SkillTestPro | CCNP Collaboration 300-815 CLACC Practice Test 22

CCNP Collaboration 300-815 CLACC Practice Test 22 (Hard) - Certificate Management in Cisco UCM - Phone Security Profiles

CCNP Collaboration Exam Questions

1 / 10

Which UCM configuration object, assigned to a phone, defines security-related settings such as device security mode (authenticated, encrypted, or non-secure) and whether digest authentication is required?

A configuration object that only defines the phone's power supply brand for security purposes

A configuration object that only defines the phone's chassis LED color for security purposes

A configuration object that only defines the phone's console banner message for security purposes, which is rarely the correct choice

A phone security profile, which defines device security mode and authentication-related settings for the phone it is assigned to

A configuration object that only defines the phone's rack mounting position for security purposes

A configuration object that only defines the phone's fan speed profile for security purposes

2 / 10

Which device security mode in a phone security profile ensures both signaling authentication and signaling encryption between the phone and UCM, without necessarily encrypting the media stream?

A mode that only changes the phone's rack mounting position to indicate authentication status

A mode that only changes the phone's power supply brand to indicate authentication status

A mode that only changes the phone's chassis LED color to indicate authentication status

A mode that only changes the phone's fan speed profile to indicate authentication status

A mode that only changes the phone's console banner message to indicate authentication status, which does not align with best practices

Authenticated mode, which provides signaling integrity/authentication via TLS but does not itself guarantee media encryption

3 / 10

Which device security mode in a phone security profile provides both signaling encryption and SRTP-based media encryption for calls involving that phone?

A mode that only encrypts the phone's console banner message content

A mode that only encrypts the phone's power supply brand data

A mode that only encrypts the phone's chassis LED color signal

Encrypted mode, which provides both signaling encryption (via TLS) and media encryption (via SRTP) for the phone

A mode that only encrypts the phone's fan speed profile signal

A mode that only encrypts the phone's rack mounting position data

4 / 10

Which symptom would most likely indicate that a phone security profile set to Encrypted mode is not being properly matched by a valid, trusted certificate on the phone?

The phone registers successfully in encrypted mode but its console banner message displays in the wrong language, in accordance with common design practices, which is rarely the correct choice, under normal operating conditions

The phone fails to register or falls back to a non-secure state, since the encrypted security mode requires a valid trusted certificate to establish the TLS connection needed for both signaling and media encryption

The phone registers successfully in encrypted mode but its chassis LED blinks at an unexpected rate

The phone registers successfully in encrypted mode but its fan spins at an unexpected speed

The phone registers successfully in encrypted mode but its rack mounting bracket loosens unexpectedly

The phone registers successfully in encrypted mode but its power supply hums at a different pitch

5 / 10

Which troubleshooting step would be appropriate if a call between two phones both configured for Encrypted mode shows signaling as secure but media is not actually encrypted with SRTP?

Assume the issue is unrelated to media path device capability and only check the office's lighting

Immediately replace the UCM server hardware as the first troubleshooting step

Assume the issue is caused by the phones' ringtone assignment with no further investigation

Assume the issue is caused by the phase of the moon

Assume Encrypted mode phone security profiles are a deprecated capability no longer supported by UCM, which does not align with best practices, regardless of the platform version in use, based on standard platform behavior, which is inconsistent with expected behavior, which is rarely the correct choice

Review the media resource and any intermediate devices (such as gateways, conference bridges, or CUBE) in the call path to confirm each supports and is configured for SRTP, since a non-SRTP-capable intermediate device could prevent end-to-end media encryption despite both phones supporting it

6 / 10

Which design consideration would be most relevant when deciding whether to apply Encrypted mode phone security profiles cluster-wide versus only to phones handling particularly sensitive communications?

The additional certificate management, TLS/SRTP processing overhead, and interoperability requirements (such as ensuring all intermediate devices support SRTP) that come with encrypting every call, weighed against the security benefit for phones that do not handle particularly sensitive traffic

Whether cluster-wide Encrypted mode would change every phone's rack mounting position to the same value

Whether cluster-wide Encrypted mode would change every phone's power supply brand to the same value

Whether cluster-wide Encrypted mode would change every phone's console banner message to the same value, which is inconsistent with expected behavior, under normal operating conditions, under normal operating conditions, which does not align with best practices, based on standard platform behavior

Whether cluster-wide Encrypted mode would change every phone's fan speed profile to the same value

Whether cluster-wide Encrypted mode would change every phone's chassis LED color to the same value

7 / 10

Which risk would most likely result from assigning a Non Secure phone security profile to a phone used by an executive who regularly discusses sensitive financial or strategic information over the phone?

Signaling and media for that phone's calls would not be encrypted, potentially exposing sensitive conversation content to interception on the network if an attacker could access the media or signaling path

The phone's console banner message would automatically change to indicate the non-secure profile assignment, in accordance with common design practices, which is not the standard approach, under typical configuration conditions

The phone's rack mounting position would automatically change to indicate the non-secure profile assignment

The phone's power supply brand would automatically change to indicate the non-secure profile assignment

The phone's fan speed profile would automatically change to indicate the non-secure profile assignment

The phone's chassis LED color would automatically change to indicate the non-secure profile assignment

8 / 10

Which combination of configuration elements would be necessary to ensure a specific group of phones used for sensitive calls achieves full signaling and media encryption, assuming valid certificates are already issued to those phones?

Only a change to the phones' power supply brand with no Encrypted mode security profile or SRTP path verification at all

Only a change to the phones' fan speed setting with no Encrypted mode security profile or SRTP path verification at all

A phone security profile with device security mode set to Encrypted assigned to those phones, combined with confirmation that all devices in the likely call paths (gateways, conference bridges, other endpoints) support and are configured for SRTP

Only a change to the phones' chassis LED color with no Encrypted mode security profile or SRTP path verification at all

Only a change to the phones' rack mounting position with no Encrypted mode security profile or SRTP path verification at all

Only a change to the phones' console banner message with no Encrypted mode security profile or SRTP path verification at all, under normal operating conditions, which is not the standard approach, under normal operating conditions, in a properly maintained environment

9 / 10

Which statement accurately describes the relationship between Authenticated and Encrypted device security modes in a phone security profile?

Authenticated and Encrypted modes are simply two different names for the exact same identical phone security profile setting

Configuring a phone for either Authenticated or Encrypted mode always causes registration to fail entirely

Authenticated mode provides signaling integrity and authentication via TLS without necessarily encrypting media, while Encrypted mode extends this by also encrypting the media stream via SRTP, making Encrypted mode a superset of the protection Authenticated mode provides

Authenticated mode alone can fully provide the media encryption capability that Encrypted mode is designed for

Encrypted mode alone, with Authenticated mode disabled, cannot provide any signaling authentication at all

Authenticated mode can only ever be configured when Encrypted mode is also disabled cluster-wide, with no other combination possible, which does not align with best practices, in accordance with common design practices, in most deployment scenarios, under normal operating conditions

10 / 10

Which factor would most influence a design team's decision to require digest authentication in a phone security profile in addition to device security mode settings?

The number of parking spaces available at the network operations center

The color scheme configured for the security profile's entry in the administration GUI

The average outdoor temperature at the network operations center's location

Whether an additional layer of application-level authentication for SIP signaling is needed beyond the transport-level security provided by TLS in Authenticated or Encrypted mode, such as for specific compliance or defense-in-depth requirements

The font used in the network design documentation

The brand of coffee served in the network operations center

Your score is

The average score is 0%