I85PREP
⌘ K
Cisco CLCEI 300-820 study materials
Cisco CLCEI 300-820 study resources

Cisco CLCEI 300-820 practice questions

One question at a time. Build your Cisco CLCEI 300-820 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Hybrid and Cloud Collaboration Architecture and Deployment Models

A company wants to extend its on-premises Cisco Unified Communications Manager dial plan to Cisco Webex cloud services without replacing the existing PSTN carrier contracts. Which deployment approach best matches this requirement?

  1. On-premises-only Unified Communications Manager with no cloud integration
  2. A standalone Webex Meetings deployment with no calling license
  3. Fully cloud-only Webex Calling with all PSTN provided by Cisco Cloud Connected PSTN
  4. Hybrid services with Cisco Unified Communications Manager registered endpoints and cloud-based calling Correct answer.

Explanation

Hybrid calling deployments keep the existing Unified Communications Manager as the registration and dial-plan authority while extending services such as Webex Meetings, messaging, and cloud-connected PSTN into the cloud. This preserves existing carrier agreements while adding cloud capability. A cloud-only model would require migrating users and PSTN contracts entirely.

Question 2Hybrid and Cloud Collaboration Architecture and Deployment Models

Which Cisco component acts as the secure traversal gateway that connects on-premises collaboration infrastructure to the Webex cloud when a firewall separates the two environments?

  1. Cisco Unified Border Element in the data center
  2. Cisco TelePresence Management Suite
  3. Cisco Meeting Server
  4. Cisco Expressway-C and Expressway-E pair Correct answer.

Explanation

Expressway-C sits on the internal network and Expressway-E sits in the DMZ, forming the traversal pair that registers with the Webex cloud and securely bridges internal collaboration services. This pair is the standard hybrid edge for cloud connectivity. A Unified Border Element handles SIP trunking, not cloud traversal registration.

Question 3Hybrid and Cloud Collaboration Architecture and Deployment Models

In a hybrid deployment, which function does the Cisco Webex cloud perform for on-premises registered endpoints?

  1. It replaces Unified Communications Manager call control and registers all endpoints directly
  2. It manages endpoint firmware upgrades only
  3. It provides cloud-based conferencing, messaging, and directory services reachable through the traversal pair Correct answer.
  4. It terminates all PSTN calls for on-premises endpoints without a gateway

Explanation

In hybrid mode, Unified Communications Manager retains call control and endpoint registration while the Webex cloud supplies services such as conferencing, messaging, and directory lookups. Traffic to these services flows through the Expressway traversal pair. The cloud does not take over registration or PSTN termination in this model.

Question 4Hybrid and Cloud Collaboration Architecture and Deployment Models

Which DNS record type must be resolvable from the public internet so that external clients can reach the Expressway-E in a hybrid collaboration deployment?

  1. An A or AAAA record for the Expressway-E public FQDN Correct answer.
  2. An SRV record pointing to the internal Expressway-C
  3. A TXT record containing the cluster name
  4. A PTR record for the internal Unified Communications Manager node

Explanation

External clients and the Webex cloud must resolve the Expressway-E public address, which requires a public A record for IPv4 or AAAA record for IPv6. This record is part of the required DNS configuration for hybrid connectivity. Internal nodes are not exposed through public DNS.

Question 5Hybrid and Cloud Collaboration Architecture and Deployment Models

Which certificate authority trust model is required for the Expressway-E to establish secure connections with the Webex cloud?

  1. A private internal certificate authority generated on Expressway-C
  2. A self-signed certificate installed on both Expressways
  3. A certificate issued by the endpoint manufacturer
  4. A publicly trusted certificate authority that the cloud already trusts Correct answer.

Explanation

The Webex cloud validates the Expressway-E certificate against public trust anchors, so the certificate must be issued by a publicly trusted certificate authority with the correct subject alternative names. Private or self-signed certificates are not trusted by the cloud. This trust chain is fundamental to hybrid registration.

Question 6Hybrid and Cloud Collaboration Architecture and Deployment Models

Which license model allows an organization to use Webex cloud services while keeping Unified Communications Manager for call control?

  1. Cisco Smart Software Manager satellite registration
  2. Cisco Prime Collaboration Provisioning license
  3. Cisco Unified Workspace Licensing for on-premises only
  4. Webex hybrid services entitlement associated with the organization Correct answer.

