Endpoint and User Administration Flashcards
1
Q
Which server(s) in a CUCM cluster issue NTP client requests?
A
Only the publisher. (Subscribers sync with the publisher)
2
Q
Give the CME command that tells the router to get its time from an NTP server at 10.1.1.1.
A
(config)# ntp server 10.1.1.1
3
Q
Give the CME command that tells the router to serve as an NTP server claiming to have stratum 3 timing.
A
(config)# ntp master 3
4
Q
Give the CME command that tells the router to display the NTP server it’s using to set its clock.
A
show ntp associations
5
Q
What Cisco feature relies on CDP messages generated by IP phones?
A
Cisco Unified Video Advantage
6
Q
How many Ethernet ports does a Cisco IP phone contain? Briefly describe what each one does.
A
Three:
Port 0 is an internal interface.
Port 1 connects to the PC.
Port 2 connects to the access switch.
7
Q
How does an IP phone how to react to incoming QoS markings from a connected PC?
A
The switch provides instructions via CDP.
8
Q
What are the three ways an IP phone can respond to QoS markings coming in from an attached PC? What’s the default?
A
- Trusted
- Untrusted–change any 802.1p markings to 0.
- Configured CoS priority level–set all traffic passing through to the LAN switch at a certain 802.1p marking.
9
Q
What DHCP option number is used to identify an IP phone’s TFTP server?
A
150
10
Q
What is the recommended device count at which an enterprise should create a dedicated DHCP server?
A
1000
11
Q
How many DHCP servers should an enterprise use?
A
One
12
Q
For smaller enterprises that run DHCP co-resident with CUCM, where is the DHCP server usually installed?
A
On the publisher
13
Q
Give the format of the standard IP phone configuration filename.
A
SEP.cnf.xml
14
Q
List the first four steps in IP phone registration that are the same for both SIP and SCCP phones.
A
- Power up
- Load firmware image
- Learn Voice VLAN via CDP
- Obtain IP address et al via DHCP
15
Q
List the final two steps in SCCP IP phone registration that are different from SIP phones.
A
- Obtain configuration file from TFTP server
6. Register with CUCM
16
Q
List the final seven steps in SIP phone registration that are different from SCCP phones.
A
- Obtain Certificate Trust List from TFTP server (if cluster is secured)
- Obtain configuration file from TFTP server
- Obtain SIP dial rules from TFTP server
- Register with CUCM
- Obtain localization files from TFTP server
- Obtain softkey configurations from TFTP server
- Obtain custom ringtones (if applicable) from TFTP server
17
Q
What file does an IP phone request from a TFTP server if its specific configuration file is unavailable?
A
XMLDefault.cnf.xml
18
Q
Name three items that are always in a phone configuration file downloaded via TFTP.
A
- Prioritized list of CUCMs
- TCP ports for CUCM connections
- Executable load identifier
19
Q
What DHCP option number may be required for third-party phones? What is its purpose?
A
DHCP Option 66 is the standardized version of Cisco-proprietary Option 150.
20
Q
What file will an SCCP phone require to use cryptographic features? From what device is it obtained?
A
A Certificate Trust List, obtained from the TFTP server.
21
Q
What does CUCM send to a newly registered SCCP phone?
A
The softkey template.
22
Q
What parameter is required for a SIP phone to attempt to autoregister? How is it obtained?
A
The auto_registration_name is in the configuration file obtained from the TFTP server.
23
Q
What is the purpose of the .Loads file for a registering SIP phone? What are the two ways a SIP phone can respond to the information in this file?
A
It tells the phone what image the phone should be running. If the phone has that image, it loads it. If not, it downloads it from the TFTP server and reboots.
24
Q
How does a SIP phone know whether to connect to CUCM via UDP or TCP?
A
It’s in the configuration file from the TFTP server.
25
What type of SIP message does a SIP phone receive from CUCM to accept the phone's registration?
