enable secure instant messaging and presence between on-premises CUCM users and Webex. Which two components are required for this deployment? (Choose two.)

Select 2 answers
A.Cisco Webex Meetings Server
B.Cisco Unified Border Element (CUBE)
C.Cisco Unified Communications Manager IM and Presence Service
D.Cisco Expressway-C with Hybrid Message Service connector
E.Cisco TelePresence Video Communication Server (VCS)
AnswersC, D

The IM and Presence Service on-premises is required to provide instant messaging and presence for CUCM users. The Hybrid Message Service connector integrates this on-premises service with Webex, allowing users to communicate with Webex users. Without it, there is no on-premises IM and presence to extend to the cloud.

Why this answer

Hybrid Message Service requires the Expressway-C with the Hybrid Message Service connector and the on-premises IM and Presence Service. The connector bridges the on-premises IM and Presence with Webex, enabling secure instant messaging and presence federation. Other components like Webex Meetings Server, VCS, or CUBE are not part of this architecture.

Exam trap

The trap here is confusing components from other hybrid services, such as CUBE for Edge Audio or VCS for video, when the question specifically asks for Hybrid Message Service requirements.

210
MCQhard

A user is unable to receive incoming PSTN calls via a Webex Calling Local Gateway. You observe that the INVITE from the provider reaches the CUBE, but the CUBE sends a 403 Forbidden. What is the most likely cause?

A.The PSTN provider is using an unsupported codec
B.The incoming dial peer is missing or misconfigured
C.The Webex cloud is unreachable
D.The user's directory number is not in the PSTN white list
AnswerB

The CUBE matches inbound calls against incoming dial peers; if none matches the provider's INVITE, or the peer lacks the correct destination pattern and voice translation rules, call admission fails and the CUBE returns 403 Forbidden rather than routing to the Local Gateway.

Why this answer

A 403 Forbidden response from the CUBE indicates that the incoming INVITE is being rejected due to a dial peer mismatch. The incoming dial peer is responsible for matching incoming calls and applying the correct configuration; if it is missing or misconfigured, the CUBE cannot route the call and returns 403.

Exam trap

The trap is assuming that a 403 Forbidden is related to authentication or permissions, when in CUBE it often indicates a dial peer mismatch. Candidates might also confuse it with codec issues, but the SIP response code is the key differentiator.

How to eliminate wrong answers

Option A is wrong because an unsupported codec would typically result in a 488 Not Acceptable Here or 415 Unsupported Media Type, not 403 Forbidden. Option C is wrong because if the Webex cloud were unreachable, the call would not reach the CUBE at all, or the CUBE would fail to route to Webex, but the 403 is generated by the CUBE itself. Option D is wrong because a PSTN white list issue would usually cause a 404 Not Found or 403 from the provider, not from the CUBE after the INVITE has reached it.

211
MCQmedium

A company has deployed Webex Hybrid Call Service Connect to allow Webex App users to make calls using their on-premises Cisco Unified Communications Manager (CUCM) infrastructure. Users report that they can see presence but cannot make calls. Which component should be checked first to ensure that call signaling is working?

A.Cisco Expressway-E
B.Cisco Unified Communications Manager IM and Presence Service
C.Expressway-C connector
D.Webex Hybrid Data Security
AnswerC

The Expressway-C connector is critical for Hybrid Call Service Connect because it handles call signaling between Webex and CUCM. If users can see presence but cannot make calls, the Expressway-C may not be properly registered or the call connector may be down. Checking its status and logs is the first step to isolate signaling issues.

Why this answer

The Expressway-C connector is the correct component to check first because it is responsible for call signaling between Webex and CUCM in Hybrid Call Service Connect. If it is not functioning, users may experience presence but cannot make calls. Verifying its status and logs will help identify signaling problems.

Exam trap

The trap here is assuming that presence and call signaling use the same path, but presence may work through a different service, so checking IM and Presence is misleading.

