500-444 Exam Dumps : Cisco Contact Center Enterprise Implementation and Troubleshooting

A voice gateway (VGW) is a device that connects a traditional telephony network, such as a TDM trunk, to a voice over IP (VoIP) network, such as a Cisco Unified Communications Manager (CUCM) cluster. A VGW performs signaling and media conversion between the two networks, and can also provide supplementary services, such as call routing, digit manipulation, transcoding, conferencing, and fax relay. A VGW can be a standalone device, such as a Cisco Integrated Services Router (ISR), or a software module, such as a Cisco Unified Border Element (CUBE). A CUBE is a special type of VGW that can also provide security, demarcation, and interworking functions for VoIP calls. A CUBE can be deployed between two VoIP networks, such as CUCM and a service provider SIP trunk, or between a TDM trunk and a VoIP network, in which case it acts as both a CUBE and a VGW. A CUCM is not a VGW, but a call control platform that manages VoIP endpoints, such as IP phones, and interacts with VGWs for call routing and signaling. A CUSP is a Cisco Unified SIP Proxy, which is a device that provides SIP routing and load balancing for VoIP networks. A CUSP is not a VGW, but a SIP proxy server that can work with CUCM and CUBE to optimize SIP call flows. References:

• Troubleshooting Cisco Contact Center Enterprise (CCET), Module 1: Voice Gateway Overview1
• Cisco Contact Center Enterprise Implementation and Troubleshooting (CCEIT), Module 2: Voice Gateway Configuration2
• Cisco Unified Border Element Configuration Guide3
• Cisco Unified SIP Proxy Configuration Guide4

A certificate authority (CA) is a trusted entity that issues digital certificates for websites and other entities. CAs validate a website domain and, depending on the type of certificate, the ownership of the website, and then issue TLS/SSL certificates that are trusted by web browsers like Chrome, Safari and Firefox. Thus, CAs help keep the internet a safer place by verifying websites and other entities to enable more trust in online communications and transactions. Some of the roles of a CA in a trusted third-party CA certificate are:

• To provide validation of certificate requests: A CA verifies the identity and authenticity of the certificate requester before issuing a certificate. The CA may use different methods of validation, such as domain validation, organization validation, or extended validation, depending on the type and level of assurance of the certificate. The CA may also check the revocation status of the certificate or the certificate chain to ensure that the certificate is not expired or revoked.
• To issue a CA signed Identity certificates: A CA signs the certificate with its own private key, which attests to the validity and integrity of the certificate. The CA also provides the certificate with a serial number, a validity period, and other attributes. The CA signed certificate can be used by the certificate holder to prove its identity and establish secure connections with other parties.

References:

• What is a CA? Certificate Authorities Explained
• The Role of Certificate Authorities
• The 5 most frequently Asked Questions about Certificate Authority (CA)

 = In order to configure SAML SSO for PCCE, you need to create claim rules that specify the claims sent from ADFS to Cisco Identity Service as part of a successful SAML assertion. The claim rules define how to transform the incoming claims from the AD FS identity provider into the outgoing claims that are expected by the Cisco Identity Service relying party. The two claim rules that are required for PCCE are:

• sAMAccountName - Logon names maintained for backward compatibility. This claim rule maps the sAMAccountName attribute from the AD FS identity provider to the uid attribute in the outgoing claim. The uid attribute is used to identify the authenticated user in the claim sent to the applications. The sAMAccountName attribute is the logon name used to support clients and servers from a previous version of Windows1.
• E-Mail Address - For the Outgoing claim type. This claim rule maps the E-Mail-Addresses attribute from the AD FS identity provider to the mail attribute in the outgoing claim. The mail attribute is used to provide the email address of the authenticated user in the claim sent to the applications. The E-Mail-Addresses attribute is the primary email address of the user2.

The other options are not valid claim rules for PCCE. The user_principal option is not a valid attribute name in AD FS. The Unspecified option is not a valid claim type in AD FS. The uid option is not a valid attribute name in AD FS, but it is the outgoing claim type that is mapped from the sAMAccountName attribute.

References :=

• AD FS 2.0 Setup for SAML SSO Configuration Example
• Configure Single Sign-On with CUCM and AD FS 2.0
• Checklist - Creating Claim Rules for a Claims Provider Trust
• Notes on ADFS as SAML IdP for ISE User Portals