Endpoint and User Administration Flashcards

1
Q

Which server(s) in a CUCM cluster issue NTP client requests?

A

Only the publisher. (Subscribers sync with the publisher)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Give the CME command that tells the router to get its time from an NTP server at 10.1.1.1.

A

(config)# ntp server 10.1.1.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Give the CME command that tells the router to serve as an NTP server claiming to have stratum 3 timing.

A

(config)# ntp master 3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Give the CME command that tells the router to display the NTP server it’s using to set its clock.

A

show ntp associations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What Cisco feature relies on CDP messages generated by IP phones?

A

Cisco Unified Video Advantage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How many Ethernet ports does a Cisco IP phone contain? Briefly describe what each one does.

A

Three:
Port 0 is an internal interface.
Port 1 connects to the PC.
Port 2 connects to the access switch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does an IP phone how to react to incoming QoS markings from a connected PC?

A

The switch provides instructions via CDP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the three ways an IP phone can respond to QoS markings coming in from an attached PC? What’s the default?

A
  1. Trusted
  2. Untrusted–change any 802.1p markings to 0.
  3. Configured CoS priority level–set all traffic passing through to the LAN switch at a certain 802.1p marking.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What DHCP option number is used to identify an IP phone’s TFTP server?

A

150

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the recommended device count at which an enterprise should create a dedicated DHCP server?

A

1000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How many DHCP servers should an enterprise use?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

For smaller enterprises that run DHCP co-resident with CUCM, where is the DHCP server usually installed?

A

On the publisher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Give the format of the standard IP phone configuration filename.

A

SEP.cnf.xml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

List the first four steps in IP phone registration that are the same for both SIP and SCCP phones.

A
  1. Power up
  2. Load firmware image
  3. Learn Voice VLAN via CDP
  4. Obtain IP address et al via DHCP
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

List the final two steps in SCCP IP phone registration that are different from SIP phones.

A
  1. Obtain configuration file from TFTP server

6. Register with CUCM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

List the final seven steps in SIP phone registration that are different from SCCP phones.

A
  1. Obtain Certificate Trust List from TFTP server (if cluster is secured)
  2. Obtain configuration file from TFTP server
  3. Obtain SIP dial rules from TFTP server
  4. Register with CUCM
  5. Obtain localization files from TFTP server
  6. Obtain softkey configurations from TFTP server
  7. Obtain custom ringtones (if applicable) from TFTP server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What file does an IP phone request from a TFTP server if its specific configuration file is unavailable?

A

XMLDefault.cnf.xml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Name three items that are always in a phone configuration file downloaded via TFTP.

A
  1. Prioritized list of CUCMs
  2. TCP ports for CUCM connections
  3. Executable load identifier
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What DHCP option number may be required for third-party phones? What is its purpose?

A

DHCP Option 66 is the standardized version of Cisco-proprietary Option 150.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What file will an SCCP phone require to use cryptographic features? From what device is it obtained?

A

A Certificate Trust List, obtained from the TFTP server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does CUCM send to a newly registered SCCP phone?

A

The softkey template.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What parameter is required for a SIP phone to attempt to autoregister? How is it obtained?

A

The auto_registration_name is in the configuration file obtained from the TFTP server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the purpose of the .Loads file for a registering SIP phone? What are the two ways a SIP phone can respond to the information in this file?

A

It tells the phone what image the phone should be running. If the phone has that image, it loads it. If not, it downloads it from the TFTP server and reboots.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How does a SIP phone know whether to connect to CUCM via UDP or TCP?

A

It’s in the configuration file from the TFTP server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What type of SIP message does a SIP phone receive from CUCM to accept the phone’s registration?

A

200 OK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Name the three main differences between SIP and SCCP startup processes.

A
  1. SIP phones get their entire configs from the SEP.cnf.xml file, so these files are much bigger.
  2. SIP phones can download local dial plans.
  3. SIP phones download their softkeys using a separate XML file.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

List the four steps required to install CUCM before adding endpoints.

A
  1. Configure network settings.
  2. Verify network services are correct and feature services are activated.
  3. Configure enterprise parameters.
  4. Configure service parameters.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Whats the difference between enterprise parameters and service parameters in CUCM?

