Security & Compliance Flashcards
7 cards from real Business Phone Systems practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Compliance flashcards as text
Which encryption protocol is specifically designed to secure the audio streams in VoIP calls?
Answer: SRTP
SRTP (Secure Real-time Transport Protocol) encrypts the actual audio payload of VoIP calls to prevent eavesdropping.
What is toll fraud in the context of business phone systems?
Answer: Unauthorized use of a phone system to make expensive long-distance calls at the business's expense
Toll fraud occurs when attackers gain unauthorized access to a business phone system and use it to place expensive calls, leaving the victim with the charges.
Which protocol is used to encrypt SIP signaling messages and protect VoIP call setup from interception?
Answer: TLS
TLS (Transport Layer Security) encrypts SIP signaling to protect call setup data such as usernames, phone numbers, and routing information.
Under HIPAA, what is required when patient health information (PHI) is communicated over a business phone system?
Answer: Appropriate safeguards must be in place to protect the confidentiality of PHI
HIPAA requires covered entities to implement appropriate administrative, physical, and technical safeguards to protect PHI in all forms, including verbal phone communications.
What is vishing?
Answer: Voice phishing attacks that use phone calls to trick victims into revealing sensitive information
Vishing (voice phishing) uses fraudulent phone calls to deceive victims into providing sensitive information such as passwords, account numbers, or Social Security numbers.
What is the primary security function of a Session Border Controller (SBC) in a VoIP environment?
Answer: To provide security, interoperability, and control at the border of a VoIP network
An SBC acts as a security and policy enforcement point at the network border, protecting against DoS attacks, unauthorized access, and interoperability issues between different VoIP systems.
Which FCC regulation requires businesses to maintain internal Do Not Call lists and honor consumer opt-out requests?
Answer: TCPA
The Telephone Consumer Protection Act (TCPA) requires businesses to maintain Do Not Call lists, honor opt-out requests, and restricts the use of auto-dialers and prerecorded messages.