1|Page
3CX ACADEMY ADVANCED CERTIFICATION EXAM TEST
BANK 2025 COMPREHENSIVE QUESTIONS AND VERIFIED
ANSWERS GRADED A+
An IP has triggered an Anti-Hacking rule, and has been blacklisted.
This IP can manually be removed from the IP Blacklist, before the
set Blacklist Interval is reached. - ANSWER: True. A blacklisted IP
can be manually removed from the IP Blacklist before the set
Blacklist Interval is reached.
When using remote IP phones behind the 3CX SBC, it's sufficient to
only port forward/NAT the Tunnel port (Default 5090 TCP/UDP)
and the HTTPS port (Default 5001 TCP) on the 3CX network
Firewall. - ANSWER: True. For remote IP phones behind the 3CX
SBC, forwarding the Tunnel port (5090 TCP/UDP) and HTTPS port
(5001 TCP) is sufficient.
The log files of 3CX are never cleaned even when you restart the 3CX
Services - ANSWER False
Once Secure SIP has been configured in 3CX, Secure SIP certificates
will need to be deployed manually in phones and softphones OS so
that they can communicate. - ANSWER False
The 3CX SBC does not require any port forwarding on the firewall at
the remote location, in order to operate correctly. - ANSWER: True.
The 3CX SBC does not require port forwarding on the remote
location's firewall.
The Virtual Extension of the slave must match the master side
virtual extension number - ANSWER True
,2|Page
Malicious activity from a Whitelisted IP address will still be checked
by the Anti-hacking module. - ANSWER: True. Whitelisted IPs are
still checked by the Anti-hacking module.
3CX Technical Support will assist with questions relating to audio
quality, assuming a Support bundle in Verbose mode is provided to
track the issue, without a Wireshark capture. - ANSWER: False. 3CX
Technical Support typically requires both a Support bundle in
Verbose mode and a Wireshark capture for audio quality issues.
3CX Mobile Apps using the Tunnel to connect to 3CX, only require
the tunnel port to be NATed for TCP traffic and the HTTPS port
(Default TCP:5001) to be port forwarded / NATed. They don't use
UDP. - ANSWER: True. 3CX Mobile Apps using the Tunnel only
require TCP traffic for the tunnel port and HTTPS port.
3CX Log Files are not deleted when you restart the 3CX Services. -
ANSWER: True. 3CX Log Files are not deleted when you restart the
3CX Services.
When the option "Remote PBX uses Tunnel Connection" is enabled
on the Master Bridge, the Slave Bridge must be registered behind an
SBC. - ANSWER: False. When "Remote PBX uses Tunnel Connection"
is enabled on the Master Bridge, the Slave Bridge does not need to
be behind an SBC.
For extensions that are registered over multiple site-to-site VPNs, by
default 3CX delivers the audio between phones if they are on
different subnets. - ANSWER False
On outbound calls to external numbers, 3CX will process "Outbound
Rules" in a "Best Matching" way, depending on how many of the
criteria match. - ANSWER False
, 3|Page
Wireshark can - without any additional Plugins Decode all Codecs
including G711A, G711U, GSM, G729, G726 - ANSWER False
STUN extensions can be configured to connect to the tunnel port of
3CX instead of the SIP port for more security. - ANSWER False
Remote extensions may be provisioned using the HTTP or HTTPS
URLs - ANSWER False
The default Voicemail PIN of an extension consist of 4 random
alphanumerical characters. - ANSWER False
Your 3CX has only one SIP Trunk and receives a call from number
8135791691. If you have a "Inbound CID Reformatting" rule on the
Trunk with "Source Pattern" 813(...)(.*) and "Replace Pattern" \1\2,
the extension that receives the call will see "5791691" as the caller
ID on its display. - ANSWER True
When 3CX has been installed without a FQDN from 3CX and in split
DNS mode, the DNS server must not be installed on the same
machine as the phone system. - ANSWER True
Your Local IP Phone loses the registration to 3CX and you want do
troubleshoot the issue. You should start a Wireshark Capture on the
3CX Server, reboot the phone, and then apply the Filter
sip.Cseq.Method==REGISTER in order to see if registrations are
reaching 3CX - ANSWER True
Your 3CX has only one SIP Trunk and receives a call from number
422033272020 and you want it to be presented on the extension
display as +44272020. You can do this with a "Inbound CID
Reformatting" rule on the Trunk with "Source Pattern" 44(..)(..)(.*)
and "Replace Pattern" +44\3. - ANSWER True
3CX ACADEMY ADVANCED CERTIFICATION EXAM TEST
BANK 2025 COMPREHENSIVE QUESTIONS AND VERIFIED
ANSWERS GRADED A+
An IP has triggered an Anti-Hacking rule, and has been blacklisted.
