Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

300-820 by Cisco - Page 1 | ExamCademy

Mode Selection

Question 1

Question 2

Question 3

When the network requirements are configured for a new Video Mesh deployment, which firewall ports are required so that Video Mesh cascade signaling succeeds?

A TCP 443 and 444
B TCP 443 and 8443
C UDP 5004 and 5005
D UDP 33432 through 33433

Question 4

Which 16-digit number is unique to a serial number and is used to enable the system?

A RMS license key
B option key
C release key
D Expressway series

Question 5

Question 6

An engineer reviews the configuration of a pair of Expressway servers for a company with the domain example.com. The company allows toll fraud calls to reach the Cisco UCM only when it expects externally registered devices to call internal 5-digit extensions. The search history shows that the fraudulent calls have a destination URI of 8 or more digits and several domains. What must the engineer configure to prevent all toll fraud calls from going past the Expressway-E to the internal network?

A search rules to only route calls with a destination URI of 5 to 8 digits long on the Expressway-E
B CPL that blocks calls with a destination domain other than example.com on the Expressway-C.
C search rules to only route calls with a destination domain of example.com on the Expressway-E
D CPL to block calls with a destination URI with 8 or more digits on the Expressway-E

Question 7

Which two internal SIP endpoints behind a firewall place calls to external devices? (Choose two.)

A An Expressway-C communicates with the internal endpoint and forwards the media to and from an Expressway-E.
B A Cisco Endpoint is configured with a publicly routable static NAT SIP address to advertise instead of is private IP address.
C An Expressway-C communicates directly with the remote party using the ICE protocol
D An Expressway-E is used as a VPN server to allow remote SIP edge servers to connect calls
E An Expressway-C rewrites the SIP SDP to advertise its own IP address to the external party.

Question 8

Which mechanism does TLS use to validate identity?

A server certificate
B shared secret
C username and a password
D IP address of the peer

Question 9

An engineer is investigating failing incoming calls that are expected to connect. The engineer notices that the failed calls all have a port number of 5060 at the end of the URI. The search rules are configured in a way that they do not expect a port to be included. Which configuration allows the routing of this call?

A
- transform with a pattern string of (.)@example.com(:5060)?"
- replace a suing of \1@example.com
B
- search rule with a pattern string of “(.*)@example.com(:5050)?"
- replace a string of \1\2@example com
C search rule with a pattern string of “(.*)@example.com(:5060)?"
- replace a string of \1@example.com\2
D
- transform with a pattern string of “(.*)@example.com(:5060)?"
- replace a string of \1@example.com\2

Question 10

Question 11

An engineer configures a Cisco Collaboration environment to use Mobile and Remote Access for external access for company users. The engineer uses OAuth with refresh on the Cisco UCM SIP lines for extra security and improved user experience. During the setup, Mobile and Remote Access does not work, it is enabled on the Cisco UCM and Cisco Expressways. SIP trunks on ports 5090 and 5091 are configured to avoid conflicts with other SIP trunks between internal Cisco UCM clusters. The traversal zone also uses port 6500. The traversal zone between Expressways shows no errors, and the requests hit Expressway-E from the Internet. What is the reason that the solution does not work?

A Mobile and Remote Access does not support OAuth with refresh with this configuration,
B The default port for Mobile and Remote Access is 6001. Therefore, the traversal port must be port 6001 for Mobile and Remote Access to work.
C The default port for Mobile and Remote Access is 6500, which creates a conflict with the existing traversal zone port.
D The default port for Mobile and Remote Access is 5091, which creates a conflict with the existing SIP trunks.

Question 12

What is a benefit of Cisco Webex Messenger Cloud deployment?

A Cloud deployment is more secure than an on-premises deployment.
B There is no additional cost to use a cloud deployment.
C Cloud deployment allows interoperability between Cisco Jabber and Webex Teams users.
D Cloud deployment is faster than using an on-premises deployment.

Question 13

What is the Cisco-recommended key length in bits for a Cisco Expressway certificate?

A 1024
B 2048
C 4096
D 8192

Question 14

Cisco Collaboration endpoints are exchanging encrypted signaling messages. What is one complication in implementing NAT ALG for voice and video devices?

A NAT ALG is not compatible with the H.323 signaling protocol.
B NAT ALG introduces latency in the media path.
C The NAT ALG cannot inspect the contents of encrypted signaling messages.
D NAT ALG requires the use of NAT reflection, which may not be supported on all firewalls.

Question 15

How are Cisco Webex Video Mesh deployments supported?

A Video Mesh Dual NIC are supported in demilitarized deployments.
B Mixed Single NIC and Dual NIC are supported in the same data center deployments.
C Clustering Video Mesh Nodes over the WAN are supported if Round Trip Time is low.
D IPv6 and IPv4 deployments are supported for Video Mesh clusters.

Question 16

An administrator is deploying Cisco Expressways for Mobile and Remote Access. The registration domain is “example.com”, and the Expressway-E FQDN is “expe.example.com”. Cisco Jabber clients on the internet cannot discover services via DNS lookup. Which SRV records must be configured in the public DNS to allow Service Discovery?

A _collab-edge._tls.example.com
B _cisco-uds_tcp.expe.example.com
C _cisco-uds_tcp.example.com
D _collab-edge_tls.expe.example.com

Question 17

How is the communication routed in a Hybrid deployment so that people on Cisco Cloud-Based IM are able to communicate with Cisco Jabber users in the on-premises environment?

