Which two settings should be configured on the SIP Trunk Security Profile for the IM & Presence
Service SIP Trunk? (Choose two.)

A.
Check to enable Accept Presence Subscription.

B.
Verify that the setting for Incoming Transport Type is TCP+UDP.

C.
Configure Device Security Mode to Encrypted.

D.
Check to enable Enable Application Level Authorization.

E.
Configure the Outgoing Transport Type to TLS.

Explanation:
Configure SIP Trunk Security Profile for IM and Presence Service
Procedure
Step 1
Choose Cisco Unified CM Administration > System > Security > SIP Trunk Security Profile.
Step 2
Click Find.
Step 3
Click Non Secure SIP Trunk Profile.
Step 4
Click Copy and enter CUP Trunk in the Name field.
Step 5
Verify that the setting for Device Security Mode is Non Secure.
Step 6
Verify that the setting for Incoming Transport Type is TCP+UDP.
Step 7
Verify that the setting for Outgoing Transport Type is TCP.
Step 8
Check to enable these items:
Step 9
Click Save.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/9_0/

CUP0_BK_CFF5B189_00_config-admin-guide-imp-90/CUP0_BK_CFF5B189_00_config-adminguide-imp-90_chapter_0101.html