Free 300-810 sample questions

Correct answer: The clock on the CUCM Publisher is skewed by more than 3 minutes relative to the IdP's clock.

SAML assertions have a validity period defined by 'NotBefore' and 'NotOnOrAfter' timestamps. To prevent replay attacks, Cisco collaboration applications enforce a strict time synchronization requirement. If the clock skew between the Service Provider (CUCM) and the Identity Provider (IdP) is greater than a configured tolerance (typically 2-3 minutes), the assertion will be considered invalid, leading to a login failure even if all other parameters are correct. While unsigned assertions, incorrect user attributes, or certificate issues are also potential causes, clock skew is a very common and often overlooked reason for this specific symptom.

Correct answer: The 'IM and Presence' service profile assigned to the users' devices on the remote CUCM does not specify the central IM&P server address.

In a centralized IM&P deployment, the remote CUCM cluster must direct its users to the central IM&P cluster for presence services. This is achieved by creating an 'IM and Presence' service profile on the remote CUCM that explicitly lists the IP address or FQDN of the central IM&P server(s). This profile is then assigned to the users' devices. Without this, the devices on the remote cluster do not know which IM&P server to contact for login, even if DNS SRV records are correct.

Correct answer: Define a schedule for business hours and apply it to the main call handler, which then forwards to the after-hours call handler when inactive.

The standard method for handling time-of-day routing in Unity Connection is to use schedules. An administrator would define a schedule for the standard business hours. This schedule is then applied to the primary call handler (the one that answers during business hours). The call handler is then configured so that when the schedule is 'Inactive' (i.e., it is outside of business hours), the call is sent to another extension or call handler, which in this case would be the new after-hours auto-attendant.

Correct answers: SERVICES_DOMAIN; START_UP_WIZARD_DISABLED

Correct answer: True

This statement is True. The IM and Presence high-availability mechanism monitors the state of critical services. If a critical service fails but the server's operating system and network connectivity are still active, the system will not initiate an automatic failover. This is to prevent a 'split-brain' scenario. In this situation, an administrator must manually initiate the failover to the backup node to restore full service.

Correct answer: Exchanging and installing TLS certificates signed by a trusted public Certificate Authority on both XMPP servers.

While DNS SRV records are essential for discovering the federation partner, the core requirement for secure, mutually authenticated communication is TLS. This requires both XMPP servers to have a TLS certificate. For mutual authentication to work without manual trust configuration, these certificates must be signed by a Certificate Authority that is trusted by both systems. Using a public CA is the standard way to achieve this, as both servers will inherently trust the CA's root certificate.

Correct answer: The IM and Presence domain is not listed in the Expressway-C configuration under 'Domains'.

For MRA to proxy XMPP traffic correctly, the Expressway-C must be configured with the IM and Presence domain. When a Jabber client connects, the Expressway-E forwards the request to the Expressway-C, which then inspects the XMPP 'to' address. If the domain in that address is not listed in its configured domains, it will reject the connection. This is a fundamental step in enabling IM&P services over MRA.

Correct answer: Configure Restriction Tables to block transfers to numbers outside of the department's extension range.

Restriction Tables are the primary mechanism in Unity Connection for controlling call transfers and message forwarding. An administrator can create a custom restriction table that defines patterns for allowed and blocked numbers. By applying this table to the users' Class of Service, the system can prevent them from forwarding messages or transferring calls to any number not explicitly permitted, such as extensions belonging to other departments or external numbers.

Correct answer: The 'Call-Redirect' number range is not configured or does not include the user extensions.

In Cisco Unity Express, for the auto-attendant to be able to transfer a call to an extension on the CME, that extension must fall within a range defined by the `call-redirect` command. This command explicitly tells the CUE which number patterns it is allowed to transfer calls to. If an extension is dialed that is not covered by a `call-redirect` entry, CUE will consider it an invalid number and the transfer will fail.

Correct answer: The message is replicated from the Site A cluster to the Site B cluster, where it is stored. The Site B cluster is responsible for activating the MWI for User B.

In a Unity Connection Digital Network, when a message is left for a user on a remote system, the entire message (including the voice recording) is replicated over the network link to the recipient's home cluster. The home cluster (Site B) then takes ownership of the message, stores it in its local database, and handles all subsequent actions, such as activating the Message Waiting Indicator (MWI) and providing access for message retrieval. This ensures that users always interact with their local voicemail system, optimizing performance and WAN bandwidth.