212
MCQhard

You are configuring DNS SRV records to support Jabber service discovery. Which domain format is correct for the _collab-edge._tls record?

A._tls._collab-edge.example.com
B.collab-edge.example.com._tls
C._collab-edge._tcp.example.com
D._collab-edge._tls.example.com
AnswerD

The _collab-edge._tls SRV record must sit under the organisation's own domain to let external clients resolve Expressway-E for Mobile and Remote Access. Placing it at example.com satisfies the stem's requirement for the correct service-discovery domain format, since _collab-edge is queried against the customer domain, not a subdomain such as _cisco-uds.

Why this answer

DNS SRV records use the format _service._protocol.domain. For Jabber service discovery, the service is 'collab-edge' and the protocol is 'tls', so the correct record is _collab-edge._tls.example.com. This record is used by clients to locate the Expressway-E for Mobile and Remote Access (MRA) and is queried during the initial service discovery process.

Exam trap

CLCOR often tests the exact ordering of service and protocol labels in SRV records, and candidates frequently reverse them or use _tcp instead of _tls for the collab-edge record.

How to eliminate wrong answers

Option A is wrong because it reverses the service and protocol labels, using _tls._collab-edge, which does not conform to the SRV record naming convention. Option B is wrong because it places the domain before the service and protocol labels, which is not valid DNS syntax. Option C is wrong because it uses _tcp instead of _tls; while _tcp is used for other services like _cisco-uds._tcp, the _collab-edge record specifically requires _tls.

213
MCQhard

A Cisco Unified Border Element is deployed between Cisco Unified Communications Manager and a SIP provider. The provider requires that the gateway insert a Diversion header containing the original called number when a call is forwarded. The engineer plans to use a SIP profile to accomplish this. Which statement accurately describes the capability of SIP profiles in this scenario?

A.SIP profiles can insert a Diversion header by using the request URI of the original call, provided the profile is applied globally with the sip-profiles command.
B.SIP profiles can copy the original called number into a Diversion header by using a copy rule that references the incoming Request-URI.
C.SIP profiles can insert a Diversion header only if the dial peer is configured with the diversion command under voice-class sip.
D.SIP profiles can modify existing SIP headers and add or remove headers, but they cannot by themselves generate a Diversion header with the original called number for a forwarded call.
AnswerD

SIP profiles provide header manipulation: adding, removing, or modifying headers on inbound and outbound messages. They do not automatically derive the original called number and place it into a Diversion header for forwarded calls. That task generally requires additional logic such as a normalization script or specific CUBE features designed for diversion handling.

Why this answer

SIP profiles are designed for header manipulation: adding, removing, or modifying SIP headers on inbound and outbound messages. They do not natively understand call-forwarding context or automatically create a Diversion header containing the original called number. To achieve that, an engineer must use additional features such as SIP normalization scripts or CUBE's diversion-specific capabilities.

Relying solely on a SIP profile will not satisfy the provider's requirement for a Diversion header.

Exam trap

The trap here is assuming that SIP profiles can perform call-forwarding-aware header insertion, when they actually only manipulate headers based on static rules.

214
MCQmedium

Which log file is most useful for troubleshooting registration issues between an IP phone and CUCM?

A.Cisco CallManager Traces
B.System Health Reports
C.Cisco TFTP Logs
D.Cisco Tomcat Logs
AnswerA

Cisco CallManager Traces record SCCP, SIP and TFTP registration exchanges between IP phones and CUCM, capturing the exact signalling failures. This directly satisfies the stem's requirement for troubleshooting registration issues, unlike SDL or CDR logs, which cover call processing and billing records.

Why this answer

Cisco CallManager Traces (often called SDI/SDL traces) capture the detailed signaling exchange between the IP phone and CUCM during registration, including SCCP/SIP messages, device state changes, and error codes. These traces are the primary tool for diagnosing why a phone fails to register, as they show the exact point of failure in the registration handshake. Other logs either provide aggregated health metrics or focus on different services (TFTP, Tomcat) that are not directly involved in the registration signaling path.