200 OK
26
Name the three main differences between SIP and SCCP startup processes.
1. SIP phones get their entire configs from the SEP.cnf.xml file, so these files are much bigger.
2. SIP phones can download local dial plans.
3. SIP phones download their softkeys using a separate XML file.
27
List the four steps required to install CUCM before adding endpoints.
1. Configure network settings.
2. Verify network services are correct and feature services are activated.
3. Configure enterprise parameters.
4. Configure service parameters.
28
Whats the difference between enterprise parameters and service parameters in CUCM?
Enterprise parameters are cluster-wide. Service parameters are specific to the server.
29
Give the definition of a CUCM Group.
It's an ordered list of CUCM servers a phone can use to register.
30
Give two purposes of CUCM Groups.
Redundancy and scalability
31
How many items can be contained in a CUCM Group? How is this broken down?
Four--three CUCM servers and one SRST router.
32
Your phone has a fully populated CUCM Group. To which CUCM servers does it send messages?
The primary and secondary servers. (It sends backup registration messages to the secondary).
33
Name three items that can be set in Device Defaults.
1. Device firmware load
2. Device pool
3. Phone button template
34
What CUCM device configuration area contains security-related settings?
Phone Security Profile
35
In what section of the CME CLI are SIP phones defined?
voice register
36
What will a SIP phone use for a time reference if the NTP server is unavailable?
It will use the timestamp from the header of the 200 OK response from the CUCM server.
37
How are NTP requirements different for SIP and SCCP phones?
SIP phones require an NTP server address. SCCP phones get time via SCCP.
38
What CUCM configuration area is used to set the offset from GMT?
Date/Time Groups
39
What Date/Time Group is automatically created on CUCM when it's installed? How does it work?
CMLocal. Phones assigned to the CMLocal group are given the same GMT offset as the server.
40
What CUCM device assignment controls the bitrate for calls?
Region
41
What CUCM device assignment defines a maximum amount of bandwidth to be used by calls to or from a given site?
Location
42
What are the two options for when a site's defined bandwidth limit is reached?
The next attempted call can be dropped, or it can be rerouted via AAR.
43
What two types of information are stored in Device Pools?
Device and location information
44
Name five mandatory items in a Device Pool.
1. CUCM Group
2. Date/Time Group
3. Region
4. Softkey Template
5. SRST router
45
Name two possible ways of grouping phones into Device Pools. Which is most common?
Location (most common) and function
46
Name the two types of softkey templates.
Standard and custom
47
Which Cisco phones do NOT support autoregistration?
None.
48
What autoregistration action does CUCM take when a phone connects to it for the first time?
It assigns the phone an extension from a range.
49
What action is usually required after a phone autoregisters? What process or tool is used to do this?
The assigned extension must be modified to match a specific extension. This is typically done with the Bulk Administration Tool.
50
List the four steps in configuring autoregistration on CUCM.
1. Verify that the desired autoregistration protocol is selected (default is SCCP)
2. Enable autoregistration on one CUCM Group.
3. Configure CUCM servers within that Group for autoregistration.
4. Reconfigure the autoregistered phones.
51
What happens if you try to configure autoregistration on more than one CUCM Group?
The CUCM Group that previously had autoregistration configured has it disabled.
52
What happens if you configure CUCM to autoregister phones via one protocol--SIP or SCCP--and a phone using the other protocol tries to connect?
The phone will register using its native protocol.
53
What is the default starting directory number for autoregistration?
1000
54
Changing what value in autoregistration configuration will automatically enable autoregistration?
The ending directory number--it's 1000 by default.
55
What optional parameter can be set to limit the behavior of newly autoregistered phones?
Partition
56
Give the two names for the most sophisticated strategy for autoregistering phones, then give the eight steps in how it works.
