Business Phone Systems Security & Compliance 2

Question 1

What does PCI DSS require when processing credit card payments over the phone?

Accepted Answer

Cardholder data must be protected and agents must never store CVV codes after authorization

Answer

All payment calls must be free of charge to the customer

Answer

Phone payment calls must be completed in under 5 minutes

Answer

Customers must verify their card in person before phone payments are accepted

Question 2

How do malicious actors use SIP scanning against business phone systems?

Accepted Answer

To discover and exploit vulnerable VoIP devices or servers for toll fraud or eavesdropping

Answer

To improve call routing efficiency across providers

Answer

To monitor employee call volume and productivity

Answer

To optimize bandwidth allocation for voice traffic

Question 3

Under US state wiretapping laws, when must businesses inform callers that their call is being recorded?

Accepted Answer

When required by applicable state law, since some states require all-party consent

Answer

Only when recording calls for quality assurance training

Answer

Only for calls lasting more than 10 minutes

Answer

Only for outbound sales calls

Question 4

What is the STIR/SHAKEN framework designed to address in the telecom industry?

Accepted Answer

Caller ID spoofing and fraudulent robocalls

Answer

High international call routing costs

Answer

Poor call audio quality on VoIP networks

Answer

International number portability issues

Question 5

Which type of denial-of-service attack specifically targets VoIP infrastructure?

Accepted Answer

SIP INVITE flood attack

Answer

SQL injection attack

Answer

Cross-site scripting attack

Answer

Man-in-the-browser attack

Question 6

Which security measure helps ensure only authorized devices can register on a business VoIP phone system?

Accepted Answer

MAC address filtering or SIP digest authentication for device registration

Answer

Reducing the maximum number of simultaneous calls

Answer

Increasing available bandwidth for voice traffic

Answer

Disabling call forwarding on all extensions

Question 7

What does E-911 compliance require of business VoIP phone systems?

Accepted Answer

The system must transmit accurate physical location data with every emergency call

Answer

All calls must be routed through the local PSTN provider

Answer

Emergency calls must be answered within 3 rings

Answer

All employees must complete annual emergency response training