Explanation

Hybrid services are enabled through Webex organization entitlements that activate cloud services for users whose call control remains on Unified Communications Manager. The entitlement is tied to the Webex organization and synchronized users. On-premises licensing alone does not activate cloud services.

Question 7Hybrid and Cloud Collaboration Architecture and Deployment Models

What is the primary purpose of the Cisco Webex Hybrid Calendar Service?

  1. It joins scheduled meetings automatically by reading calendar invitations Correct answer.
  2. It archives compliance recordings of calls
  3. It provides PSTN breakout for cloud-registered devices
  4. It synchronizes corporate directory contacts to the cloud

Explanation

Hybrid Calendar Service connects to the organization's calendar platform and uses meeting invitations to enable one-button join and automatic meeting join on collaboration devices. It does not handle directory sync, PSTN, or compliance archiving. Those functions belong to other hybrid services.

Question 8Hybrid and Cloud Collaboration Architecture and Deployment Models

Which connector is deployed on the customer network to enable Cisco Webex Hybrid Directory Service synchronization with on-premises Active Directory?

  1. Cisco Directory Connector Correct answer.
  2. Cisco Expressway-C
  3. Cisco Unified Border Element
  4. Cisco Meeting Server

Explanation

Cisco Directory Connector runs on a Windows host in the customer network and synchronizes users and groups from Active Directory to the Webex cloud. It is distinct from the Expressway traversal pair used for media and signaling. Directory Connector is the required component for Hybrid Directory Service.

Question 9Hybrid and Cloud Collaboration Architecture and Deployment Models

An administrator is deploying Expressway-E in a DMZ with dual network interfaces. Which configuration is correct for the internal-facing interface?

  1. Both interfaces should be on the same DMZ subnet for redundancy
  2. The internal interface should be disabled to force all traffic through the external interface
  3. It should be configured with the internal-facing interface toward Expressway-C and the external interface toward the internet Correct answer.
  4. The internal interface should use the public DNS servers only

Explanation

Expressway-E uses dual interfaces: one facing the internal network toward Expressway-C and one facing the external network toward the internet. This separation enforces the DMZ security model and traversal behavior. Placing both interfaces on the same subnet defeats the purpose of the DMZ design.

Question 10Hybrid and Cloud Collaboration Architecture and Deployment Models

A hybrid deployment requires that internal endpoints reach Webex cloud services while external endpoints connect through the edge. Which Expressway pairing provides the correct traffic path?

  1. Internal endpoints connect to the Unified Border Element, which connects to the cloud
  2. Internal endpoints connect directly to the Webex cloud without traversal
  3. Internal endpoints connect to Expressway-C, which forwards to Expressway-E, which connects to the cloud Correct answer.
  4. Internal endpoints connect directly to Expressway-E in the DMZ

Explanation

Expressway-C is the internal connection point and establishes a traversal zone to Expressway-E, which then connects outward to the Webex cloud. This chained path keeps the edge in the DMZ and centralizes cloud connectivity. Internal endpoints should not connect directly to the DMZ edge.

Question 11Hybrid and Cloud Collaboration Architecture and Deployment Models

Which statement describes how Expressway-C and Expressway-E authenticate to each other within a traversal zone?

  1. They authenticate only through the Webex cloud token exchange
  2. They rely on anonymous SIP without authentication
  3. They use SNMP community strings for authentication
  4. They use a shared zone key and TLS with certificates to establish a secure traversal connection Correct answer.

Explanation

The traversal zone between Expressway-C and Expressway-E is secured with TLS and a shared zone key that both peers must present. This ensures only authorized edge components can form the traversal link. Anonymous or SNMP-based authentication would not provide the required security.

Question 12Hybrid and Cloud Collaboration Architecture and Deployment Models

A company wants cloud-registered Webex devices to place calls to on-premises Unified Communications Manager endpoints. Which hybrid capability must be configured?

  1. Hybrid Calendar Service with mailbox delegation
  2. Webex Meetings site with PSTN dial-in only
  3. Hybrid calling with a SIP trunk between the Webex cloud and the on-premises infrastructure through Expressway Correct answer.
  4. Hybrid Directory Service with group synchronization

Explanation

Calling between cloud-registered devices and on-premises endpoints requires hybrid calling, where a SIP trunk connects the Webex cloud to the on-premises call control through the Expressway pair. Calendar and directory services do not carry call signaling. Meetings dial-in does not provide endpoint-to-endpoint calling.

