Free 350-801 Practice Test Questions 2026

Secure firewall and NAT traversal for mobile or remote Cisco Jabber and TelePresence
video endpoints

Secure business-to-business communications

Explanation:
Cisco Expressway (Expressway-C and Expressway-E pair) is the Collaboration Edge component that enables two primary functions:

Mobile and Remote Access (MRA) – secure traversal of firewall and NAT so that remote Cisco Jabber clients and TelePresence/video endpoints can register and use on-premises collaboration services without a VPN.

Secure business-to-business (B2B) communications – authenticated, encrypted SIP/H.323 trunking to external organizations across the Internet.

Correct Option:

B. Secure firewall and NAT traversal for mobile or remote Cisco Jabber and TelePresence video endpoints
Expressway-E sits in the DMZ and, together with Expressway-C, provides the secure traversal zone that terminates external registrations and media for MRA clients.

D. Secure business-to-business communications
Expressway establishes secure neighbor zones or B2B trunks, performing authentication, encryption and firewall traversal for inter-company video and voice calls.

Incorrect Option:

A. Survivable Remote Site Telephony functionality
SRST is provided by Cisco IOS gateways / Unified SRST routers, not by Expressway.

C. Customer interaction management services
This is the role of Cisco Contact Center solutions, not Expressway.

E. MGCP gateway registration
MGCP gateways register directly to CUCM; Expressway does not handle MGCP registration.

Reference:
Cisco Expressway Administrator Guide and Collaboration Edge design documents: Expressway provides Mobile & Remote Access (secure firewall/NAT traversal) and secure B2B collaboration.

1

Explanation:
In the SIP Trunk configuration page the Destination Address field is designed to accept a single DNS SRV record name (when the “Destination Address is an SRV” check-box is selected). That one SRV record can resolve to multiple A/AAAA records, giving load-balancing and redundancy, but the field itself should contain only one SRV entry. Entering more than one SRV name is not supported and can produce unpredictable resolution behavior.

Correct Option:

C. 1
Enter a single SRV record (for example, _sip._tcp.example.com or simply the domain portion that CUCM will prefix) in the Destination Address field. CUCM performs one SRV lookup, which may return multiple targets according to priority/weight.

Incorrect Option:

A. 4 / B. 8 / D. 16
These numbers refer to the maximum number of explicit IP-address destination entries that can be listed on a SIP trunk, not to the number of SRV records that should be placed in the Destination Address field.

Reference:
Cisco Unified Communications Manager Administration Guide – SIP Trunk Configuration: when using DNS SRV, only a single SRV destination should be defined in the Destination Address field.

80 ms round trip

Explanation:
For Cisco Unified Communications Manager clustering over the WAN, the maximum allowable network delay between any two cluster nodes is 80 ms round-trip time (RTT). This limit ensures reliable Intra-Cluster Communication Signaling (ICCS) and database replication. Exceeding 80 ms RTT can cause replication failures, delayed call processing, and unsupported behavior.

Correct Option:

A. 80 ms round trip
Cisco design guidance (SRND) specifies a maximum of 80 ms RTT between CUCM nodes when the cluster spans a WAN. One-way delay must therefore stay at or below 40 ms.

Incorrect Option:

B. 40 ms round trip
This was the older limit (pre-6.1); current supported maximum is 80 ms RTT.

C. 510 ms round trip
Far exceeds the supported limit and would break clustering.

D. 150 ms round trip
Also exceeds the 80 ms maximum and is not supported.

Reference:
Cisco Collaboration SRND – Clustering over the WAN: maximum round-trip time between any two Unified CM nodes must not exceed 80 ms.

Cisco Unified CM Group

Explanation:
A Cisco Unified CM Group contains an ordered list of up to three CallManager nodes. Phones (via their Device Pool) are assigned to a CM Group and attempt registration in the listed order. When connectivity to the primary node (normally a subscriber) is lost, the phones automatically re-register to the next available node in the group—commonly the publisher—providing intra-cluster redundancy without requiring SRST.

Correct Option:

A. Cisco Unified CM Group
Configure a CM Group that lists the preferred subscriber first and the publisher second (or third). Assign this group to the Device Pool used by the phones. If the subscriber becomes unreachable, the phones fail over and register to the publisher.

Incorrect Option:

B. Device Pool
The Device Pool references a CM Group; it does not itself define the registration failover order.

C. SRST
SRST provides call processing on a local gateway when the entire CUCM cluster is unreachable; it is not used for failover between publisher and subscriber inside the cluster.

D. Route Group
Route Groups are used for outbound call path selection, not for phone registration.

Reference:
Cisco Unified Communications Manager System Guide – Cisco Unified CM Groups: phones register to the nodes listed in their assigned CM Group in priority order and fail over automatically when a higher-priority node is lost.

gateway

Explanation:
When calls arrive in globalized (+E.164) format, the calling-party number must be converted to a localized format that the end-user phone can display and redial easily. On the ingress gateway (or SIP trunk) the administrator applies calling-party transformation patterns or translation rules that strip the international/country code and present a locally significant number. This localization occurs before the call is delivered to the phone, so the user sees the familiar local format.