A

Enterprise parameters are cluster-wide. Service parameters are specific to the server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Give the definition of a CUCM Group.

A

It’s an ordered list of CUCM servers a phone can use to register.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Give two purposes of CUCM Groups.

A

Redundancy and scalability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How many items can be contained in a CUCM Group? How is this broken down?

A

Four–three CUCM servers and one SRST router.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Your phone has a fully populated CUCM Group. To which CUCM servers does it send messages?

A

The primary and secondary servers. (It sends backup registration messages to the secondary).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Name three items that can be set in Device Defaults.

A
  1. Device firmware load
  2. Device pool
  3. Phone button template
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What CUCM device configuration area contains security-related settings?

A

Phone Security Profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

In what section of the CME CLI are SIP phones defined?

A

voice register

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What will a SIP phone use for a time reference if the NTP server is unavailable?

A

It will use the timestamp from the header of the 200 OK response from the CUCM server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How are NTP requirements different for SIP and SCCP phones?

A

SIP phones require an NTP server address. SCCP phones get time via SCCP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What CUCM configuration area is used to set the offset from GMT?

A

Date/Time Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What Date/Time Group is automatically created on CUCM when it’s installed? How does it work?

A

CMLocal. Phones assigned to the CMLocal group are given the same GMT offset as the server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What CUCM device assignment controls the bitrate for calls?

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What CUCM device assignment defines a maximum amount of bandwidth to be used by calls to or from a given site?

A

Location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What are the two options for when a site’s defined bandwidth limit is reached?

A

The next attempted call can be dropped, or it can be rerouted via AAR.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What two types of information are stored in Device Pools?

A

Device and location information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Name five mandatory items in a Device Pool.

A
  1. CUCM Group
  2. Date/Time Group
  3. Region
  4. Softkey Template
  5. SRST router
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Name two possible ways of grouping phones into Device Pools. Which is most common?

A

Location (most common) and function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Name the two types of softkey templates.

A

Standard and custom

47
Q

Which Cisco phones do NOT support autoregistration?

A

None.

48
Q

What autoregistration action does CUCM take when a phone connects to it for the first time?

A

It assigns the phone an extension from a range.

49
Q

What action is usually required after a phone autoregisters? What process or tool is used to do this?

A

The assigned extension must be modified to match a specific extension. This is typically done with the Bulk Administration Tool.

50
Q

List the four steps in configuring autoregistration on CUCM.

A
  1. Verify that the desired autoregistration protocol is selected (default is SCCP)
  2. Enable autoregistration on one CUCM Group.
  3. Configure CUCM servers within that Group for autoregistration.
  4. Reconfigure the autoregistered phones.
51
Q

What happens if you try to configure autoregistration on more than one CUCM Group?

A

The CUCM Group that previously had autoregistration configured has it disabled.

52
Q

What happens if you configure CUCM to autoregister phones via one protocol–SIP or SCCP–and a phone using the other protocol tries to connect?

A

The phone will register using its native protocol.

53
Q

What is the default starting directory number for autoregistration?

A

1000

54
Q

Changing what value in autoregistration configuration will automatically enable autoregistration?

A

The ending directory number–it’s 1000 by default.

55
Q

What optional parameter can be set to limit the behavior of newly autoregistered phones?

A

Partition

56
Q

Give the two names for the most sophisticated strategy for autoregistering phones, then give the eight steps in how it works.

A

Auto Register Phone Tool, or TAPS (its old acronym)

  1. An IP-IVR server is turned up to support TAPS
  2. The administrator runs a BAT job adding new extensions with dummy MAC addresses
  3. New phones autoregister with random extensions
  4. A user dials the IP-IVR pilot
  5. The IP-IVR prompts the user to enter the phone’s correct extension
  6. The IP-IVR associates the phone’s MAC address with the entered extension
  7. CUCM replaces the dummy MAC address with the phone’s MAC address in the true extension’s record
  8. CUCM restarts the phone
57
Q

What CUCM DN configuration field is used to give an inbound caller information about the dialed extension?