Auto Register Phone Tool, or TAPS (its old acronym)
1. An IP-IVR server is turned up to support TAPS
2. The administrator runs a BAT job adding new extensions with dummy MAC addresses
3. New phones autoregister with random extensions
4. A user dials the IP-IVR pilot
5. The IP-IVR prompts the user to enter the phone's correct extension
6. The IP-IVR associates the phone's MAC address with the entered extension
7. CUCM replaces the dummy MAC address with the phone's MAC address in the true extension's record
8. CUCM restarts the phone
57
What CUCM DN configuration field is used to give an inbound caller information about the dialed extension?
Alerting Name
58
What four items must be set when manually adding a new phone to CUCM?
1. MAC address
2. Device Pool
3. Phone Button Template
4. Device Security Profile
59
What two items must be specified for each phone being added via the BAT?
1. MAC address
| 2. Extension
60
What is the filename of the spreadsheet CUCM provides for the BAT?
BAT.xlt
61
What CUCM service administers all jobs submitted via the BAT?
Bulk Provision Service
62
How does a Reset of a phone differ from a Restart?
A Reset reboots the firmware and configuration, forcing a new config pull via TFTP. A Restart re-registers the phone.
63
How can one perform a Reset from a phone itself?
Press the Settings button, then **#**
64
Is a Reset or a Restart performed when Apply Config is chosen on the phone configuration page in CUCM?
CUCM chooses the appropriate action based on the config changes.
65
Give three examples of when a phone Restart would be appropriate instead of a Reset.
Button changes, names, and forwarding.
66
Why would one consider using the BAT to save database records?
It's a form of backup.
67
What must one do on CCP before configuring devices?
Add their IP addresses or hostnames to a community.
68
How many devices are permitted in a CCP community?
5
69
If a device is configured in CCP, what must CCP do before managing it?
Discover it--i.e., pull information from the device about its IOS version, hardware, configuration, etc.
70
What two attributes must be assigned to every CUCM end user account?
User ID and Last Name
71
What are the default end user password and PIN?
They're blank.
72
What CUCM configuration options define whether strong end user passwords and PINs are required?
Credential Policy
73
Name the three prohibited things and one requirement in a strong CUCM end user password.
1. No using the same character more than three consecutive times.
2. No using the User ID, alias, or extension.
3. No consecutive numbers or characters.
Also, the password should include three out of the four characteristics: uppercase, lowercase, numbers, symbols.
74
Name the four prohibited things and one requirement in a strong CUCM end user PIN.
1. No using the same number more than two consecutive times.
2. No using the extension or its reverse.
3. No dial-by-name of the user.
4. No repeated patterns/numbers in a line.
Also, it must contain at least three different numbers.
75
Which type of users--end users or application users--has an interactive login? on CUCM?
End users
76
Name the three categories of end user attributes.
1. Personal/organizational settings
2. Password info
3. CUCM configuration settings
77
What end user attribute provides the ability to customize information by country? Name two things that can be offered based on this attribute.
User Locale
Phone display messages and ringtones.
78
Name three device types that can be associated with end users.
1. IP phones
2. Cisco IP Communicator
3. Cisco Extension Mobility profile
79
Name the three types of users in the CME GUI.
1. System administrator
2. Customer administrator
3. Phone user
80
Give the command that enables AAA for the CME GUI.
(config)# ip http authentication
81
How can an admin add or change users in CUCM when LDAP synchronization is enabled?
He can't. All changes must be made on the LDAP server.
82
What happens to application users when LDAP synchronization is enabled on CUCM?
Nothing. They are not affected.
83
What happens to existing end users on CUCM when LDAP synchronization is enabled if they do not have user IDs on the LDAP server?
They are deleted.
84
How can an admin change end user passwords in CUCM when LDAP authentication is enabled?
He can't. All changes must be made on the LDAP server.
85
What CUCM service is used to perform LDAP synchronization?
DirSync
86
Name the three possible ways of planning for LDAP synchronization.
1. One-time synchronization
2. Regular schedule
3. On demand
87
When LDAP authentication and the LDAP server fails, what happens to end users?