Question 13Hybrid and Cloud Collaboration Architecture and Deployment Models

Which configuration must be applied on Expressway-E to allow the Webex cloud to reach it for hybrid services?

  1. Enable the traversal server role and register the system with the Webex cloud using the organization credentials Correct answer.
  2. Configure it as a Cisco Meeting Server call bridge
  3. Enable the traversal client role and register with Unified Communications Manager
  4. Configure the system as a Unified Border Element trunk peer

Explanation

Expressway-E acts as a traversal server and must be registered to the Webex cloud organization so the cloud can establish connections to it. Expressway-C acts as the traversal client toward the edge. The Unified Border Element and Meeting Server roles are unrelated to cloud registration.

Question 14Hybrid and Cloud Collaboration Architecture and Deployment Models

An administrator needs to verify that Expressway-C can reach the Webex cloud endpoints. Which outbound protocol and port combination is required for the cloud connection?

  1. UDP 161 outbound for SNMP polling
  2. TCP 22 outbound for SSH management
  3. TCP 443 outbound for HTTPS cloud connectivity Correct answer.
  4. UDP 5060 outbound for SIP signaling

Explanation

The Expressway pair uses outbound TCP 443 for HTTPS-based cloud connectivity and service registration, in addition to the media and signaling ports required for calls. SIP, SSH, and SNMP ports serve other purposes and are not the cloud registration channel. Allowing TCP 443 outbound is a baseline firewall requirement.

Question 15Hybrid and Cloud Collaboration Architecture and Deployment Models

Which statement correctly describes the difference between Webex Calling and a Unified Communications Manager hybrid calling deployment?

  1. Both models require Expressway-C as the call control server
  2. Webex Calling requires on-premises call control, while hybrid calling is fully cloud-based
  3. Hybrid calling eliminates the need for any PSTN gateway
  4. Webex Calling provides cloud call control, while hybrid calling keeps call control on Unified Communications Manager Correct answer.

Explanation

Webex Calling is a cloud calling service where the cloud provides call control and registration. In a hybrid calling deployment, Unified Communications Manager retains call control and the cloud extends services to those users. The two models differ fundamentally in where call control resides.

Question 16Hybrid and Cloud Collaboration Architecture and Deployment Models

A customer is deploying Hybrid Calendar Service and must allow the connector to reach both the on-premises calendar system and the Webex cloud. Which deployment consideration is most important?

  1. The connector must be placed in the DMZ with a public IP address
  2. The connector must run on the Expressway-E appliance
  3. The connector must use the same certificate as Expressway-E
  4. The connector host must have network access to the calendar platform and outbound HTTPS access to the Webex cloud Correct answer.

Explanation

The calendar connector needs to query the on-premises calendar system and reach the Webex cloud over outbound HTTPS, so both network paths must be allowed. It is typically placed on the internal network, not in the DMZ, and does not run on the Expressway appliance. Its certificate requirements are independent of the edge certificate.

Question 17Hybrid and Cloud Collaboration Architecture and Deployment Models

Which Cisco Webex hybrid service requires the Cisco Expressway traversal pair to be deployed in addition to the service-specific connector?

  1. Hybrid Directory Service
  2. Hybrid Calling (Webex Edge for Unified Communications Manager) Correct answer.
  3. Hybrid Message Service
  4. Hybrid Calendar Service

Explanation

Hybrid Calling relies on the Expressway pair to carry SIP signaling and media between the Webex cloud and on-premises Unified Communications Manager. Directory, Calendar, and Message services use connectors that communicate over HTTPS and do not depend on the traversal pair for media. The Expressway pair is therefore specific to the calling path.

Question 18Hybrid and Cloud Collaboration Architecture and Deployment Models

An organization wants to register Webex devices in the cloud while still routing their calls to on-premises Unified Communications Manager. Which architecture supports this requirement?

  1. Devices registered to Unified Communications Manager using a cloud PSTN gateway
  2. Devices registered to a third-party SIP registrar with no cloud integration
  3. Cloud-registered devices using hybrid calling through the Expressway pair to Unified Communications Manager Correct answer.
  4. Devices registered to Cisco Meeting Server using SIP trunks to the cloud

Explanation

Cloud registration with hybrid calling lets devices register to the Webex cloud while call routing to on-premises endpoints flows through the Expressway pair to Unified Communications Manager. This is the standard architecture for mixed cloud registration and on-premises call control. The other options do not combine cloud registration with on-premises call control.

