Practice Test GeeksACA - Audiocodes Certified Associate Practice Test
← All ACA Flashcard Decks

Security & Authentication in VoIP Flashcards

6 cards from real ACA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Security & Authentication in VoIP flashcards as text

  1. Which transport protocol does TLS (Transport Layer Security) replace in SIP to provide encrypted signaling?

    Answer: UDP and TCP (TLS runs over TCP providing encryption)

    TLS runs over TCP and provides encryption, authentication, and integrity for SIP signaling, replacing unencrypted TCP (and effectively UDP where TLS/TCP is used instead).

  2. In AudioCodes Mediant TLS configuration, what is the role of the 'TLS Context'?

    Answer: It groups TLS certificates, keys, and cipher suites applied to SIP interfaces or SBC legs

    A TLS Context bundles the certificate chain, private key, trusted CA certificates, and cipher suite preferences applied to one or more SIP interfaces for mutual TLS.

  3. What attack does 'SIP Digest Authentication' (using 401/407 challenges) protect against in VoIP environments?

    Answer: Unauthorized call origination by requiring valid credentials before processing INVITE or REGISTER requests

    SIP Digest Authentication uses a challenge-response mechanism (MD5/SHA hash of credentials) to verify that the calling entity is authorized before allowing call setup or registration.

  4. Which AudioCodes SBC security feature rate-limits SIP messages to protect against DoS and flooding attacks?

    Answer: SIP Message Policy (SIP Whitelist/Blacklist and rate limiting)

    AudioCodes SBC includes SIP message classification and rate-limiting policies that block or throttle excessive SIP messages from unknown or suspicious sources, mitigating DoS attacks.

  5. What is 'SPIT' (Spam over Internet Telephony) and which AudioCodes feature helps mitigate it?

    Answer: Unsolicited bulk VoIP calls; mitigated via SIP blacklists, CAPTCHA challenges, and call rate limiting

    SPIT refers to automated spam calls over VoIP; AudioCodes SBC counters it using SIP source blacklisting, registration rate limiting, and anomaly detection policies.

  6. In AudioCodes Mediant, which feature detects and blocks SIP INVITE flood attacks in real time?

    Answer: Intrusion Detection System (IDS) / SIP Robustness

    AudioCodes' built-in IDS monitors SIP INVITE rates per source and blocks sources exceeding configured thresholds, protecting the device from volumetric SIP flood attacks.