Exam trap

CLCOR often tests the distinction between logs for different CUCM services, and candidates may incorrectly assume that TFTP logs (which handle configuration files) or Tomcat logs (which handle web services) are involved in registration, when in fact registration signaling is exclusively captured in CallManager traces.

How to eliminate wrong answers

Option B is wrong because System Health Reports provide high-level performance and status summaries, not the granular protocol-level details needed to troubleshoot a specific registration failure. Option C is wrong because Cisco TFTP Logs only record file transfers (e.g., configuration, firmware) and do not capture the registration signaling between the phone and CUCM. Option D is wrong because Cisco Tomcat Logs pertain to the Tomcat web service (used for CUCM web administration and services like Cisco Unified Reporting), not to the call-processing registration process.

215
MCQmedium

Which option allows a customer to keep their existing PSTN numbers while moving to Webex Calling?

A.Number aliasing.
B.Number forwarding.
C.Number porting.
D.Number provisioning.
AnswerC

Number porting transfers existing PSTN numbers from the current carrier to Webex Calling, preserving the digits users already know. This directly satisfies the requirement to keep existing numbers, unlike provisioning new numbers or forwarding, which would change them.

Why this answer

Number porting is the regulated process (governed by FCC/local authorities) that transfers an existing PSTN number from one carrier to another while preserving the number itself. When migrating to Webex Calling, the customer submits a port request with a Letter of Authorization (LOA) and recent bill so Cisco's carrier partner can pull the DIDs from the incumbent provider. This is the only option that actually moves ownership of the number rather than just redirecting or labeling it.

Exam trap

CLCOR often tests the distinction between moving a number (porting) versus redirecting or relabeling it (forwarding/aliasing), so candidates who pick 'forwarding' miss that ownership must transfer.

How to eliminate wrong answers

Option A is wrong because number aliasing only creates an additional label or alternate dial string that maps to an existing number — it does not transfer ownership from the current carrier. Option B is wrong because number forwarding simply redirects incoming calls to another destination while the original carrier still owns and bills the number, so the customer has not truly 'kept' it on Webex. Option D is wrong because number provisioning is the act of assigning new numbers from Webex's inventory, not migrating existing ones from an external carrier.

216
Multi-Selecthard

Which THREE actions are possible using SIP profiles on a CUBE?

Select 3 answers
A.Modify SIP headers
B.Add SIP headers
C.Remove SIP headers
D.Change voice codec
E.Route calls to PSTN
AnswersA, B, C

Used for header normalization.

Why this answer

SIP profiles on Cisco Unified Border Element (CUBE) are used to manipulate SIP signaling by inspecting and altering SIP messages, so option A (Modify SIP headers) is correct because rules within a SIP profile can rewrite existing header values such as From, To, or Diversion. Option B (Add SIP headers) is correct because SIP profiles support the 'request' and 'response' header-insertion rules that inject new headers into inbound or outbound SIP messages. Option C (Remove SIP headers) is correct because SIP profiles can strip unwanted headers via header-removal rules, which is common for privacy or interop scenarios.

Option D (Change voice codec) is not a SIP-profile function; codec negotiation is handled by dial peers (codec preference lists, 'codec' commands) and SDP, not by SIP header manipulation. Option E (Route calls to PSTN) is also not a SIP-profile action; call routing is determined by dial-peer matching and translation rules, while SIP profiles only affect SIP message content.

Exam trap

CLCOR often tests whether candidates conflate signaling manipulation (SIP profiles) with media/codec or routing functions — SIP profiles only rewrite headers and SDP text, never codecs or call paths.

217
MCQmedium

You are designing Quality of Service (QoS) for a Cisco Collaboration deployment. The customer wants to ensure that voice traffic is prioritized over data traffic. Which marking should be applied to voice bearer traffic on Cisco IP Phones and switches?

