Business Phone Systems Security & Compliance 3

Question 1

What is the recommended best practice for securing administrator access to a business VoIP phone system?

Accepted Answer

Enabling multi-factor authentication combined with a strong password policy

Answer

Using the manufacturer's default password for simplicity

Answer

Sharing admin credentials among all IT staff members

Answer

Disabling all remote administrative access permanently

Question 2

Under GDPR, what must a business do before recording a call with a European customer?

Accepted Answer

Inform the customer about the recording and obtain their consent where required

Answer

Encrypt the recording with AES-256 military-grade encryption

Answer

Delete the recording automatically after 24 hours

Answer

Store the recording only on EU government-approved servers

Question 3

How are Call Detail Records (CDRs) used for security monitoring on business phone systems?

Accepted Answer

They log call metadata to help detect anomalous patterns that may indicate fraud or unauthorized access

Answer

They improve call audio clarity and reduce latency

Answer

They provide accurate per-minute billing for customer invoices

Answer

They automatically route calls to the most available agent

Question 4

Which combination of protocols provides the most complete protection against eavesdropping on VoIP calls?

Accepted Answer

TLS for SIP signaling combined with SRTP for media encryption

Answer

Unencrypted SIP with firewall rules only

Answer

Routing all calls through a VPN without additional encryption

Answer

Disabling firewall deep packet inspection for voice traffic

Question 5

Which social engineering attack commonly targets business phone systems to gain unauthorized access?

Accepted Answer

Pretexting, where attackers impersonate IT support staff to manipulate employees into revealing credentials

Answer

DDoS amplification using DNS servers

Answer

SQL injection attacks delivered through IVR menus

Answer

Bluetooth pairing attacks on desk phones

Question 6

How does IP reputation filtering improve the security of a business VoIP system?

Accepted Answer

It blocks incoming traffic from IP addresses known to be associated with malicious activity

Answer

It improves call audio quality by prioritizing voice packets

Answer

It filters background noise and echo from phone calls

Answer

It manages bandwidth allocation to prevent call congestion

Question 7

What is the recommended practice for managing firmware updates on business VoIP phones and systems?

Accepted Answer

Apply security patches and firmware updates on a regular schedule to address known vulnerabilities

Answer

Only apply firmware updates when actively experiencing system problems

Answer

Avoid all firmware updates to minimize the risk of service disruption

Answer

Allow individual employees to update their own phone firmware as needed