Security & Authentication in VoIP Flashcards
6 cards from real ACA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security & Authentication in VoIP flashcards as text
What is 'SIP Topology Hiding' on an AudioCodes SBC designed to protect?
Answer: Internal network topology and private IP addresses by replacing them in SIP headers before forwarding to external networks
Topology Hiding replaces internal hostnames, private IP addresses, and sensitive header values in SIP messages, preventing external parties from learning internal network details.
Which SIP header is most commonly manipulated by AudioCodes for topology hiding on outbound calls?
Answer: All of the above
Topology hiding typically modifies the Via, Contact, Record-Route, and From headers to replace internal IPs with the SBC's public-facing address.
What does 'SRTP with SDES key exchange' mean in an AudioCodes SBC context?
Answer: SRTP encryption keys are exchanged in-band within the SDP offer/answer, relying on SIP TLS for key security
SDES (Session Description Protocol Security Descriptions) embeds SRTP key material directly in SDP, making TLS mandatory for the SIP signaling to protect those keys.
In AudioCodes access control, what is the function of an 'IP Address Allow/Deny List'?
Answer: To permit or block SIP and management traffic from specific IP addresses or subnets
IP Allow/Deny Lists filter incoming connections at the IP layer, permitting traffic only from known trusted addresses and blocking all others, providing a first line of defense.
Which certificate type does AudioCodes recommend for production TLS SIP trunks to ensure interoperability and trust?
Answer: CA-signed certificates from a trusted public Certificate Authority
CA-signed certificates from recognized public CAs ensure that remote SIP peers can verify the device's identity without needing to manually install the certificate, improving interoperability.
What is the purpose of 'Media Anchoring' (media pinning) on an AudioCodes SBC from a security perspective?
Answer: It forces all RTP media to flow through the SBC rather than being routed directly between endpoints, enabling monitoring and policy enforcement
Media anchoring ensures RTP streams pass through the SBC, allowing it to apply security policies, QoS marking, recording, and topology hiding on media traffic.