500-444 Exam Dumps : Cisco Contact Center Enterprise Implementation and Troubleshooting

A certificate authority (CA) is a trusted entity that issues digital certificates for websites and other entities. CAs validate a website domain and, depending on the type of certificate, the ownership of the website, and then issue TLS/SSL certificates that are trusted by web browsers like Chrome, Safari and Firefox. Thus, CAs help keep the internet a safer place by verifying websites and other entities to enable more trust in online communications and transactions. Some of the roles of a CA in a trusted third-party CA certificate are:

• To provide validation of certificate requests: A CA verifies the identity and authenticity of the certificate requester before issuing a certificate. The CA may use different methods of validation, such as domain validation, organization validation, or extended validation, depending on the type and level of assurance of the certificate. The CA may also check the revocation status of the certificate or the certificate chain to ensure that the certificate is not expired or revoked.
• To issue a CA signed Identity certificates: A CA signs the certificate with its own private key, which attests to the validity and integrity of the certificate. The CA also provides the certificate with a serial number, a validity period, and other attributes. The CA signed certificate can be used by the certificate holder to prove its identity and establish secure connections with other parties.

References:

• What is a CA? Certificate Authorities Explained
• The Role of Certificate Authorities
• The 5 most frequently Asked Questions about Certificate Authority (CA)

n Contact Center Enterprise with Cisco Unified Customer Voice Portal (CVP) and Cisco Unified Border Element (CUBE) deployment, CUBE must be configured as media pass flow-through mode. This means that CUBE will terminate and reoriginate both the signaling and media streams for each call leg. This allows CUBE to perform media manipulation, such as transcoding, transrating, DTMF interworking, and media forking. Media pass flow-through mode is required for CUBE to support advanced features for contact center, such as courtesy call back, contact center survivability, and encrypted (SRTP) trunks. Media pass flow-around mode, where CUBE only terminates and reoriginate the signaling stream and lets the media stream bypass CUBE, is not supported for contact center solutions. A voice gateway must not be dedicated for VXML browser sessions, as CUBE can coexist with VXML gateway on the same platform. Box-to-box CUBE can be used for redundancy, but it is not a mandatory configuration for contact center solutions123. References:

• Cisco Unified Border Element Configuration Guide - Cisco IOS XE 17.6 Onwards - Advanced Features for Cisco Contact Center2
• Cisco Unified Border Element (Enterprise) Fundamentals and Basic Setup4
• Cisco Unified Border Element for Contact Center Solutions5

According to the Cisco documentation12, single sign-on (SSO) in PCCE can be implemented in one of these three modes:

• SSO - Enable all agents and supervisors in the deployment for SSO. This mode requires the use of SAML assertions to exchange authentication and authorization details between an identity provider (IdP) and an identity service (IdS)1.
• SAML - Security Assertion Markup Language (SAML) is an XML-based standard that allows the IdP to issue SAML assertions, which are packages of security information transferred from the IdP to the service provider for user authentication1. SAML is the underlying technology that enables SSO in PCCE2.
• Hybrid - Enable agents and supervisors selectively in the deployment for SSO. Hybrid mode allows you to phase in the migration of agents from a non-SSO deployment to an SSO deployment and enable SSO for local PGs. Hybrid mode is useful if you have third-party applications that don’t support SSO, and some agents and supervisors must be SSO-disabled to sign in to those applications1.

Option A is incorrect because Non-SSO is the opposite of SSO, and it means continuing to use existing Active Directory-based and local authentication, without SSO1. Option C is incorrect because ldS is a typo for IdS, which is not a mode but a component of SSO. Option D is incorrect because ldP is a typo for IdP, which is also not a mode but a component of SSO.

References:

• 1: Single Sign-On - Cisco3
• 2: Cisco Packaged Contact Center Enterprise Features Guide Release 11.6 (1) - Single Sign-On [Cisco Packaged Contact Center Enterprise] - Cisco

• SSO - Enable all agents and supervisors in the deployment for SSO.
• Hybrid - Enable agents and supervisors selectively in the deployment for SSO. ...
• Non-SSO - Continue to use existing Active Directory-based and local authentication, without SSO.