To configure a Cisco CallManager cluster for security, first enable services, then use the CTL Client to set cluster to mixed mode and create a signed CTL. Finally, deploy the certificates to the IP Phones and set the device security mode through the CallManager Administration.
A and C
You must enable both the Cisco CAPF and CTL Provider when configuring a Cisco CallManager cluster for security.
At a minimum, the Cisco CTL Client requires the Windows 2000 operating system, and at least one USB port, Smart Card service enabled. It does also function on the Windows XP operating system.
Upgrading an LSC on a Cisco IP Phone can be done through the CallManager Administration utility without updating the CTL using the Cisco CTL Client.
A and F
These answers show the valid security configuration options of the Cisco IP Phone through the CallManager Administration.
C and D
When a phone configured for authentication calls a nonsecure phone, the resulting call will negotiate to the lowest-common-denominator, which is nonsecure. Likewise, when a phone configured for encryption calls a phone configured for authentication, the resulting call will negotiate to the lowest-common-denominator, which is authentication.
C and D
You can generate a query using the device name through the Find and List Phones window. The certificate lifetime is not a searchable field.
A and E
You can query based on both the authentication mode and device security mode from the Find and List Phones window.
The Cisco 7920 Wireless IP Phone does not support the phone security features.
B, C, and D
All of these communication types cannot be encrypted using phone security. In addition, calls streaming music on hold (MOH) cannot be secured.
Part I: Cisco CallManager Fundamentals
Introduction to Cisco Unified Communications and Cisco Unified CallManager
Cisco Unified CallManager Clustering and Deployment Options
Cisco Unified CallManager Installation and Upgrades
Part II: IPT Devices and Users
Cisco IP Phones and Other User Devices
Configuring Cisco Unified CallManager to Support IP Phones
Cisco IP Telephony Users
Cisco Bulk Administration Tool
Part III: IPT Network Integration and Route Plan
Cisco Catalyst Switches
Configuring Cisco Gateways and Trunks
Cisco Unified CallManager Route Plan Basics
Cisco Unified CallManager Advanced Route Plans
Configuring Hunt Groups and Call Coverage
Implementing Telephony Call Restrictions and Control
Implementing Multiple-Site Deployments
Part IV: VoIP Features
Configuring User Features, Part 1
Configuring User Features, Part 2
Configuring Cisco Unified CallManager Attendant Console
Configuring Cisco IP Manager Assistant
Part V: IPT Security
Securing the Windows Operating System
Securing Cisco Unified CallManager Administration
Preventing Toll Fraud
Hardening the IP Phone
Understanding Cryptographic Fundamentals
Understanding the Public Key Infrastructure
Understanding Cisco IP Telephony Authentication and Encryption Fundamentals
Configuring Cisco IP Telephony Authentication and Encryption
Part VI: IP Video
Introducing IP Video Telephony
Configuring Cisco VT Advantage
Part VII: IPT Management
Introducing Database Tools and Cisco Unified CallManager Serviceability
Configuring Alarms and Traces
Using Additional Management and Monitoring Tools
Part VIII: Appendix
Appendix A. Answers to Review Questions