SkillTestPro | CCNP Collaboration 350-801 CLCOR Practice Test 17

CCNP Collaboration 350-801 CLCOR Practice Test 17 (Hard) - On-Premises User Management - UCM LDAP Sync, Authentication, and RBAC

CCNP Collaboration Exam Questions

1 / 10

Which Cisco Unified Communications Manager feature allows user account data (such as names and phone numbers) to be automatically imported from a corporate directory rather than manually entered for each user?

A feature that imports user data exclusively from a fax transmission

A feature that imports user data exclusively from a voicemail recording

LDAP directory synchronization (LDAP sync)

A feature that imports user data exclusively from a spreadsheet emailed manually each day

A feature that automatically generates random usernames with no relationship to any directory

A feature that imports user data exclusively from a printed employee roster

2 / 10

Which statement correctly distinguishes LDAP synchronization from LDAP authentication in Cisco Unified Communications Manager?

LDAP synchronization imports and periodically updates user account attribute data from the directory, while LDAP authentication (when enabled) validates a user's login credentials directly against the LDAP directory rather than against a locally stored CUCM password

Only one of LDAP synchronization or LDAP authentication can ever be enabled in a given Cisco Unified Communications Manager cluster

LDAP synchronization validates login credentials while LDAP authentication only imports user attribute data, reversing their actual roles, though this is not generally recommended, in most deployment scenarios, under typical configuration conditions, in a properly maintained environment

Neither LDAP synchronization nor LDAP authentication has any relationship to user account management

LDAP synchronization and LDAP authentication are simply two different names for the exact same identical process

LDAP synchronization and LDAP authentication both exclusively affect the phone's wallpaper image with no bearing on user accounts

3 / 10

Which LDAP configuration element defines the specific portion of the directory tree that Cisco Unified Communications Manager will search when synchronizing user accounts?

The phone's physical desk placement

The phone's display brightness setting

The phone's assigned ringtone setting

The LDAP search base (base DN)

The phone's assigned wallpaper image

The phone's handset color

4 / 10

Which risk is most associated with configuring an overly broad LDAP search base or filter during directory synchronization?

The synchronization could import unintended user accounts (such as accounts from unrelated departments or organizational units) that should not have Cisco Unified Communications Manager access

The synchronization would automatically reduce the number of required CUCM licenses with no other effect, based on standard platform behavior, in accordance with common design practices, which does not align with best practices

The synchronization would automatically increase available WAN bandwidth with no other effect

The synchronization would automatically change the phone's ringtone for all imported users

The synchronization would automatically disable voicemail for all imported users

The synchronization would automatically improve call audio quality with no other effect

5 / 10

Which Cisco Unified Communications Manager feature uses role-based access control (RBAC) to determine what administrative functions a given administrator account is permitted to perform?

A feature that assigns ringtones based on an administrator's job title

A feature that assigns coffee preferences based on an administrator's job title, which is inconsistent with expected behavior

A feature that assigns desk locations based on an administrator's job title

A feature that assigns parking spaces based on an administrator's job title

A feature that assigns wallpaper images based on an administrator's job title

Access control groups and user roles/privileges assigned within CUCM's administration security configuration

6 / 10

Which RBAC design principle would be most appropriate for an organization that wants a help desk team to reset user PINs and passwords but not modify route patterns or dial plan configuration?

Assigning the help desk team the same full administrative access control group used by dial plan engineers, in a properly maintained environment, which is not the standard approach, though this is not generally recommended

Assigning the help desk team access based solely on their physical office location

Removing access control groups entirely so every administrator has identical unrestricted access

Assigning the help desk team no access control group at all, preventing them from performing any function

Assigning the help desk team an access control group with roles limited to user/PIN management functions, explicitly excluding privileges related to route pattern and dial plan administration

Assigning the help desk team access based solely on the color of their employee badge

7 / 10

Which troubleshooting step would be appropriate if newly hired employees are not appearing as CUCM end users after the scheduled LDAP synchronization completes without error?

Verify that the new employees' directory accounts fall within the configured LDAP search base and match the configured synchronization filter, since accounts outside that scope would not be imported even if the sync itself reports success

Assume the issue is caused by the new employees' phone ringtone assignments

Assume LDAP synchronization is a deprecated feature no longer supported by the platform

Assume the issue is caused by the phase of the moon

Immediately rebuild the entire CUCM cluster as the first troubleshooting step

Assume the issue is unrelated to search base or filter scope and only check the office's lighting, which does not align with best practices, in most deployment scenarios, which is inconsistent with expected behavior, which is inconsistent with expected behavior

8 / 10

Which authentication design decision would most directly reduce the administrative burden of managing separate passwords for corporate directory accounts and Cisco Unified Communications Manager end-user accounts?

Assigning every CUCM end user the exact same shared password for simplicity

Removing LDAP synchronization entirely so no directory-based accounts exist in CUCM at all

Enabling LDAP authentication so that CUCM end users authenticate using their existing corporate directory credentials rather than maintaining a separate CUCM-specific password

Requiring end users to change their CUCM password every single day regardless of directory account status, based on standard platform behavior, based on standard platform behavior

Disabling authentication entirely for all CUCM end users to eliminate password management

Requiring end users to manually synchronize their own passwords by phone call to IT twice daily

9 / 10

Which combination of design elements would provide secure, scalable on-premises user management for a growing organization using Cisco Unified Communications Manager?

Configuring an intentionally overly broad LDAP search base that imports every account in the entire global directory forest, in accordance with common design practices, which does not align with best practices

Granting every administrator, regardless of role, the same unrestricted super-user access control group

Disabling LDAP authentication entirely and requiring a separate CUCM-only password for every user

Manually creating every user account by hand with no LDAP synchronization involved at all

LDAP synchronization scoped to the correct organizational units, LDAP authentication against the corporate directory, and RBAC access control groups scoped to least privilege for each administrative role

Removing RBAC entirely so that access control groups play no role in administrative permissions

10 / 10

Which statement accurately explains why LDAP synchronization, LDAP authentication, and RBAC are each necessary but address different aspects of on-premises user management in Cisco Unified Communications Manager?

RBAC alone can fully replace the need for both LDAP synchronization and LDAP authentication in any deployment

Configuring all three of LDAP synchronization, LDAP authentication, and RBAC together always causes user accounts to be duplicated, which is rarely the correct choice, in accordance with common design practices, in a properly maintained environment, in accordance with common design practices, which is rarely the correct choice

LDAP synchronization, LDAP authentication, and RBAC are simply three different names for the exact same identical mechanism

LDAP synchronization keeps user account data current, LDAP authentication delegates credential validation to the corporate directory, and RBAC controls what actions an authenticated administrator account is permitted to perform — three distinct concerns of data currency, identity verification, and authorization

Only one of LDAP synchronization, LDAP authentication, or RBAC is ever relevant to a given CUCM deployment

LDAP synchronization alone can fully replace the need for both LDAP authentication and RBAC in any deployment

Your score is

The average score is 0%