Question 19Hybrid and Cloud Collaboration Architecture and Deployment Models

Which firewall requirement applies to media traffic between Expressway-E and the Webex cloud in a hybrid deployment?

  1. Only TCP 443 is needed because all media is tunneled over HTTPS
  2. A range of UDP ports must be opened for media traversal between the edge and the cloud Correct answer.
  3. Media uses ICMP and requires no port configuration
  4. All UDP ports must be blocked to force media through the internal network

Explanation

Media between the edge and the cloud uses a defined range of UDP ports that must be permitted through the firewall. Signaling and registration use TCP 443, but media is not tunneled over HTTPS. Blocking UDP or relying on ICMP would prevent calls from completing.

Question 20Hybrid and Cloud Collaboration Architecture and Deployment Models

A company is evaluating whether to move to a cloud-only Webex Calling deployment. Which factor most strongly favors a hybrid approach instead?

  1. The organization wants to reduce the number of cloud services in use
  2. The organization must retain existing on-premises call control features and PSTN contracts Correct answer.
  3. The organization plans to decommission its directory services
  4. The organization wants to eliminate all on-premises infrastructure

Explanation

Hybrid deployments are chosen when existing on-premises call control features, dial plans, and PSTN contracts must be preserved while adding cloud services. A cloud-only model is favored when the goal is to eliminate on-premises infrastructure. The other options do not describe reasons to keep on-premises call control.

Question 21Hybrid and Cloud Collaboration Architecture and Deployment Models

Which statement best describes the role of the Webex cloud organization in a hybrid deployment?

  1. It is the administrative container that ties users, services, and connectors to the customer's cloud tenant Correct answer.
  2. It is the PSTN carrier account used for toll calls
  3. It is the on-premises cluster that registers endpoints
  4. It is the certificate authority that issues edge certificates

Explanation

The Webex organization is the cloud tenant that holds users, service entitlements, and connector registrations for the customer. Hybrid services are enabled and managed within this organization. It does not provide call control registration or issue certificates.

Question 22Hybrid and Cloud Collaboration Architecture and Deployment Models

An administrator observes that Expressway-E shows a disconnected state from the Webex cloud. Which troubleshooting step is most appropriate first?

  1. Verify outbound TCP 443 connectivity and that the edge certificate is valid and trusted Correct answer.
  2. Change the Expressway-C IP address to a public address
  3. Reinstall the Directory Connector on the domain controller
  4. Reboot Unified Communications Manager to force re-registration

Explanation

Cloud connectivity depends on outbound TCP 443 and a valid, publicly trusted certificate with correct subject alternative names. Checking these first isolates the most common causes of a disconnected state. Reinstalling unrelated connectors or changing internal addressing does not address cloud registration.

Question 23Hybrid and Cloud Collaboration Architecture and Deployment Models

A hybrid deployment uses a cluster of Expressway-E nodes behind a load balancer. Which configuration consideration is required for the Webex cloud to reach the cluster correctly?

  1. Each node must use a different public domain name with separate certificates
  2. Only one node may be registered to the cloud organization
  3. The load balancer must terminate TLS and rewrite the certificate
  4. The public DNS name and certificate subject alternative names must cover the cluster address used by the cloud Correct answer.

Explanation

The cloud connects to the cluster through a single public address, so DNS and the certificate subject alternative names must match that address across the cluster. Consistent naming allows any node to serve the connection. Per-node public names or TLS rewriting would break trust validation.

Question 24Hybrid and Cloud Collaboration Architecture and Deployment Models

Which design consideration applies when placing Expressway-C and Expressway-E in a hybrid deployment with firewalls between network segments?

  1. A single firewall rule allowing all traffic between all zones is sufficient
  2. The external firewall must permit inbound traffic to Expressway-C from the internet
  3. The internal firewall must permit traffic from Expressway-C to Expressway-E, and the external firewall must permit traffic from Expressway-E to the internet and cloud Correct answer.
  4. The internal firewall must permit direct internet access from Expressway-C

Explanation

The DMZ design requires the internal firewall to allow Expressway-C to reach Expressway-E and the external firewall to allow Expressway-E outbound to the internet and cloud. This segmented approach enforces security boundaries. A single permissive rule or exposing Expressway-C to the internet violates the design.

