Business Phone Systems Security & Compliance

Question 1

Which encryption protocol is specifically designed to secure the audio streams in VoIP calls?

Accepted Answer

SRTP

Answer

TLS

Answer

SSL

Answer

IPsec

Question 2

What is toll fraud in the context of business phone systems?

Accepted Answer

Unauthorized use of a phone system to make expensive long-distance calls at the business's expense

Answer

Charging customers hidden fees on invoices

Answer

Billing errors caused by misconfigured extensions

Answer

Reselling business phone numbers to third parties

Question 3

Which protocol is used to encrypt SIP signaling messages and protect VoIP call setup from interception?

Accepted Answer

TLS

Answer

SRTP

Answer

RTP

Answer

UDP

Question 4

Under HIPAA, what is required when patient health information (PHI) is communicated over a business phone system?

Accepted Answer

Appropriate safeguards must be in place to protect the confidentiality of PHI

Answer

All calls must be recorded for audit purposes

Answer

Calls must be routed through government-approved servers

Answer

Patients must receive a written transcript of all calls

Question 5

What is vishing?

Accepted Answer

Voice phishing attacks that use phone calls to trick victims into revealing sensitive information

Answer

A type of VoIP hardware malfunction affecting audio clarity

Answer

A video conferencing security breach method

Answer

A virtual SIP server hacking technique

Question 6

What is the primary security function of a Session Border Controller (SBC) in a VoIP environment?

Accepted Answer

To provide security, interoperability, and control at the border of a VoIP network

Answer

To route calls between multiple offices simultaneously

Answer

To record all inbound and outbound phone calls

Answer

To convert analog phone signals to digital format

Question 7

Which FCC regulation requires businesses to maintain internal Do Not Call lists and honor consumer opt-out requests?

Accepted Answer

TCPA

Answer

HIPAA

Answer

PCI DSS

Answer

GDPR