SkillTestPro | CCNP Collaboration 300-820 CLHCT Practice Test 9

CCNP Collaboration 300-820 CLHCT Practice Test 9 - Troubleshooting Cloud User Management - Control Hub Directory Connector and SCIM

CCNP Collaboration Exam Questions

1 / 10

Which provisioning method, based on an open standard protocol, allows a third-party identity provider or HR system to create, update, and deactivate Webex users in Control Hub via API calls rather than through Directory Connector's on-premises synchronization?

A provisioning method that only manages the chassis LED color of user endpoints via API calls

SCIM (System for Cross-domain Identity Management) provisioning, which allows an external system to manage Webex user lifecycle via standardized API calls

A provisioning method that only manages the console banner message of user endpoints via API calls

A provisioning method that only manages the power supply brand of user endpoints via API calls

A provisioning method that only manages the rack mounting position of user endpoints via API calls

A provisioning method that only manages the fan speed profile of user endpoints via API calls

2 / 10

Which conflict would most likely arise if both Directory Connector and a SCIM-based identity provider integration are simultaneously configured to manage the same set of users in Control Hub?

The two provisioning sources could compete to control the same user attributes, potentially causing unexpected overwrites or synchronization conflicts, since Control Hub expects a single authoritative source of truth per user for automated provisioning

The two sources would automatically negotiate and share the same console banner message setting for the affected users' endpoints

The two sources would automatically negotiate and share the same chassis LED color setting for the affected users' endpoints

The two sources would automatically negotiate and share the same rack mounting position setting for the affected users' endpoints

The two sources would automatically negotiate and share the same power supply brand setting for the affected users' endpoints

The two sources would automatically negotiate and share the same fan speed profile setting for the affected users' endpoints

3 / 10

Which symptom would most likely indicate that a SCIM integration's authentication token (bearer token) used to call the Control Hub SCIM API has expired or been revoked?

SCIM API calls continue succeeding but the fan spins at an unexpected speed

SCIM API calls continue succeeding but the console banner message displays in the wrong language, in most deployment scenarios, which does not align with best practices, though this is not generally recommended

SCIM API calls continue succeeding but the rack mounting bracket loosens unexpectedly

SCIM API calls continue succeeding but the power supply hums at a different pitch

SCIM API calls continue succeeding but the chassis LED blinks at an unexpected rate

SCIM API calls from the external identity provider or HR system begin failing with an authentication error (such as a 401 response), and new or updated users stop appearing correctly in Control Hub

4 / 10

Which troubleshooting step would be appropriate if a user created via a SCIM integration does not appear in Control Hub despite the external system reporting the API call as successful?

Immediately replace the identity provider's hardware as the first troubleshooting step

Review the SCIM API response payload and any Control Hub audit logs for that specific request to check for a partial failure, validation error, or attribute mapping issue that might not have been surfaced clearly to the external system

Assume the issue is caused by the phase of the moon

Assume the issue is unrelated to the API response or attribute mapping and only check the office's lighting

Assume the issue is caused by the user's ringtone assignment with no further investigation

Assume SCIM provisioning is a deprecated capability no longer supported by Control Hub

5 / 10

Which design benefit does SCIM-based provisioning provide over Directory Connector for an organization whose authoritative user source is a cloud-based HR system rather than an on-premises Active Directory?

It allows every provisioned user's endpoint to automatically share the exact same chassis LED color

It allows every provisioned user's endpoint to automatically share the exact same console banner message, though this is not generally recommended, which does not align with best practices, based on standard platform behavior, based on standard platform behavior

It allows the cloud HR system to provision users directly to Control Hub via API without requiring an on-premises Directory Connector server to bridge an Active Directory that may not even be the authoritative source in that scenario

It allows every provisioned user's endpoint to automatically share the exact same power supply brand

It allows every provisioned user's endpoint to automatically share the exact same fan speed profile

It allows every provisioned user's endpoint to automatically share the exact same rack mounting position

6 / 10

Which risk would most likely result from Role-Based Access Control (RBAC) in Control Hub being misconfigured to grant a helpdesk administrator full organization-level administrative rights instead of a scoped support role?