A

Alerting Name

58
Q

What four items must be set when manually adding a new phone to CUCM?

A
  1. MAC address
  2. Device Pool
  3. Phone Button Template
  4. Device Security Profile
59
Q

What two items must be specified for each phone being added via the BAT?

A
  1. MAC address

2. Extension

60
Q

What is the filename of the spreadsheet CUCM provides for the BAT?

A

BAT.xlt

61
Q

What CUCM service administers all jobs submitted via the BAT?

A

Bulk Provision Service

62
Q

How does a Reset of a phone differ from a Restart?

A

A Reset reboots the firmware and configuration, forcing a new config pull via TFTP. A Restart re-registers the phone.

63
Q

How can one perform a Reset from a phone itself?

A

Press the Settings button, then #

64
Q

Is a Reset or a Restart performed when Apply Config is chosen on the phone configuration page in CUCM?

A

CUCM chooses the appropriate action based on the config changes.

65
Q

Give three examples of when a phone Restart would be appropriate instead of a Reset.

A

Button changes, names, and forwarding.

66
Q

Why would one consider using the BAT to save database records?

A

It’s a form of backup.

67
Q

What must one do on CCP before configuring devices?

A

Add their IP addresses or hostnames to a community.

68
Q

How many devices are permitted in a CCP community?

A

5

69
Q

If a device is configured in CCP, what must CCP do before managing it?

A

Discover it–i.e., pull information from the device about its IOS version, hardware, configuration, etc.

70
Q

What two attributes must be assigned to every CUCM end user account?

A

User ID and Last Name

71
Q

What are the default end user password and PIN?

A

They’re blank.

72
Q

What CUCM configuration options define whether strong end user passwords and PINs are required?

A

Credential Policy

73
Q

Name the three prohibited things and one requirement in a strong CUCM end user password.

A
  1. No using the same character more than three consecutive times.
  2. No using the User ID, alias, or extension.
  3. No consecutive numbers or characters.

Also, the password should include three out of the four characteristics: uppercase, lowercase, numbers, symbols.

74
Q

Name the four prohibited things and one requirement in a strong CUCM end user PIN.

A
  1. No using the same number more than two consecutive times.
  2. No using the extension or its reverse.
  3. No dial-by-name of the user.
  4. No repeated patterns/numbers in a line.

Also, it must contain at least three different numbers.

75
Q

Which type of users–end users or application users–has an interactive login? on CUCM?

A

End users

76
Q

Name the three categories of end user attributes.

A
  1. Personal/organizational settings
  2. Password info
  3. CUCM configuration settings
77
Q

What end user attribute provides the ability to customize information by country? Name two things that can be offered based on this attribute.

A

User Locale

Phone display messages and ringtones.

78
Q

Name three device types that can be associated with end users.

A
  1. IP phones
  2. Cisco IP Communicator
  3. Cisco Extension Mobility profile
79
Q

Name the three types of users in the CME GUI.

A
  1. System administrator
  2. Customer administrator
  3. Phone user
80
Q

Give the command that enables AAA for the CME GUI.

A

(config)# ip http authentication

81
Q

How can an admin add or change users in CUCM when LDAP synchronization is enabled?

A

He can’t. All changes must be made on the LDAP server.

82
Q

What happens to application users when LDAP synchronization is enabled on CUCM?

A

Nothing. They are not affected.

83
Q

What happens to existing end users on CUCM when LDAP synchronization is enabled if they do not have user IDs on the LDAP server?

A

They are deleted.

84
Q

How can an admin change end user passwords in CUCM when LDAP authentication is enabled?

A

He can’t. All changes must be made on the LDAP server.

85
Q

What CUCM service is used to perform LDAP synchronization?

A

DirSync

86
Q

Name the three possible ways of planning for LDAP synchronization.

A
  1. One-time synchronization
  2. Regular schedule
  3. On demand
87
Q

When LDAP authentication and the LDAP server fails, what happens to end users?

A

They cannot login, other than the application administrator.

88
Q

Where are passwords cached in CUCM when LDAP authentication is enabled?

A

They aren’t–they’re only held on the LDAP server.