Correct Option:

A. gateway
Configure calling-party transformation patterns (or IOS translation profiles) on the gateway/trunk that receives the globalized call. The gateway modifies the calling number to the desired local format and then delivers the call to the phone.

Incorrect Option:

B. route pattern
Route patterns primarily match and route the called number; they are not the preferred place for final calling-number localization toward the phone.

C. IP phone
While a phone can have a Calling Party Transformation CSS, the standard and most scalable place to perform the conversion for PSTN-originated calls is the gateway.

D. service parameters
Service parameters do not perform digit manipulation of calling numbers.

Reference:
Cisco Collaboration SRND – Dial Plan / Globalization and Localization: localize the calling-party number at the egress point toward the phone (commonly the gateway or trunk) so that end users receive numbers in a familiar local format.

Sip trunk

Explanation:
Cisco Unified Communications Manager can be configured with a fully-qualified domain name (or DNS SRV record) as the destination address of a SIP trunk. When an outbound call is placed across that trunk, CUCM performs a DNS lookup to resolve the FQDN/SRV name to one or more IP addresses. Therefore DNS is required for a fully functional system that uses FQDN-based SIP trunks.

Correct Option:

D. Sip trunk
In the SIP Trunk configuration the Destination Address field may contain an FQDN or SRV name. CUCM relies on DNS to resolve that name to the IP address(es) of the remote SIP peer.

Incorrect Option:

A. Application server name
Application servers are normally referenced by IP address or hostname that is resolved locally; DNS is not mandatory for them.

B. Primary TFTP Server for option 150
Option 150 is supplied by DHCP and points to a TFTP server IP address; DNS is not required.

C. Cisco Unified Communications Manager Name
The CUCM server name itself can be an IP address or hostname; DNS is optional, not required for basic cluster operation.

Reference:
Cisco Unified Communications Manager Administration Guide – SIP Trunk Configuration: when a Destination Address is configured as an FQDN or SRV record, CUCM uses DNS to resolve it to an IP address.

Backups should the scheduled during hours to avoid system performance issues.

Explanation:
Cisco Unified Communications Manager and IM & Presence backups (performed by the Disaster Recovery System) are resource-intensive. Running them during peak production hours can degrade call-processing performance and user experience. Therefore the recommended practice is to schedule backups during off-peak or non-business hours.

Correct Option:

A. Backups should be scheduled during hours to avoid system performance issues.
(Understood as “during off-hours”.) Configure the DRS Backup Scheduler to run at times of low call volume so that CPU, disk, and network load do not impact live services.

Incorrect Option:

B. Backups are saved as .tar files and encrypted using the web administrator account.
Backups are stored as .tar files but encryption is optional and uses a separate encryption key, not the web-admin account.

C. Backups are saved as unencrypted tar files.
Encryption can be enabled; they are not required to be unencrypted.

D. Backups are not needed for subscriber Cisco Unified Communication Manager and Cisco IM and Presence servers.
Subscribers must also be backed up; the DRS backs up the entire cluster.

Reference:
Cisco Unified Communications Manager Administration Guide – Disaster Recovery System: “Schedule backups during off-peak hours to avoid call-processing interruptions and impact to service.”

B2B calls

Device registration over the internet

Explanation:

The Cisco Expressway series (Expressway-C and Expressway-E) provides Collaboration Edge services. Two of its primary features are:

Secure business-to-business (B2B) calling – allowing authenticated, encrypted voice and video sessions with external organizations across the Internet.

Mobile and Remote Access (MRA) – enabling Cisco Jabber clients and video endpoints to register securely to the on-premises UC infrastructure over the Internet without a VPN.

Correct Option:

B. B2B calls
Expressway establishes secure traversal zones for business-to-business SIP/H.323 collaboration.

D. Device registration over the internet
Through Mobile and Remote Access, remote endpoints and Jabber clients register to CUCM via Expressway without requiring a VPN.

Incorrect Option:

A. VPN connect toward the internal UC resources
Expressway is specifically designed to eliminate the need for a VPN for remote access.

C. IP to PSTN call connectivity
PSTN connectivity is provided by gateways or CUBE, not by Expressway.

E. SIP header modification
While Expressway can perform some SIP normalization, it is not considered one of its two key features.

Reference:
Cisco Expressway Administrator Guide and Collaboration Edge design documentation: key capabilities include Mobile & Remote Access (device registration over the Internet) and secure B2B communications.

Calling Search Spaces

partitions

Explanation:

In Cisco Unified Communications Manager the dial plan is built from Partitions and Calling Search Spaces (CSS).