This IP can manually be removed from the IP Blacklist, before the
set Blacklist Interval is reached. - ANSWER: True. A blacklisted IP
can be manually removed from the IP Blacklist before the set
Blacklist Interval is reached.
When using remote IP phones behind the 3CX SBC, it's sufficient to
only port forward/NAT the Tunnel port (Default 5090 TCP/UDP)
and the HTTPS port (Default 5001 TCP) on the 3CX network
Firewall. - ANSWER: True. For remote IP phones behind the 3CX
SBC, forwarding the Tunnel port (5090 TCP/UDP) and HTTPS port
(5001 TCP) is sufficient.
The log files of 3CX are never cleaned even when you restart the 3CX
Services - ANSWER False
Once Secure SIP has been configured in 3CX, Secure SIP certificates
will need to be deployed manually in phones and softphones OS so
that they can communicate. - ANSWER False
The 3CX SBC does not require any port forwarding on the firewall at
the remote location, in order to operate correctly. - ANSWER: True.
The 3CX SBC does not require port forwarding on the remote
location's firewall.
The Virtual Extension of the slave must match the master side
virtual extension number - ANSWER True
,2|Page
Malicious activity from a Whitelisted IP address will still be checked
by the Anti-hacking module. - ANSWER: True. Whitelisted IPs are
still checked by the Anti-hacking module.
3CX Technical Support will assist with questions relating to audio
quality, assuming a Support bundle in Verbose mode is provided to
track the issue, without a Wireshark capture. - ANSWER: False. 3CX
Technical Support typically requires both a Support bundle in
Verbose mode and a Wireshark capture for audio quality issues.
3CX Mobile Apps using the Tunnel to connect to 3CX, only require
the tunnel port to be NATed for TCP traffic and the HTTPS port
(Default TCP:5001) to be port forwarded / NATed. They don't use
UDP. - ANSWER: True. 3CX Mobile Apps using the Tunnel only
require TCP traffic for the tunnel port and HTTPS port.
3CX Log Files are not deleted when you restart the 3CX Services. -
ANSWER: True. 3CX Log Files are not deleted when you restart the
3CX Services.
When the option "Remote PBX uses Tunnel Connection" is enabled
on the Master Bridge, the Slave Bridge must be registered behind an
SBC. - ANSWER: False. When "Remote PBX uses Tunnel Connection"
is enabled on the Master Bridge, the Slave Bridge does not need to
be behind an SBC.
For extensions that are registered over multiple site-to-site VPNs, by
default 3CX delivers the audio between phones if they are on
different subnets. - ANSWER False
On outbound calls to external numbers, 3CX will process "Outbound
Rules" in a "Best Matching" way, depending on how many of the
criteria match. - ANSWER False
, 3|Page
Wireshark can - without any additional Plugins Decode all Codecs
including G711A, G711U, GSM, G729, G726 - ANSWER False
STUN extensions can be configured to connect to the tunnel port of
3CX instead of the SIP port for more security. - ANSWER False
Remote extensions may be provisioned using the HTTP or HTTPS
URLs - ANSWER False
The default Voicemail PIN of an extension consist of 4 random
alphanumerical characters. - ANSWER False
Your 3CX has only one SIP Trunk and receives a call from number
8135791691. If you have a "Inbound CID Reformatting" rule on the
Trunk with "Source Pattern" 813(...)(.*) and "Replace Pattern" \1\2,
the extension that receives the call will see "5791691" as the caller
ID on its display. - ANSWER True
When 3CX has been installed without a FQDN from 3CX and in split
DNS mode, the DNS server must not be installed on the same
machine as the phone system. - ANSWER True
Your Local IP Phone loses the registration to 3CX and you want do
troubleshoot the issue. You should start a Wireshark Capture on the
3CX Server, reboot the phone, and then apply the Filter
sip.Cseq.Method==REGISTER in order to see if registrations are
reaching 3CX - ANSWER True
Your 3CX has only one SIP Trunk and receives a call from number
422033272020 and you want it to be presented on the extension
display as +44272020. You can do this with a "Inbound CID
Reformatting" rule on the Trunk with "Source Pattern" 44(..)(..)(.*)
and "Replace Pattern" +44\3. - ANSWER True
