Exam 350-701 topic 1 question 97 discussion

Incorporating the Firewall into the Unified Communications System Configuring the ASA is not enough to fully incorporate the firewall into the Cisco Unified Communications system. You must also add the ASA to the Certificate Trust List (CTL) using the Cisco Certificate Trust List Client, which is part of the Unified Communications Manager. https://www.cisco.com/c/en/us/td/docs/security/asa/special/unified-communications/unified-communications-guide/tls-proxy-for-encrypted-voice-inspection.html?bookSearch=true

"A" is correct. The security appliance acts as a TLS proxy between the Cisco IP Phone and Cisco UCM. The proxy is transparent for the voice calls between the phone and the Cisco UCM. Cisco IP Phones download a Certificate Trust List from the Cisco UCM before registration which contains identities (certificates) of the devices that the phone should trust, such as TFTP servers and Cisco UCM servers. To support server proxy, the CTL file must contain the certificate that the security appliance creates for the Cisco UCMs.

I think A

The ASA must be added to the Cisco UC Manager platform as the Secured Collaboration Proxy.

This question is horrible. It is about where to put the certificate or is it about the option in the menu in the CUCM to configure the TLS proxy or anything else?