Exam 300-820 topic 1 question 167 discussion

Actual exam question from Cisco's 300-820

Question #: 167
Topic #: 1

Refer to the exhibit. An engineer must configure a B2B traversal zone. Trusted certification authority and server certificates are uploaded to Cisco Expressway-C and Expressway-E servers. After the traversal zone configuration is completed in Expressway-C, the error message in the exhibit appears. What are the two reasons for the error? (Choose two.)

A. The peer 1 address in Expressway-C must be replaced by the FQDN of Expressway-C.
B. The peer 1 address in Expressway-C is not the FADN of Expressway-E.
C. The communication port is not set to 7001.
D. The FQDN of Expressway-E cannot be resolved by the DNS server.
E. The traversal zone TLS verify subject name in Expressway-E does not match the FQDN of Expressway-C.

Show Suggested Answer

Suggested Answer: AB 🗳️

by Cayne_Collins at July 19, 2024, 8:17 p.m.

Comments

Submit Cancel

iamnoone

3 months, 1 week ago

Selected Answer: BE

Will go with B and E. https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/config_guide/X14-0/basic_config/exwy_b_cisco-expressway-e-and-expressway-c-basic-configuration-deployment-guide-x14-0/exwy_m_routing-configuration.html#concept_5CACB904BBC11E766FDB34D20BE12C9A

upvoted 1 times

...

TheBabu

11 months ago

Selected Answer: BE

A is wrong because the FQDN of Expressway-E should be used in the peer address field. B is correct, assuming "FADN" is just a typo. C is not an issue, you don't necessarily need to start by using 7001. As long as E is listening on 7002, this works (tested in the lab). D does not apply here because they're not using the FQDN currently. E makes sense, they're not showing the config on the E side, but if you put the wrong "TLS verify subject name" there you will get a TLS connection failure. Going for B and E here.

upvoted 1 times

...

Cayne_Collins

11 months, 1 week ago

I am leaning more towards B and C on this one. Literally answers A and B are contradictory to each other. Unless this setup has multiple traversal zones, and this isnt the first one, they should be using port 7001.

upvoted 2 times

...