A Partition is a logical grouping of route patterns, directory numbers, translation patterns, etc. – it defines a set of reachable “domains.”

A Calling Search Space is an ordered list of partitions that is assigned to an endpoint (phone, trunk, gateway). The CSS therefore determines which partitions—and consequently which domains/numbers—the endpoint is allowed to access.

Correct Option:

C. Calling Search Spaces
The CSS assigned to a device lists the partitions that device may search, thereby controlling the domains it can reach.

E. partitions
Partitions hold the actual dialable patterns; they represent the domains that can be made accessible to endpoints.

Incorrect Option:

A. Call Admissions Control
CAC limits bandwidth usage; it does not define reachable domains.

B. Route patterns
Route patterns match dialed digits and select a path; they reside inside partitions but do not themselves define the accessible domains for an endpoint.

D. Translation patterns
Translation patterns manipulate digits; they also live inside partitions and are not the mechanism that grants an endpoint access to domains.

Reference:
Cisco Unified Communications Manager System Guide – Partitions and Calling Search Spaces: partitions define collections of dialable patterns (domains); a CSS assigned to an endpoint determines which of those partitions the endpoint may access.

Excess traffic is queued, and then dropped after the timer expires

Explanation:
Traffic shaping is a QoS mechanism that constrains the outbound rate of a link to a configured average rate. When incoming traffic exceeds that rate, the excess packets are placed in a shaping queue (token-bucket buffer) and transmitted later when tokens become available. If the queue fills or a maximum delay/timer is exceeded, the excess packets are ultimately dropped. This behavior distinguishes shaping from policing, which drops excess traffic immediately.

Correct Option:

D. Excess traffic is queued, and then dropped after the timer expires
Shaping buffers excess packets so they can be sent when bandwidth is available. Once the shaping queue limit or hold-time is reached, additional packets are discarded.

Incorrect Option:

A. Excess traffic is queued for later transmission
Incomplete – the packets are queued, but they will be dropped if they cannot be transmitted within the configured limits.

B. Excess traffic is dropped
This describes traffic policing, not shaping.

C. Traffic is compressed so that the traffic fits within the bandwidth of the link
Compression is a separate technique and is not how shaping works.

Reference:
Cisco QoS Configuration Guide – Traffic Shaping: excess traffic is delayed in a queue; packets that exceed the queue depth or hold timer are dropped.

The translation rule is matched and the translated number is 02553431234.

Explanation:
The voice translation rule on the gateway is written to match the incoming DNIS that contains hyphens and to remove those hyphens. When the gateway receives 0255-343-1234, the regular-expression match succeeds and the replacement string produces the digit string 02553431234 (all “-” characters stripped). The resulting number is then used for further call processing.

Correct Option:

B. The translation rule is matched and the translated number is 02553431234.
The rule matches the DNIS containing hyphens and replaces it with the same digits without the hyphens, yielding 02553431234.

Incorrect Option:

A. The translation rule is not matched because DNIS does not end with a “$”.
The presence or absence of a trailing “$” in the rule does not prevent a match for this DNIS.

C. The translation rule is not matched because DNIS contains “-”.
The rule is specifically written to match and remove the hyphens; their presence causes the match, not a failure.

D. The translation rule is matched and the translated number is 025553431234.
An extra “5” is incorrectly inserted; the correct translation simply removes the hyphens.

Reference:
Cisco IOS Voice Translation-Rule documentation: a rule that matches a pattern containing “-” and replaces it with an empty string (or a back-reference that omits the hyphens) produces a continuous digit string such as 02553431234.

The QoS is configured incorrectly.

Explanation:
Poor voice quality (choppy audio, drop-outs) and video pixelization (blocky or frozen video) are caused by packet loss, excessive delay or jitter affecting the RTP media streams. These conditions almost always result from incorrect or missing Quality of Service configuration—voice and video packets are not classified/marked properly or are not given priority treatment, so they suffer during network congestion.

Correct Option:

C. The QoS is configured incorrectly.
When DSCP markings, trust boundaries, or queuing (LLQ/CBWFQ) are wrong or absent, media packets experience variable delay and loss, producing the described voice and video impairments.

Incorrect Option:

A. Cisco Unified Communications Manager is configured to use G.711 instead of G.729
G.711 uses more bandwidth but provides better quality; it does not cause pixelization.

B. 1 Gbps network ports are used instead of 100 Mbps network ports
Higher-speed ports reduce, rather than cause, congestion-related quality problems.

D. A firewall is blocking the RTP ports
Blocked RTP ports prevent media from flowing at all (one-way or no audio/video), not intermittent quality degradation and pixelization.

Reference:
Cisco Collaboration QoS Design Guide: incorrect QoS classification, marking or queuing is the primary cause of voice-quality issues and video pixelization.