Question 25Hybrid and Cloud Collaboration Architecture and Deployment Models

A customer wants to use Webex Edge for Unified Communications Manager to connect an existing on-premises cluster to Webex services. Which statement accurately describes this deployment?

  1. It replaces Unified Communications Manager call control with cloud call control
  2. It requires all users to be migrated to Webex Calling before services are enabled
  3. It requires the Unified Communications Manager cluster to be rebuilt in the cloud
  4. It connects the existing Unified Communications Manager cluster to Webex services through Expressway without migrating users to the cloud Correct answer.

Explanation

Webex Edge for Unified Communications Manager links the existing on-premises cluster to Webex services via Expressway while keeping users and call control on the cluster. It is an incremental path to cloud services rather than a full migration. Users are not required to move to Webex Calling for the integration to work.

Question 26Hybrid and Cloud Collaboration Architecture and Deployment Models

In a Cisco Webex hybrid architecture, which component is responsible for brokering signaling between the Webex cloud and on-premises Unified Communications Manager when call routing between the two environments is required?

  1. The Webex App client running in team messaging mode
  2. The Expressway-C connector host paired with Expressway-E Correct answer.
  3. The Cisco Meeting Server media bridge
  4. The Unified CM IM and Presence publisher node

Explanation

Hybrid call routing between the Webex cloud and on-premises Unified CM relies on the Expressway-C and Expressway-E traversal pair, with Expressway-C hosting the connector that registers to the cloud and Expressway-E providing the secure traversal path. The other components handle messaging, presence, or conferencing media and do not broker cloud-to-on-premises call signaling.

Question 27Hybrid and Cloud Collaboration Architecture and Deployment Models

Which Webex hybrid capability lets an organization keep user accounts mastered in an on-premises directory while those identities are used to sign in to Webex cloud services?

  1. Hybrid Calendar Service
  2. Hybrid Message Connector
  3. Hybrid Media Service
  4. Hybrid Directory Service Correct answer.

Explanation

Hybrid Directory Service synchronizes on-premises directory users into the Webex cloud so that identities remain mastered on-premises while being usable for cloud sign-in. The other hybrid services address messaging, calendaring, or media handling rather than identity synchronization.

Question 28Hybrid and Cloud Collaboration Architecture and Deployment Models

A design team is comparing a cloud-only Webex Calling deployment with a hybrid model that retains Unified CM. Which requirement most directly argues for retaining on-premises call control in a hybrid architecture?

  1. The organization needs to support only soft clients for all users
  2. The organization must keep PSTN gateway and dial-plan control inside its own data center Correct answer.
  3. The organization wants to minimize the number of administrative interfaces
  4. The organization wants automatic feature updates delivered by Cisco

Explanation

A hybrid architecture is justified when an organization needs to retain control of PSTN gateways, dial plans, or specific call-control behavior inside its own network while still gaining cloud collaboration services. Cloud-only Webex Calling shifts call control to the cloud, so requirements for local PSTN gateway ownership favor the hybrid model. Feature updates and client type do not require on-premises call control.

Question 29Hybrid and Cloud Collaboration Architecture and Deployment Models

Which statement describes the function of the Webex cloud organization in a hybrid deployment?

  1. It is the cloud tenant that owns users, devices, and hybrid service registrations for the customer Correct answer.
  2. It is the PSTN provider that terminates all inbound calls
  3. It is the on-premises cluster that hosts Unified CM call processing
  4. It is the certificate authority that signs Expressway-E certificates

Explanation

The Webex cloud organization is the customer's tenant in the Webex cloud, holding users, devices, and the registrations for hybrid services such as calendar, directory, and call routing connectors. On-premises components like Unified CM and Expressway register to that organization rather than replacing it.

Question 30Hybrid and Cloud Collaboration Architecture and Deployment Models

An administrator must confirm that the Expressway-C connector host can reach the Webex cloud for hybrid service registration. Which outbound requirement applies?

