Which two statements describe security services that are provided by the Phone Proxy function on a
Cisco ASA appliance? (Choose two.)

A.
It is supported only on phones that use SCCP.

B.
It is supported on an adaptive security appliance that runs in transparent mode.

C.
It provides interworking to ensure that the external IP phone traffic is encrypted, as long as the
Cisco Unified Communications Manager cluster runs in secure mode.

D.
It provides a proxy of phone signaling, with optional use of NAT, to hide the Cisco Unified
Communications Manager IP address from the public Internet.

E.
It proxies phone media so that internal phones are not directly exposed to the Internet.

F.
It supports IP phones that send phone proxy traffic through a VPN tunnel.

Explanation:
TLS Proxy is typically deployed in front of Cisco Unified Communications Manager and other unified
communications application servers that utilize media encryption. TLS Proxy is not designed to
provide remote-access encryption services for remote phones or client endpoints. Other solutions
such as Cisco ASA Phone Proxy or IP Security/Secure Sockets Layer (IPsec/SSL) VPN services are more
appropriate. TLS Proxy is not designed to provide a secure campus soft phone solution where the
requirement is to provide secure data to phone VLAN traversal or for proxying connections to Cisco
Unified Communications Manager.