Exam 300-820 topic 1 question 22 discussion

Answer C: Auto - no specific media encryption policy is applied by the Expressway. Media encryption is purely dependent on the target system/endpoint requests. This is the default behavior and is equivalent to how the Expressway operated before this feature was introduced.

This should be C "Auto"

Page 21. https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/admin_guide/Cisco-Expressway-Administrator-Guide-X8-10.pdf As the new media encryption mode is off by default, it is off for the CEtls zones that are automatically created for MRA. These zones are not editable through the web interface. To use AES GCM media encryption with MRA. Tricky question

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/admin_guide/X14-0-1/exwy_b_cisco-expressway-administrator-guide-x14-0-1/exwy_m_zones-and-neighbors.html

The encryption mode options are: • Force encrypted: All media to and from the zone/subzone must be encrypted. If the target system/endpoint is configured to not use encryption, then the call will be dropped. • Force unencrypted: All media must be unencrypted. If the target system/endpoint is configured to use encryption, then the call may be dropped; if it is configured to use Best effort then the call will fall back to unencrypted media. • Best effort: Use encryption if available, otherwise fall back to unencrypted media. • Auto: No specific media encryption policy is applied by the Expressway. Media encryption is purely dependent on the target system/endpoint requests. This is the default behavior and is equivalent to how the Expressway operated before this feature was introduced. Encryption policy (any encryption setting other than Auto) is applied to a call by routing it through a back-to-back user agent (B2BUA) hosted on the Expressway.

This has been verified on my local Expressway. Auto is the default

This is C for sure

Default: Auto

Should be C