  1. Inbound TCP 8443 from the internet to Expressway-C
  2. Outbound UDP 5060 from Expressway-C to Unified CM only
  3. Outbound TCP 443 from Expressway-C to the Webex cloud Correct answer.
  4. Inbound UDP 3478 from the internet to Expressway-C

Explanation

Expressway-C initiates outbound connections to the Webex cloud over TCP 443 to register and maintain hybrid services, so the firewall must permit that egress. Inbound connections from the internet are not made to Expressway-C, which sits on the internal network behind Expressway-E.

Question 31Hybrid and Cloud Collaboration Architecture and Deployment Models

A hybrid deployment places Expressway-E in a DMZ with one interface facing the internal network and one facing the internet. Which design principle governs this dual-interface placement?

  1. The internal-facing interface should use a public routable address
  2. Traffic between the interfaces should be controlled by the firewall rather than freely routed Correct answer.
  3. Both interfaces should share the same subnet to simplify routing
  4. The internet-facing interface should use a private address translated by NAT

Explanation

Expressway-E in a DMZ uses separate internal and external interfaces, and the firewall between the DMZ and the internal network must control traffic rather than allowing unrestricted routing between the two interfaces. This segmented design keeps the traversal path mediated by security policy. Sharing subnets or exposing public addressing on the internal side undermines the DMZ separation.

Question 32Hybrid and Cloud Collaboration Architecture and Deployment Models

An engineer is enabling Webex Hybrid Calendar Service. Which connector placement is required?

  1. The calendar connector runs on Expressway-E in the DMZ and reaches the internet directly
  2. The calendar connector runs on Expressway-C and reaches the on-premises calendar platform Correct answer.
  3. The calendar connector runs on Unified CM and reaches the calendar platform through SIP
  4. The calendar connector runs on the Webex App client and reaches the calendar platform directly

Explanation

The Hybrid Calendar connector is hosted on Expressway-C, which sits inside the network and can reach the on-premises calendar system such as Exchange or Office 365 endpoints. Expressway-E provides the traversal path to the cloud but does not host the calendar connector.

Question 33Hybrid and Cloud Collaboration Architecture and Deployment Models

Which Cisco Webex hybrid service specifically requires the Expressway traversal pair to be deployed in addition to a connector host?

  1. Hybrid Calendar Service
  2. Hybrid Directory Service
  3. Hybrid Call Service Correct answer.
  4. Hybrid Message Service

Explanation

Hybrid Call Service connects the Webex cloud to on-premises Unified CM for call routing, which requires the Expressway-C and Expressway-E traversal pair to carry signaling and media between environments. Directory, calendar, and message connectors operate through outbound cloud connections without needing the traversal pair for call signaling.

Question 34Hybrid and Cloud Collaboration Architecture and Deployment Models

A customer wants cloud-registered Webex devices to dial on-premises Unified CM extensions while keeping registration in the cloud. Which hybrid capability provides this?

  1. Webex Edge for Devices with cloud registration retained
  2. Hybrid Calendar Service with Expressway traversal
  3. Hybrid Call Service with Expressway traversal to Unified CM Correct answer.
  4. Webex Meetings site linking

Explanation

Hybrid Call Service lets cloud-registered devices route calls to on-premises Unified CM endpoints through the Expressway traversal pair, preserving cloud registration while extending reachability to on-premises extensions. Webex Edge for Devices addresses device management and calling integration for on-premises-registered devices, and calendar or meetings services do not provide call routing.

Question 35Hybrid and Cloud Collaboration Architecture and Deployment Models

Which statement distinguishes Webex Calling from a Unified CM hybrid calling deployment?

  1. Webex Calling requires on-premises PSTN gateways, while hybrid calling uses only cloud PSTN
  2. Webex Calling cannot support desk phones, while hybrid calling can
  3. Webex Calling provides call control in the cloud, while hybrid calling keeps call control on-premises in Unified CM Correct answer.
  4. Webex Calling requires Expressway traversal for all internal calls, while hybrid calling does not

Explanation

Webex Calling is a cloud-delivered call control service, whereas a hybrid calling deployment retains Unified CM as the call-control platform and uses cloud services for collaboration and reachability. Traversal, PSTN options, and device support exist in both models, so they do not distinguish the two.

Question 36Hybrid and Cloud Collaboration Architecture and Deployment Models

An administrator is planning Hybrid Message Service for a customer with on-premises Exchange mailboxes. Which deployment fact applies?

