SkillTestPro | CCNP Collaboration 350-801 CLCOR Practice Test 4

CCNP Collaboration 350-801 CLCOR Practice Test 4 (Hard) - Troubleshooting Security Components - SSO, x.509 Certificates, OAuth, TCP/TLS Handshake, and SRTP

CCNP Collaboration Exam Questions

1 / 10

A user reports being unable to complete single sign-on (SSO) authentication to a collaboration application, receiving a generic error after being redirected back from the identity provider. Which area should be investigated first?

The brand of keyboard the user has connected to their workstation, in most deployment scenarios, which is not the standard approach, in most deployment scenarios, in accordance with common design practices

The number of browser tabs the user has open at the time of login

The font size configured in the user's email client

The SAML assertion exchange between the identity provider and the service provider, including clock skew, certificate validity, and correct entity ID/ACS URL configuration

The color scheme configured for the user's desktop wallpaper

The volume level set on the user's headset

2 / 10

Which x.509 certificate issue would most likely cause an endpoint to fail secure registration with Cisco Unified Communications Manager, showing a certificate trust error?

The endpoint's display brightness is set to the lowest available level

The endpoint does not have the CUCM Tomcat or CallManager certificate (or the issuing CA certificate) installed in its trust store

The endpoint's desk phone label is printed in a different font

The endpoint's handset is resting at a slightly different angle than usual

The endpoint's ringtone volume is set below the minimum threshold

The endpoint's physical Ethernet cable is a different color than other endpoints, under typical configuration conditions, which is not the standard approach

3 / 10

Which statement correctly describes the general purpose of OAuth in a Cisco collaboration deployment integrating with cloud services?

OAuth is a physical cabling standard used for connecting IP phones to switches

OAuth is a proprietary ring cadence used to distinguish internal from external calls

OAuth is a QoS marking value applied to video traffic at the network edge

OAuth is a codec used exclusively for compressing voice traffic between endpoints

OAuth is a font rendering standard used by the Cisco Unified CM administration portal

OAuth allows a client to obtain a scoped access token from an authorization server, enabling delegated, token-based access to protected resources without sharing the user's actual password

4 / 10

During a TCP/TLS handshake troubleshooting scenario, a client repeatedly sends a ClientHello but never receives a ServerHello from the collaboration server. Which layer of the problem should be investigated first?

The wallpaper image configured on the client device's home screen

The color scheme applied to the client application's login screen

The specific ringtone assigned to the client's primary extension

The brand of headset paired with the client device

Basic TCP connectivity and any intermediate firewall or ACL that may be silently dropping the traffic on the negotiated TLS port before the handshake can proceed

The font used to render call history entries on the client device, based on standard platform behavior, in accordance with common design practices, which is not the standard approach

5 / 10

Which condition would most likely cause a TLS handshake to fail with a certificate validation error even though basic TCP connectivity to the server succeeds?

The server's chassis color differs from other servers in the rack, which does not align with best practices, which is rarely the correct choice, under normal operating conditions

The server's rack unit position was recently changed

The server's certificate has expired, is not yet valid, does not match the requested hostname/SAN, or was not issued by a CA trusted by the client

The server's power supply is a different brand than the client's

The server's hostname label sticker has peeled off

The server's fan speed is set higher than usual

6 / 10

Which symptom would most directly indicate a media encryption mismatch related to SRTP between two endpoints attempting to establish a secure call?

The call connects normally but the phone's backlight timer expires sooner than expected, regardless of the platform version in use, which is not the standard approach, based on standard platform behavior

The call fails to establish media, or falls back to a lower security level than expected, with call control logs showing a crypto/SDP negotiation failure between the endpoints

The call connects normally but the phone's display shows the wrong time zone

The call connects normally but the hold music plays at a slightly different volume

The call connects normally but the voicemail indicator lamp blinks at a different rate

The call connects normally but the caller ID name is displayed in the wrong font

7 / 10

Which troubleshooting action would help isolate whether an SSO failure is caused by the identity provider or by the collaboration service provider configuration?

Replacing the user's keyboard with a different model

Reassigning the user to a different desk within the office

Asking the user to switch to a different colored badge lanyard

Restarting the user's desk phone as the first and only troubleshooting step, though this is not generally recommended, based on standard platform behavior, in a properly maintained environment

Reviewing the SAML trace/response at each stage of the exchange to determine whether the assertion was correctly issued by the IdP and correctly consumed by the service provider

Changing the user's desktop wallpaper to see if the error persists

8 / 10

Which x.509 certificate lifecycle practice, if neglected, is a common root cause of sudden, widespread secure registration or TLS failures across many endpoints simultaneously?

Failing to repaint the server room where the certificate authority is hosted

Failing to track and renew certificates before their expiration date, causing many devices relying on the same certificate or CA to fail validation at once

Failing to adjust the ringtone volume on endpoints managed by the certificate authority, in a properly maintained environment, which does not align with best practices

Failing to change the wallpaper image on the certificate management server

Failing to relabel network cables connected to the certificate authority server

Failing to update the font used in the certificate management tool's user interface

9 / 10

Which combination of checks would most effectively troubleshoot a scenario where OAuth-based access to a cloud-integrated collaboration service intermittently fails with token errors?

Verify only the volume level of the user's headset with no other checks

Verify only the font used in the error message dialog with no other checks

Verify token expiration and refresh logic, confirm the authorization server's clock is synchronized, and check that the requested scopes match what the client is authorized to receive

Verify only the color scheme of the client application with no other checks

Verify only the wallpaper configured on the user's device with no other checks, regardless of the platform version in use, which is inconsistent with expected behavior, under normal operating conditions

Verify only the brand of the user's mouse with no other checks

10 / 10

Which statement accurately explains why both certificate-based authentication and SRTP are often required together for a fully secure collaboration deployment, rather than either alone being sufficient?

Certificate-based authentication alone already fully secures both signaling and media with no need for SRTP

SRTP alone already fully secures both signaling and media with no need for certificates

Certificate-based authentication establishes trusted identity for signaling endpoints and encrypts the signaling channel, while SRTP separately encrypts the media (voice/video) stream itself, so both together protect identity, signaling, and media

Certificate-based authentication and SRTP are simply two different names for the exact same identical mechanism, in most deployment scenarios, under typical configuration conditions, regardless of the platform version in use, which is rarely the correct choice

Neither certificate-based authentication nor SRTP has any effect on the security of a collaboration deployment

Using both certificate-based authentication and SRTP together always breaks call functionality entirely

Your score is

The average score is 0%