They cannot login, other than the application administrator.
88
Where are passwords cached in CUCM when LDAP authentication is enabled?
They aren't--they're only held on the LDAP server.
89
True or False: LDAP synchronization is not required if LDAP authentication is enabled.
True
90
If LDAP synchronization and authorization are both enabled, what two elements of user data are stored on CUCM?
Associated PCs and controlled devices.
91
What two LDAP attributes must be populated for a user to synchronize to CUCM?
The chosen User ID field and the sn attribute.
92
What term describes the portion of the LDAP structure that will be searched for user accounts?
Agreement
93
What LDAP synchronization feature can be used to limit which user accounts are copied from the LDAP server?
Custom filters
94
Name the two types of LDAP synchronization and state the difference between them
Full and incremental synchronization. In full synchronization, all records are replicated from the LDAP directory to CUCM. Incremental synchronization only propagates changes.
95
What version of LDAP does CUCM use?
3
96
List the four ordered events that occur the first time LDAP synchronization takes place.
1. All existing end user accounts are deactivated.
2. Accounts whose CUCM User ID exactly matches a user in LDAP are reactivated, and settings for that user are copied to CUCM.
3. Accounts that exist only in LDAP are created in CUCM.
4. Deactivated accounts that are not reactivated are deleted in 24 hours.
97
Where in CUCM Administration should one go to activate LDAP synchronization?
System > LDAP > LDAP System
98
List the four steps in configuring LDAP synchronization.
1. Activate DirSync.
2. Configure the LDAP system.
3. Configure the LDAP directory.
4. Configure LDAP Custom Filters.
99
Must an LDAP Custom Filter be matched for user data to be imported, or must it NOT be matched?
It must be matched.
100
True or False: An incremental sync is required when an LDAP Custom Filter is changed.
False. A full sync is required.
101
Where must one navigate to to enable DirSync?
Tools > Service Activation on the Publisher's Cisco Unified Serviceability.
102
What's the easiest way to confirm LDAP synchronization on CUCM?
Confirm the LDAP Sync Status is listed as Active on any end user.
103
What happens if LDAP synchronization finds a user whose planned User ID matches that of an existing CUCM application user?
The end user is not created.
104
Name the four LDAP synchronization server type options.
1. Microsoft Active Directory
2. iPlanet/Sun ONE
3. OpenLDAP
4. Microsoft Active Directory Application Mode
105
Name the five LDAP attributes that can be used as a CUCM User ID.
1. sAMAccountName
2. mail
3. employeeNumber
4. telephoneNumber
5. userPrincipalName
106
How many LDAP servers can CUCM be configured to try for synchronization?
Three
107
Name three rules to follow when configuring an account on the LDAP server for the CUCM server to use for synchronization.
1. The account should be dedicated to CUCM.
2. The account should be permitted to read all user objects located in the agreements.
3. The password should never expire.
108
What two rules should you follow for scheduling LDAP synchronization?
1. Set synchronization for outside business hours.
| 2. When multiple synchronization agreements are configured, schedule them for different times.
109
What two rules should you follow to prevent downtime due to failed LDAP synchronization?
1. Configure at least two LDAP servers.
| 2. Reference LDAP servers by IP address instead of DNS name.
110
What should one configure on an LDAP server prior to configuring LDAP authentication?
A CUCM directory user with administrative access rights.
111
Where do end users managed their passwords and PINs once LDAP authentication is configured (they're different)?
Passwords are configured within the LDAP directory. PINs are configured on the user's CUCM web page.
112
What will yield faster response times when LDAP authentication is configured with Microsoft Active Directory?
If CUCM is configured to query an AD global catalog server.
113
What's the simplest method of confirming that LDAP authentication has been successful?
Confirm that the Password field has disappeared from a user's configuration page.
114
Where in CME is end user directory information configured?
It's the name command on the ephone-dn.