  1. The message connector runs on Expressway-C and connects outbound to the Webex cloud Correct answer.
  2. The message connector runs on Unified CM and uses SIP to reach Exchange
  3. The message connector requires inbound internet access to the Exchange server
  4. The message connector requires an Expressway-E public certificate for mailbox access

Explanation

Hybrid Message Service uses a connector hosted on Expressway-C that reaches the on-premises Exchange environment and connects outbound to the Webex cloud. It does not require inbound internet access to Exchange or a public Expressway-E certificate for mailbox access.

Question 37Hybrid and Cloud Collaboration Architecture and Deployment Models

A company wants to connect an existing on-premises Unified CM cluster to Webex for calling integration without moving users to the cloud. Which solution fits this goal?

  1. Cisco Meeting Server with a traversal zone
  2. Webex Edge for Unified Communications Manager Correct answer.
  3. Hybrid Calendar Service only
  4. Webex Calling with a dedicated instance

Explanation

Webex Edge for Unified Communications Manager links an on-premises Unified CM cluster to Webex services so users gain cloud collaboration benefits while call control stays on-premises. Webex Calling moves call control to the cloud, and calendar or meeting components do not provide this integration.

Question 38Hybrid and Cloud Collaboration Architecture and Deployment Models

Expressway-E reports a disconnected state from the Webex cloud in a hybrid deployment. Which troubleshooting step is most appropriate first?

  1. Disable the traversal zone between Expressway-C and Expressway-E
  2. Rebuild the Unified CM database replication
  3. Verify outbound connectivity and certificate trust from Expressway-C to the cloud Correct answer.
  4. Reissue all Webex App user passwords

Explanation

A disconnected hybrid service usually indicates the connector cannot reach the cloud or its certificate is not trusted, so verifying outbound connectivity and certificate trust from Expressway-C is the appropriate first step. Unified CM replication, user passwords, and disabling traversal do not address cloud registration failure.

Question 39Hybrid and Cloud Collaboration Architecture and Deployment Models

A hybrid deployment uses multiple Expressway-E nodes behind a load balancer for cloud connectivity. Which configuration consideration is required?

  1. Each node must use a different cloud organization to avoid registration conflicts
  2. Each Expressway-E node must present a certificate whose identity is acceptable to the cloud through the load balancer Correct answer.
  3. Only one node may hold a certificate, and the others must share its private key without configuration
  4. The load balancer must terminate TLS and re-encrypt to each node with a self-signed certificate

Explanation

When Expressway-E nodes sit behind a load balancer, the certificate presented to the cloud must match the address clients and the cloud use, so each node needs a certificate identity acceptable through the load balancer. Self-signed re-encryption or separate cloud organizations would break trust and registration.

Question 40Hybrid and Cloud Collaboration Architecture and Deployment Models

Which design consideration applies when firewalls sit between Expressway-C and Expressway-E in a hybrid deployment?

  1. Only UDP 123 is required between the pair for time synchronization
  2. The traversal zone requires bidirectional signaling and media ports to be permitted between the pair Correct answer.
  3. Only outbound connections from Expressway-E to Expressway-C need to be permitted
  4. All traffic between the pair can be blocked because the cloud brokers every session

Explanation

The traversal zone between Expressway-C and Expressway-E carries signaling and media in both directions, so the firewall must permit the relevant ports bidirectionally. The cloud does not broker every session between the pair, and time synchronization alone is insufficient for traversal.

Question 41Webex Control Hub Administration and Licensing

In Webex Control Hub, which role assignment allows a user to manage users, licenses, and organization settings across the entire organization?

  1. Compliance officer
  2. Full administrator Correct answer.
  3. Site administrator
  4. Organization administrator

Explanation

Full administrator is the organization-wide role that grants complete management of users, licenses, settings, and services across Control Hub. Organization administrator is a partner-side role used to manage customer organizations, not an in-org assignment.

Question 42Webex Control Hub Administration and Licensing

When a user's license is removed in Control Hub, what happens to that user's Webex meetings data and account?

  1. The account is deleted immediately and data is unrecoverable.
  2. The account is converted automatically to a free consumer account.
  3. The account is deactivated and data is retained for a defined period before deletion. Correct answer.
  4. The account remains fully active but loses only meeting scheduling rights.

Explanation

Removing the last paid license deactivates the user rather than deleting immediately; Control Hub retains the data for a defined grace period so it can be restored or reassigned. After that period the account and associated data are purged.