89
Q

True or False: LDAP synchronization is not required if LDAP authentication is enabled.

A

True

90
Q

If LDAP synchronization and authorization are both enabled, what two elements of user data are stored on CUCM?

A

Associated PCs and controlled devices.

91
Q

What two LDAP attributes must be populated for a user to synchronize to CUCM?

A

The chosen User ID field and the sn attribute.

92
Q

What term describes the portion of the LDAP structure that will be searched for user accounts?

A

Agreement

93
Q

What LDAP synchronization feature can be used to limit which user accounts are copied from the LDAP server?

A

Custom filters

94
Q

Name the two types of LDAP synchronization and state the difference between them

A

Full and incremental synchronization. In full synchronization, all records are replicated from the LDAP directory to CUCM. Incremental synchronization only propagates changes.

95
Q

What version of LDAP does CUCM use?

A

3

96
Q

List the four ordered events that occur the first time LDAP synchronization takes place.

A
  1. All existing end user accounts are deactivated.
  2. Accounts whose CUCM User ID exactly matches a user in LDAP are reactivated, and settings for that user are copied to CUCM.
  3. Accounts that exist only in LDAP are created in CUCM.
  4. Deactivated accounts that are not reactivated are deleted in 24 hours.
97
Q

Where in CUCM Administration should one go to activate LDAP synchronization?

A

System > LDAP > LDAP System

98
Q

List the four steps in configuring LDAP synchronization.

A
  1. Activate DirSync.
  2. Configure the LDAP system.
  3. Configure the LDAP directory.
  4. Configure LDAP Custom Filters.
99
Q

Must an LDAP Custom Filter be matched for user data to be imported, or must it NOT be matched?

A

It must be matched.

100
Q

True or False: An incremental sync is required when an LDAP Custom Filter is changed.

A

False. A full sync is required.

101
Q

Where must one navigate to to enable DirSync?

A

Tools > Service Activation on the Publisher’s Cisco Unified Serviceability.

102
Q

What’s the easiest way to confirm LDAP synchronization on CUCM?

A

Confirm the LDAP Sync Status is listed as Active on any end user.

103
Q

What happens if LDAP synchronization finds a user whose planned User ID matches that of an existing CUCM application user?

A

The end user is not created.

104
Q

Name the four LDAP synchronization server type options.

A
  1. Microsoft Active Directory
  2. iPlanet/Sun ONE
  3. OpenLDAP
  4. Microsoft Active Directory Application Mode
105
Q

Name the five LDAP attributes that can be used as a CUCM User ID.

A
  1. sAMAccountName
  2. mail
  3. employeeNumber
  4. telephoneNumber
  5. userPrincipalName
106
Q

How many LDAP servers can CUCM be configured to try for synchronization?

A

Three

107
Q

Name three rules to follow when configuring an account on the LDAP server for the CUCM server to use for synchronization.

A
  1. The account should be dedicated to CUCM.
  2. The account should be permitted to read all user objects located in the agreements.
  3. The password should never expire.
108
Q

What two rules should you follow for scheduling LDAP synchronization?

A
  1. Set synchronization for outside business hours.

2. When multiple synchronization agreements are configured, schedule them for different times.

109
Q

What two rules should you follow to prevent downtime due to failed LDAP synchronization?

A
  1. Configure at least two LDAP servers.

2. Reference LDAP servers by IP address instead of DNS name.

110
Q

What should one configure on an LDAP server prior to configuring LDAP authentication?

A

A CUCM directory user with administrative access rights.

111
Q

Where do end users managed their passwords and PINs once LDAP authentication is configured (they’re different)?

A

Passwords are configured within the LDAP directory. PINs are configured on the user’s CUCM web page.

112
Q

What will yield faster response times when LDAP authentication is configured with Microsoft Active Directory?

A

If CUCM is configured to query an AD global catalog server.

113
Q

What’s the simplest method of confirming that LDAP authentication has been successful?

A

Confirm that the Password field has disappeared from a user’s configuration page.

114
Q

Where in CME is end user directory information configured?

A

It’s the name command on the ephone-dn.