Free Cisco CLCEI 300-820 Actual Exam Questions - Question 12 Discussion

Yeah, I think A fits since Core can run on private certs, and E makes sense because Jabber’s flexible with cert types. D feels too strict about Edge always needing public certs. So A and E for me.

B imo, because phones generally don't need manual root cert uploads—they rely on built-in trust stores. And D makes sense since Expressway Edge usually requires a public CA cert to avoid trust issues from external clients. That combination fits common deployment practices better than some of the other options.

A and D—Edge typically needs a public CA cert for external trust.

Maybe A and E. Expressway Core often accepts private CA certs, and Jabber doesn’t strictly need public CA certs—it works with both. D feels too rigid since Edge can sometimes use private certs depending on setup.

C/B? Expressway usually creates the CSR itself, and phones rarely need manual root cert installs.

I’m thinking A and E could be right because Expressway Core often uses private CA certs, and Jabber tends to accept both public and private certs. Also, B feels off since phones usually trust certs from their own OS store, not necessarily needing you to upload root certs manually. C seems too generic—just generating a CSR isn’t unique to Mobile and Remote Access certificates. D might be true in some setups, but I don’t think it’s an absolute rule. So, does anyone know if Edge is strictly forced to use public CA certs here, or can it accept private ones in some cases?

D imo, because Expressway Edge usually requires a public CA cert for external trust. Plus, C makes sense since generating a CSR is a standard step before getting a cert signed.

Maybe B and E. Phones usually need the root CA to trust certs, so B fits. And Jabber working with both certs is true, so E makes sense too. A and D feel a bit too strict.

It’s A and E, since Core can use private certs and Jabber accepts both cert types.

Option A makes sense since Expressway Core can definitely use private CA certs, especially in controlled environments. D seems off because Expressway Edge doesn't always have to use public CA certs; sometimes it can work with private CAs if properly set up. That rules out D for me. Also, C isn’t necessarily true because you can import a certificate without generating a CSR on Expressway if you already have one. So I’d go with A and E, acknowledging that Jabber supports both types of certificates.

E, B. E makes sense because Jabber usually accepts both public and private CA certs. B fits since phones often need the root CA installed to trust the cert. A and D seem too restrictive or specific.

A and D