Question 43Webex Control Hub Administration and Licensing

An administrator needs to assign a Webex Meetings license to 500 users at once using a CSV file. Which Control Hub workflow supports this?

  1. Bulk provisioning through the Calling dial plan import
  2. Configuration Templates under Devices
  3. Bulk import via the Users > Manage users CSV template Correct answer.
  4. Manual one-by-one assignment through each user profile

Explanation

Control Hub provides a CSV template under user management for bulk operations, allowing administrators to assign services and licenses to many users in a single import. Other bulk tools in Control Hub address devices or calling configuration, not license assignment.

Question 44Webex Control Hub Administration and Licensing

Which Control Hub report would an administrator use to review which users have not signed in to Webex during the last 30 days?

  1. Active users report with last activity information Correct answer.
  2. Call quality report
  3. License consumption trend report
  4. Meeting usage report

Explanation

The active users reporting view in Control Hub shows user activity and last sign-in data, allowing identification of dormant accounts. Meeting usage focuses on meeting metrics, not individual sign-in recency.

Question 45Webex Control Hub Administration and Licensing

A company wants users to authenticate to Webex using their existing corporate directory credentials without synchronizing passwords to Cisco. Which identity solution should be configured in Control Hub?

  1. Single sign-on with SAML 2.0 federation Correct answer.
  2. Multi-factor authentication only
  3. Directory Connector with password sync
  4. Just-in-time provisioning without federation

Explanation

SAML 2.0 single sign-on federates authentication to the customer's identity provider, so credentials are validated by the corporate directory and passwords are never stored by Cisco. Directory Connector syncs user objects and optionally passwords, which is not the goal here.

Question 46Webex Control Hub Administration and Licensing

Which statement describes the difference between Directory Connector and the SCIM-based synchronization in Control Hub?

  1. Both are identical and differ only in licensing cost.
  2. Directory Connector only syncs groups, while SCIM only syncs licenses.
  3. SCIM requires an on-premises agent, while Directory Connector is cloud-only.
  4. Directory Connector runs on-premises and syncs users; SCIM uses an identity provider API to push users. Correct answer.

Explanation

Directory Connector is an on-premises application that reads the corporate directory and synchronizes users and groups to the Cisco cloud. SCIM synchronization is driven by the identity provider using the SCIM standard API to push user and group changes.

Question 47Webex Control Hub Administration and Licensing

An administrator wants to enforce that all users in the organization must use multi-factor authentication when signing in through Control Hub. Where is this configured?

  1. Meeting site configuration > Security options
  2. Devices > Configuration Templates
  3. Organization Settings > Security > Authentication Correct answer.
  4. User profile > Personal settings

Explanation

Authentication and MFA enforcement policies are managed centrally under the organization's security settings in Control Hub. Individual profile or meeting site settings do not control organization-wide MFA enforcement.

Question 48Webex Control Hub Administration and Licensing

Which Control Hub capability allows an administrator to define different sets of services and settings for different groups of users?

  1. Organization-wide default settings only
  2. Device provisioning templates
  3. License templates assigned to groups Correct answer.
  4. Site administration with per-site branding

Explanation

License templates bundle services and licenses and can be assigned to groups, giving differentiated service entitlements across user populations. Organization-wide defaults apply uniformly and do not differentiate groups.

Question 49Webex Control Hub Administration and Licensing

A user reports they can sign in but cannot schedule Webex meetings. Which Control Hub check is most likely to reveal the cause?

  1. Check the organization's meeting site time zone.
  2. Confirm the user's device firmware version.
  3. Verify the user's assigned services include Webex Meetings. Correct answer.
  4. Review the call quality dashboard for the user.

Explanation

Inability to schedule meetings typically indicates the Webex Meetings service is not included in the user's assigned license or template. Checking the user's service assignments directly identifies missing entitlements.

Question 50Webex Control Hub Administration and Licensing

Which Control Hub setting determines whether users can request a license through self-service rather than contacting an administrator?

  1. Analytics retention settings
  2. Meeting registration settings
  3. License request/self-service settings in user management Correct answer.
  4. Call routing settings

Explanation

Control Hub provides self-service license request controls within user management so users can request entitlements that administrators approve. Meeting registration, call routing, and analytics retention are unrelated to license requests.