A.IP DSCP AF31 (26) and CoS 3.
B.IP DSCP EF (46) and CoS 5.
C.IP DSCP CS3 (24) and CoS 3.
D.IP DSCP AF41 (34) and CoS 4.
AnswerB

Voice bearer traffic should be marked with DSCP EF (Expedited Forwarding, 46) and CoS 5. This is the standard Cisco recommendation for voice media. EF provides low latency, low jitter, and low loss, which are critical for voice quality. CoS 5 is used at Layer 2 to ensure proper queuing on trunk links.

Why this answer

Voice bearer traffic must be marked with DSCP EF (46) and CoS 5 to ensure it receives priority treatment across the network. This is the Cisco best practice for QoS. The other markings are used for different traffic types, such as video or signaling, and would not provide the required priority for voice.

Exam trap

The trap here is confusing the markings for voice with those for video or call signaling, such as using AF41 or CS3 for voice.

218
MCQmedium

When troubleshooting a Hybrid Media Service node, which log file is most critical for determining if the media is being routed correctly to the cloud?

A.Hybrid Media Service logs
B.Cisco Discovery Protocol logs
C.System event logs
D.Call processing logs
AnswerA

Hybrid Media Service logs record call routing decisions between on-premises and cloud media paths, showing whether media is delivered to the correct cloud node. They directly satisfy the need to verify correct cloud routing during troubleshooting.

Why this answer

The Hybrid Media Service logs are the most critical for troubleshooting media routing issues because they contain detailed information about how the Hybrid Media Service node handles media streams, including routing decisions and errors. The correct answer is A.

Exam trap

CLCOR often tests the specific log files for different troubleshooting scenarios, and candidates may choose general logs like system event logs or call processing logs instead of the specialized Hybrid Media Service logs. The trap is not knowing which log provides the necessary media routing details.

How to eliminate wrong answers

Option B is wrong because Cisco Discovery Protocol logs are used for Layer 2 neighbor discovery and do not provide media routing details. Option C is wrong because system event logs are general OS logs and do not contain specific media routing information. Option D is wrong because call processing logs focus on call signaling, not media routing; they may show call setup but not the media path.

219
Multi-Selecthard

Which THREE parameters are affected when you change the 'Location' of a device?

Select 3 answers
A.Video bandwidth limits
B.The phone's directory number.
C.The phone's display language.
D.Audio bandwidth limits
E.RSVP-enabled path
AnswersA, D, E

Changing a device's Location in Cisco Unified Communications Manager reassigns its device pool, which governs the regional settings applied to that device. Location determines the maximum audio and video bandwidth permitted between devices, so video bandwidth limits shift accordingly. This satisfies the stem's constraint that Location changes affect bandwidth parameters.

Why this answer

Changing a device's Location in Cisco Unified Communications Manager applies the region and location bandwidth policies tied to that Location, so it directly affects the video bandwidth limits (A) and audio bandwidth limits (D) available for calls involving that device, since Location defines the maximum audio/video bit rate allowed between locations. It also changes the RSVP-enabled path (E), because Locations are used with RSVP-based call admission control to determine the reserved path and bandwidth between sites. The phone's directory number (B) is assigned independently via line/DN configuration and is not altered by moving the device to another Location.

The phone's display language (C) is a device/user locale setting and is unrelated to Location-based bandwidth or RSVP parameters.

Exam trap

CLCOR often tests which parameters are tied to Location — candidates forget that RSVP and video bandwidth are also Location-controlled, not just audio.

220
Multi-Selectmedium

A network designer is implementing QoS for a Cisco Collaboration deployment. Which two statements about the trust boundary in a Cisco QoS design are true? (Choose two.)

Select 2 answers
A.All traffic from a PC connected to an IP Phone should be trusted by default.
B.The trust boundary should be placed at the core layer to centralize QoS marking.
C.Cisco IP Phones are typically trusted to mark voice traffic correctly, so the switch port should trust DSCP.
D.The trust boundary is only necessary for voice media, not for call signaling.
E.The trust boundary should be as close to the source of traffic as possible.
AnswersC, E

Cisco IP Phones are designed to mark voice media as EF and signaling as CS3. When connected to a switch, the switch port can be configured to trust the DSCP markings from the phone. This simplifies QoS deployment and is a recommended practice in Cisco collaboration networks.