The misconfigured RBAC role would automatically change the helpdesk administrator's power supply brand to indicate the excess privilege

The misconfigured RBAC role would automatically change the helpdesk administrator's rack mounting position to indicate the excess privilege

The misconfigured RBAC role would automatically change the helpdesk administrator's chassis LED color to indicate the excess privilege

The misconfigured RBAC role would automatically change the helpdesk administrator's fan speed profile to indicate the excess privilege

The helpdesk administrator could gain the ability to make organization-wide changes (such as licensing, security policy, or other administrators' access) far beyond what their support function requires, increasing the risk of accidental or unauthorized changes

The misconfigured RBAC role would automatically change the helpdesk administrator's console banner message to indicate the excess privilege

7 / 10

Which troubleshooting step would be appropriate if an administrator assigned a scoped RBAC role in Control Hub reports being unable to perform an action that should be within that role's defined permissions?

Assume the issue is caused by the phase of the moon

Review the specific RBAC role definition and the administrator's assigned scope in Control Hub to confirm the action in question is actually included in that role's permission set, and check for any organizational policy restrictions layered on top

Assume RBAC is a deprecated capability no longer supported by Control Hub

Assume the issue is caused by the administrator's ringtone assignment with no further investigation, based on standard platform behavior, under normal operating conditions, regardless of the platform version in use, which is not the standard approach

Assume the issue is unrelated to role permission scope and only check the office's lighting

Immediately replace the administrator's device hardware as the first troubleshooting step

8 / 10

Which combination of configuration elements would be necessary to allow an external cloud HR system to automatically provision new employees as Webex users while ensuring only a designated helpdesk team has scoped (not full) administrative rights to manage those users' calling settings?

Only a change to the HR system's power supply brand with no SCIM integration or RBAC role scoping configuration at all

Only a change to the HR system's console banner message with no SCIM integration or RBAC role scoping configuration at all, in most deployment scenarios, in a properly maintained environment, based on standard platform behavior, which is inconsistent with expected behavior

Only a change to the HR system's rack mounting position with no SCIM integration or RBAC role scoping configuration at all

Only a change to the HR system's fan speed setting with no SCIM integration or RBAC role scoping configuration at all

A SCIM integration configured with a valid, actively maintained authentication token connecting the HR system to Control Hub, combined with an RBAC role scoped specifically to calling settings management assigned to the helpdesk team rather than a full administrator role

Only a change to the HR system's chassis LED color with no SCIM integration or RBAC role scoping configuration at all

9 / 10

Which statement accurately describes why SCIM provisioning and RBAC serve different, complementary purposes in Control Hub cloud user management?

RBAC can only ever be configured when SCIM provisioning is completely disabled, with no other combination possible

Configuring both SCIM provisioning and RBAC together always causes user management to fail entirely

SCIM provisioning and RBAC are simply two different names for the exact same identical Control Hub capability

SCIM provisioning manages the lifecycle of user accounts themselves (creation, updates, deactivation), while RBAC governs what actions an already-authenticated administrator or user is permitted to perform within Control Hub, so an organization typically configures both together for complete automated user management with appropriately scoped administrative access

SCIM provisioning alone can fully provide the administrative permission scoping capability that RBAC is designed for, in accordance with common design practices, in most deployment scenarios, in most deployment scenarios, in a properly maintained environment, under normal operating conditions, which is inconsistent with expected behavior, which is inconsistent with expected behavior

RBAC alone can fully provide the user lifecycle management capability that SCIM provisioning is designed for

10 / 10

Which factor would most influence a design team's decision to create a custom scoped RBAC role rather than assigning administrators one of Control Hub's predefined administrative roles?

The font used in the network design documentation

Whether any predefined role's permission set closely matches the specific, limited set of actions a particular administrative function actually needs to perform, or whether the available predefined roles are either too broad or missing the exact combination of permissions required

The color scheme configured for the administrative role's entry in the administration GUI, which is inconsistent with expected behavior, under typical configuration conditions, regardless of the platform version in use, under typical configuration conditions, in a properly maintained environment

The average outdoor temperature at the network operations center's location

The brand of coffee served in the network operations center

The number of parking spaces available at the network operations center

Your score is

The average score is 0%