Exam 300-820 topic 1 question 153 discussion

Actual exam question from Cisco's 300-820

Question #: 153
Topic #: 1

An engineer attempts to upload a server certificate to an Expressway-C server but receives an error when they click the upload button that says that the file is invalid. The engineer is advised that this happens because the certificate was signed incorrectly and is missing an attribute. What must the engineer do to upload the certificate?

A. Create a certificate request via Certificate Services Web Page and ensure that the certificate validity period is five years because the Expressway server validates this during certificate import.
B. Create a certificate request via the Certificate Services Web Page and ensure that the Subject Common Name field contains the server FQDN and all Cisco Unified CM phone security profile names.
C. Create a new certificate template with "Server authentication” and "Client authentication" enabled and use this template when signing the Expressway server certificate.
D. Create a new certificate template with the certificate attribute "Allow private key to be exported" enabled and use this template when signing the Expressway server certificate.

Show Suggested Answer

Suggested Answer: C 🗳️

by indebeninghi at Jan. 23, 2024, 9:29 a.m.

Comments

Submit Cancel

Cayne_Collins

10 months, 2 weeks ago

Selected Answer: C

The error message that you cant even upload the certificate is the giveaway on this. The certificate must include the Client Authentication extension. The system won't let you upload a certificate without this extension. Page 24 https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X15-0/mra/exwy_b_mra-deployment-guide-x150.pdf

upvoted 2 times

...

indebeninghi

1 year, 4 months ago

Selected Answer: C

answer C https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X15-0/mra/exwy_b_mra-deployment-guide-x150.pdf

upvoted 2 times

...