A The Expressway-C enables a connection directly with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.
B The Expressway-E located in the DMZ establishes a connection with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.
C The Cisco Unified IM and Presence server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.
D The Cisco UC server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.

Question 18

An engineer learns from an end user that calls from outside the company are not being received. Calls are being made to other businesses outside of the company on video using URL addresses. The change management log shows no changes in the configuration of the collaboration solutions. The engineer examines the endpoint, which seems to be registered to the Cisco UCM, and the SIP trunk between the Cisco UCM and sees that the Expressway is also up. In addition, the traversal link shows no errors between the Expressways. Which action must the engineer take to troubleshoot this issue?

A On the Cisco UCM, run the Real-Time Monitoring Tool to see if any incoming calls fail.
B On the Expressway-E, run diagnostic logging under maintenance to see if any requests reach the system.
C On the Expressway-E, check the NTP settings to ensure that TLS will be able to terminate. If the clock is out of sync, incoming calls from other working systems would work bur not outgoing calls from the company.
D On the Expressway-C, run a network log under administrative tools to see if any requests reach the system.

Question 19

Which protocol and port are used for signaling between on-premises Cisco Webex Video Mesh Nodes and Cloud Media Services?

A standard SIP over TCP port 5060
B signaling over HTTPS TCP port 443
C standard SIP TLS over TCP port 5061
D signaling over TCP port 444

Question 20

An engineer is supporting an existing Cisco Collaboration deployment that has internal and external home users using the solution without VPN. Business usage also includes B2B calling for voice and video. Suddenly the engineer receives a report that one of the home office users cannot use the Cisco Jabber client, and shortly after, a few more reports come in for the same error. What must the engineer check first to resolve this issue?

A client logs of the users
B real-time monitoring toll logs for problems
C alarms on the Cisco Expressways
D alarms on the Cisco UCM Cluster

Question 21

Which interworking option must be used on the Expressway for it to act as a SIP/H.323 gateway when no endpoint is registered?

A enabled
B registered only
C off
D on

Question 22

Question 23

An administrator configures a secure SIP trunk in Cisco UCM to Expressway-C. The SIP trunk fails to become active, and an examination of a packet capture finds that the TLS handshake failed with a “Certificate Unknown” error from Cisco UCM. To allow the Cisco UCM to trust the Expressway-C and establish a TLS connection, the administrator will upload the Expressway server certificate to the trust store. To which trust store must the certificate be uploaded?

A tomcat-trust
B CallManager-trust
C TVS-trust
D ipsec-trust

Question 24

Question 25

An administrator is enabling Mobile and Remote Access login for the Cisco UCM registration domain cisco.com. Phones are registered with a Cisco UCM phone security profile name of securephone.cisco.com. Which two subject alternative names must be configured? (Choose two.)

A Securephone.cisco.com on the CallManager certificate
B cisco.com on the Expressway-C certificate
C Securephone.cisco.com on the Expressway-E certificate
D cisco.com on the Expressway-E certificate
E Securephone.cisco.com on the Expressway-C certificate

Page 1 of 8 • Questions 1-25 of 183

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Which complication does a NAT introduce in SDP for a SIP call?

A Additional headers due to NAT encapsulation can cause the packet size to exceed the MTU.
B When the client is behind a NAT they may be unable to determine the appropriate offset due to time zones.
C The IP address specified in the connection data field may be an unrouteable internal address.
D The encryption keys advertised in the SDP are only valid for clients not behind a NAT.

An organization with a domain name of example.com.
Which two SRV records are valid for a SIP and H.323 communication? (Choose two.)

A _sips._tcp.example.com
B _sips._udp.example.com
C _h323ls._udp.example com
D _h323ls._tcp.example.com
E _collab-edge._tls.example.com

Refer to the exhibit. What are “Type” field values for this Expressway servers zone configuration?

A Expressway-C “DNS”, Expressway-E “Traversal server”
B Expressway-C “Traversal server”, Expressway-E “Traversal client”
C Expressway-C “Neighbor”, Expressway-E “Neighbor”
D Expressway-C “Traversal client”, Expressway-E “Traversal server”

Refer to the exhibit. Call policy rules on an Expressway-E prevent external callers from the internet from calling a VIP whose URI is vip@cisco.com. Which additional configuration setting is required for this call policy to function as intended?

A The default zone on the Expressway-E must not be configured to treat as authenticated.
B A search rule must be configured with an extract match for vip@cisco.com to pass the call to the Expressway-C.
C The Cisco TelePresence endpoint registered with the URI vip@cisco.com must be set in “do not disturb” mode.
D SIP TLS must be disabled on the Expressway-E.

Refer to the exhibit. An administrator troubleshoots Cisco Jabber users experiencing issues when trying to log in and notices errors in the Jabber problem report log. The administrator also sees that the Intercluster Sync Agent service is not running on the IMM and Presence server. Why is the Jabber client unable to sign in?

A The XmppSDK.dl file is missing from the IM and Presence server
B The XMPP stanza is not using the correct ID for the Jabber client.
C The XMPP bind failed on the IM and Presence server
D The Jabber client refused the XMPP bind connection.

Refer to the exhibit. Which two numbers match the regular expression? (Choose two.)

A d20d16d20d22
B 2091652010224
C 209165200225
D d209d165d200d224
E 209165200224

300-820Preview