Which two settings should be configured on the SIP Trunk Security Profile for the IM & Presence
Service SIP Trunk? (Choose two.)

A.
Check to enable Accept Presence Subscription.

B.
Verify that the setting for Incoming Transport Type is TCP+UDP.

C.
Configure Device Security Mode to Encrypted.

D.
Check to enable Enable Application Level Authorization.

E.
Configure the Outgoing Transport Type to TLS.

Explanation:
Configure SIP Trunk Security Profile for IM and Presence Service
Procedure
Step 1 Choose Cisco Unified CM Administration > System > Security > SIP Trunk Security
Profile.
Step 2 Click Find.
Step 3 Click Non Secure SIP Trunk Profile.
Step 4 Click Copy and enter CUP Trunk in the Name field.
Step 5 Verify that the setting for Device Security Mode is Non Secure.
Step 6 Verify that the setting for Incoming Transport Type is TCP+UDP.
Step 7 Verify that the setting for Outgoing Transport Type is TCP.
Step 8 Check to enable these items:
Accept Presence Subscription
Accept Out-of-Dialog REFER
Accept Unsolicited Notification
Accept Replaces Header
Step 9 Click Save.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/9_0
/CUP0_BK_CFF5B189_00_config-admin-guide-imp-90/CUP0_BK_CFF5B189_00_config-admin-guideimp-90_chapter_0101.html