Cisco Exam 300-820 Topic 25 Question 88 Discussion

Actual exam question for Cisco's 300-820 exam

Question #: 88
Topic #: 25

D18912E1457D5D1DDCBD40AB3BF70D5D

Refer to the exhibit showing logs from the Expressway-C, a copy of the Expressway-E certificate, and the UC traversal zone configuration for the Expressway-C. An office administrator is deploying mobile and remote access and sees an issue with the UC traversal zone. The zone is showing ''TLS negotiation failure''. What is causing this issue?

AThe Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

BThe Expressway-C is missing the FQDN of Cisco UCM in the Common Name of its certificate

CIn the UC Traversal Zone on the Expressway-C, the peer address is set to the IP of the Expressway-E,
which is not a SAN entry in the Expressway-E certificate

DThe Expressway-E does not have the FQDN of Cisco UCM listed as a SAN in its certificate

Show Suggested Answer

Suggested Answer: D

by Luke at Oct 22, 2024, 07:02 PM

Limited Time Offer

25%

Off

Get Premium 300-820 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

24 days ago

This question is like a game of Sudoku - you've got to put all the pieces together to get the right answer. I'm going to try to work through it step by step.

upvoted 0 times

Brunilda

16 days ago

A) The Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

upvoted 0 times

...

Craig

1 months ago

I'm leaning towards option B. The Expressway-C is missing the FQDN of the Cisco UCM in its certificate, and that's probably causing the problem. But I'm not totally sure.

upvoted 0 times

Veronika

9 days ago

C) In the UC Traversal Zone on the Expressway-C, the peer address is set to the IP of the Expressway-E, which is not a SAN entry in the Expressway-E certificate

upvoted 0 times

...

Deangelo

23 days ago

B) The Expressway-C is missing the FQDN of Cisco UCM in the Common Name of its certificate

upvoted 0 times

...

Daisy

25 days ago

A) The Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

upvoted 0 times

...

Candida

1 months ago

I agree, the Expressway-E certificate might be missing the FQDN of Cisco UCM.

upvoted 0 times

...

Micheline

1 months ago

This question is a real head-scratcher. I'm going to have to think about it for a while. Hopefully, I can figure it out before the exam!

upvoted 0 times

...

Ligia

1 months ago

I think the issue is with the Expressway-E certificate.

upvoted 0 times

...

Cristina

1 months ago

D seems like the most likely answer to me. The Expressway-E certificate is missing the FQDN of the Cisco UCM, and that's causing the TLS negotiation failure.

upvoted 0 times

Carmelina

7 days ago

D) The Expressway-E does not have the FQDN of Cisco UCM listed as a SAN in its certificate

upvoted 0 times

...

Bea

10 days ago

C) In the UC Traversal Zone on the Expressway-C, the peer address is set to the IP of the Expressway-E, which is not a SAN entry in the Expressway-E certificate

upvoted 0 times

...

Kenny

12 days ago

B) The Expressway-C is missing the FQDN of Cisco UCM in the Common Name of its certificate

upvoted 0 times

...

Ashlee

14 days ago

We should update the certificate to include the necessary information.

upvoted 0 times

...

Eladia

17 days ago

I agree. The TLS negotiation failure is likely due to that mismatch.

upvoted 0 times

...

Rosita

1 months ago

That makes sense. It's important for the certificates to match.

upvoted 0 times

...

Yuette

1 months ago

A) The Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

upvoted 0 times

...

Frederica

1 months ago

D is correct. The Expressway-E certificate needs the FQDN of Cisco UCM.

upvoted 0 times

...

Vanna

2 months ago

I think the answer is C. The peer address in the UC Traversal Zone on the Expressway-C is set to the IP of the Expressway-E, but that's not a SAN entry in the Expressway-E certificate. That's got to be the issue.

upvoted 0 times

Rocco

23 days ago

C) In the UC Traversal Zone on the Expressway-C, the peer address is set to the IP of the Expressway-E, which is not a SAN entry in the Expressway-E certificate

upvoted 0 times

...

Ngoc

26 days ago

B) The Expressway-C is missing the FQDN of Cisco UCM in the Common Name of its certificate

upvoted 0 times

...

Sherly

28 days ago

A) The Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

upvoted 0 times

...