500-444 Exam Dumps - Cisco CCEIT Questions and Answers

CUBE is a Cisco IOS software feature that provides voice and video connectivity from IP phones to the PSTN or other IP networks. CUBE supports several advanced call control and mobility services, such as:

• Element Grouping: This feature allows you to group multiple CUBE elements into a single logical entity and apply common configuration and dial plan across them. This simplifies the management and scalability of CUBE deployments.
• Time of Day Routing: This feature allows you to route calls based on the time of day, day of week, or date. You can define time periods and time schedules and associate them with dial peers or voice translation rules. This enables you to implement different call routing policies for different time slots, such as business hours, after hours, holidays, etc.
• Call Admission Control: This feature allows you to limit the number of concurrent calls on a CUBE element or a CUBE group based on the available bandwidth or the configured maximum number of calls. This prevents oversubscription of network resources and ensures the quality of service for voice and video calls.

References:

• CUBE Configuration Guide
• CUBE Element Grouping Configuration Guide
• Time of Day Routing Configuration Guide
• Call Admission Control Configuration Guide

Cisco Identity Service (IdS) is a component of Cisco Unified Contact Center Enterprise (CCE) that enables single sign-on (SSO) for users to access various CCE applications, such as Finesse, Unified Intelligence Center, and ECE1. IdS acts as a service provider (SP) that delegates the authentication process to an external identity provider (IdP), such as Active Directory Federation Services (AD FS), PingFederate, or Okta2.

To configure the Cisco IdS using PCCE Web Administration Manager (S.P.O.G), a trust relationship must be established by downloading and exchanging a metadata file between the IdS and the IdP. This means that both the IdS and the IdP must have each other’s metadata file imported into their configuration, so that they can exchange information such as the entity ID, the endpoints, the certificates, and the SSO protocol3. Therefore, the correct answer is B: IdS to IdP and IdP to IdS.

The other options are incorrect because:

• A: IdS to IdP is only half of the trust relationship, as the IdP also needs to have the IdS metadata file imported.
• C: IdP to IdS is also only half of the trust relationship, as the IdS also needs to have the IdP metadata file imported.
• D: IdS to IdP and IdP to Active Directory (AD) is not a valid option, as the IdP does not need to exchange a metadata file with AD. The IdP can use AD as a user directory, but it does not need to establish a trust relationship with it for SSO purposes4.

References:

1: Cisco Packaged Contact Center Enterprise Administration and Configuration Guide, Release 12.0(1) - Configure Cisco Identity Service 2: Cisco Packaged Contact Center Enterprise Administration and Configuration Guide, Release 12.0(1) - Configure Single Sign-On 3: Cisco Packaged Contact Center Enterprise Administration and Configuration Guide, Release 12.0(1) - Configure Identity Provider 4: Cisco Packaged Contact Center Enterprise Administration and Configuration Guide, Release 12.0(1) - Configure Active Directory

The Active and Configured CUIC Users for the 2K deployment model are 200 and 800 respectively. This means that the CUIC server can support up to 200 concurrent users and up to 800 configured users. A concurrent user is a user who is logged in to CUIC and actively using the application. A configured user is a user who has an account in CUIC, regardless of whether they are logged in or not. The 2K deployment model is one of the UCCE deployment types that defines the maximum number of agents, supervisors, and reporting users that can be supported by the system. The 2K deployment model can support up to 2000 agents, 200 supervisors, and 200 CUIC concurrent users12. References:

• Cisco Unified Contact Center Enterprise Installation and Upgrade Guide, Release 12.5 (1) and 12.5 (2) - CLI Commands during Installation and Upgrade 2
• Cisco 500-444 Quiz 1 Topic 8 Questions 1-5 1

= UC on UCS Tested Reference Configuration (TRC) is a type of deployment option for Cisco Unified Communications applications on Cisco Unified Computing System (UCS) servers. TRC is defined as Configuration Based, which means that it specifies the exact hardware configuration, including server model, CPU, memory, disk, RAID settings, BIOS settings, and network adapters. TRC also requires VMware vSphere as the virtualization software, and does not support any other hypervisor. VMware vCenter is not required for TRC, but it is recommended for managing multiple ESXi hosts. TRC is different from Specs-based, which is defined as Rule Based, and allows more flexibility in choosing the hardware components, as long as they meet the minimum requirements and follow the rules defined by Cisco. Specs-based also supports other hypervisors besides VMware vSphere, such as Microsoft Hyper-V and KVM. References :=

• Troubleshoot UC on UCS TRC, UC on UCS Specs-based, and 3rd-party Specs-based Deployments1
• Collaboration Virtualization Sizing2
• Unified Computing System Hardware3
• What to select - Cisco BE6000 or UC-on-UCS45

When an agent transfers a call to another ICM Skill Group, the call should be transferred to a CTI route point that is associated with a routing client and a dialed number in the ICM configuration. This way, the ICM can route the call to the appropriate agent based on the skill group and the call context. The ICM can also maintain the end-to-end reporting context for the call, such as the original call type, the transfer reason, the transfer time, and the transfer destination. If the call is transferred to an agent IP phone, a route pattern, or a translation pattern, the ICM will lose the visibility and control of the call, and the reporting context will be broken.

References: Troubleshooting Cisco Contact Center Enterprise (CCET) course, Module 3: Troubleshooting Call Flows, Lesson 3: Troubleshooting Transfers12

Security certificates are used to ensure that browser communication is secure by authenticating clients and servers on the web. There are two ways to deploy security certificates in CCE: Certificate Authority (CA) signed certificates and self-signed certificates1.

• CA signed certificates are certificates that are issued by a trusted third-party entity, such as VeriSign or Thawte, that validates the identity of the certificate owner. CA signed certificates are more secure and reliable than self-signed certificates, but they also require more time and money to obtain and maintain2.
• Self-signed certificates are certificates that are generated and signed by the certificate owner, without involving any third-party entity. Self-signed certificates are easier and cheaper to create and deploy, but they are less secure and trustworthy than CA signed certificates, as they can be easily forged or tampered with2.

CCE supports both CA signed certificates and self-signed certificates for securing the communication between different components, such as AW, CVP, Finesse, ECE, etc. However, some components may require additional steps or configurations to use CA signed certificates, such as importing the CA certificate into the AW machines, changing the Java truststore password, or binding the CA signed certificate in the Diagnostic Portico123.

The other options are not valid ways to deploy security certificates in CCE:

• Security Authority (SA) is not a term related to security certificates, but rather a role that is assigned to a user or a group in CCE to grant them access to certain security features, such as encryption, auditing, or IPsec1.
• 3rd party signed certificates are not a distinct category of security certificates, but rather a synonym for CA signed certificates, as they both involve a third-party entity that signs the certificates2.
• Digitally signed certificates are not a specific type of security certificates, but rather a general characteristic of all security certificates, as they all use digital signatures to verify the authenticity and integrity of the certificate data2.

References:

1: Security Guide for Cisco Unified ICM/Contact Center Enterprise, Release 12.6(1) - Certificate Management for Secured Connections 2: Packaged CCE Migration Guide, Release 12.0 - Manage Security Certificates 4: Computer forensics certifications - Infosec Resources 3: Implement CA Signed Certificates in a CCE Solution - Cisco