Why this answer

The trust boundary should be as close to the source as possible, and Cisco IP Phones can be trusted to mark voice and signaling traffic correctly. This ensures that QoS markings are preserved end-to-end and that other devices trust them. Placing the boundary at the core or trusting all PC traffic is not recommended.

Exam trap

The trap here is assuming that the trust boundary should be at the core or that all traffic from a phone port is trusted, but only the phone's traffic should be trusted.

221
MCQmedium

A collaboration engineer is deploying a new Cisco Webex Room Kit in a conference room. The endpoint will send 1080p video at 3 Mbps. The network administrator needs to ensure that the video traffic is marked with the appropriate DSCP value and receives proper treatment in the QoS policy. Which DSCP value should be used for this interactive video traffic?

A.CS4 (32)
B.AF41 (34)
C.AF31 (26)
D.EF (46)
AnswerB

AF41 (Assured Forwarding Class 4, Drop Precedence 1) is the recommended DSCP for interactive video traffic in Cisco collaboration networks. It provides a higher priority than best effort but lower than voice, ensuring that video is prioritized over data while not competing with voice. For a Webex Room Kit sending 1080p video, marking with AF41 ensures appropriate queuing and bandwidth guarantees in the QoS policy.

Why this answer

The correct DSCP for interactive video is AF41 (34). This marking ensures that video traffic is treated with assured forwarding and low drop precedence, providing a balance between priority and bandwidth guarantees. Voice uses EF, signaling uses CS3, and interactive video uses AF41.

This hierarchy ensures that voice gets the highest priority, followed by video, then signaling, then data. Marking video as AF41 allows network devices to apply appropriate queuing and congestion management.

Exam trap

The trap here is confusing video marking with voice marking (EF) or using CS4, which is not the standard for interactive video.

222
MCQmedium

You are configuring a SIP trunk between CUCM and a CUBE. Which setting is critical to ensure that the SIP signaling is encrypted?

A.SIP Trunk Security Profile
B.Enterprise Parameters
C.Device Pool
D.SIP Profile
AnswerA

The SIP Trunk Security Profile on the trunk controls TLS signalling encryption, determining whether the trunk uses a secure transport and which certificate trust settings apply. Without it, SIP signalling between CUCM and CUBE remains unencrypted regardless of other trunk parameters.

Why this answer

The SIP Trunk Security Profile in CUCM defines the security settings for a SIP trunk, including whether TLS is used for signaling encryption and whether digest authentication is enabled. To ensure SIP signaling is encrypted, the profile must be configured with a 'Secure' transport (TLS) and applied to the trunk. This is the critical setting that controls encryption of SIP messages between CUCM and CUBE.

Exam trap

CLCOR often tests the distinction between SIP Trunk Security Profile (encryption/authentication) and SIP Profile (protocol behavior), so the trap is selecting SIP Profile because it sounds like it controls all SIP settings.

How to eliminate wrong answers

Option B is wrong because Enterprise Parameters define cluster-wide defaults such as cluster ID and token expiration, not per-trunk SIP signaling encryption. Option C is wrong because a Device Pool groups devices for region, date/time, and call manager settings, but does not control SIP TLS. Option D is wrong because a SIP Profile defines SIP timers, headers, and normalization settings, not the security transport; it works alongside the security profile but does not enable encryption.

223
MCQhard

A company is implementing Webex Edge Connect. They require a dedicated circuit. Who must they coordinate with to set up the physical connection?

A.The local Internet Service Provider only.
B.The Webex Control Hub automated provisioning tool.
C.Cisco Technical Support
D.A certified Cisco Webex Edge Connect partner.
AnswerD

Webex Edge Connect requires a dedicated circuit provisioned through a certified Cisco Webex Edge Connect partner, who coordinates the physical cross-connect into Cisco's peering fabric. Cisco does not order the circuit directly, so partner involvement satisfies the dedicated-connection requirement.

Why this answer

Webex Edge Connect is a dedicated, private connectivity option between a customer's network and the Webex cloud, delivered via a Cisco-certified partner that has direct peering into Cisco's Edge Connect locations. The physical cross-connect, BGP peering, and circuit turn-up must be coordinated with that certified partner because they own the interconnection into Cisco's data centers. Cisco does not sell the circuit directly, and the customer's local ISP alone cannot provision the private handoff into Webex.

Exam trap

CLCOR often tests the misconception that Cisco or the local ISP provisions the Edge Connect circuit, when in reality only a certified Webex Edge Connect partner can coordinate the physical connection.

How to eliminate wrong answers

Option A is wrong because a local ISP only provides internet transit — it cannot provision the private cross-connect into Cisco's Edge Connect peering fabric. Option B is wrong because Control Hub is a management plane for configuring services and does not perform physical circuit provisioning or BGP peering. Option C is wrong because Cisco TAC supports the Webex service itself, not the physical circuit installation or partner-side cross-connect.

224
MCQeasy

Where in Webex Control Hub do you go to view the health status of all deployed Hybrid Services connectors?

A.Devices > Management
B.Analytics > Reports
C.Services > Hybrid
D.Users > Settings
AnswerC

The health status of all deployed Hybrid Services connectors is viewed under Services > Hybrid in Webex Control Hub. That page lists each connector, its cluster and its current state, letting administrators confirm whether on-premises components are running or degraded.

Why this answer

In Webex Control Hub, Hybrid Services connector health is monitored under Services > Hybrid. This section lists each connector (e.g., Calendar, Message, Directory, Call) and shows its status, version, and any alerts. Administrators use this page to verify connector registration, connectivity, and health.

Exam trap

CLCOR often tests Control Hub navigation by mixing up device management, analytics, and hybrid services; the trap is assuming connector health is under Devices or Analytics instead of Services > Hybrid.

How to eliminate wrong answers

Option A is wrong because Devices > Management is for device inventory and configuration, not hybrid connector health. Option B is wrong because Analytics > Reports provides usage and quality reports, not connector status. Option D is wrong because Users > Settings is for user account settings, not hybrid service monitoring.

225
MCQmedium

A network engineer is configuring a QoS policy on a Cisco IOS XE router for a collaboration deployment. The engineer needs to ensure that voice traffic is placed in a low-latency queue and that the queue has a strict priority, but also wants to limit voice traffic to 1 Mbps to prevent starvation of other traffic. Which queuing mechanism should be used?

A.Class-Based Weighted Fair Queuing (CBWFQ)
B.First-In, First-Out (FIFO) queuing
C.Weighted Random Early Detection (WRED)
D.Low Latency Queuing (LLQ)
AnswerD

LLQ combines strict priority queuing with a policer. It places voice traffic in a priority queue that is serviced before other queues, ensuring low latency and jitter. The policer limits the amount of traffic that can enter the priority queue, preventing starvation of other queues. Configuring LLQ with a bandwidth limit of 1 Mbps meets the requirement exactly.

Why this answer

Low Latency Queuing (LLQ) is the correct mechanism because it provides a strict priority queue for voice traffic while also allowing a bandwidth limit via the priority command. This ensures that voice packets are serviced first, minimizing latency and jitter, but the policer prevents voice from consuming all bandwidth and starving other traffic. CBWFQ lacks strict priority, WRED is for congestion avoidance, and FIFO is not suitable for real-time traffic.

Exam trap

The trap here is assuming that CBWFQ can provide the same low-latency treatment as LLQ, but CBWFQ only offers weighted fair queuing without strict priority.

Page 2

Page 3 of 4

Page 4

All pages