CTE Cybersecurity & Risk 2

Question 1

A telecommunications carrier discovers that a BGP route hijacking attack has redirected customer traffic through a malicious autonomous system. What is the MOST effective technical countermeasure?

Accepted Answer

Implement RPKI (Resource Public Key Infrastructure) to validate BGP route origins

Answer

RPKI cryptographically validates BGP route origin announcements, preventing illegitimate ASes from hijacking IP prefixes.

Question 2

Under the NIST Cybersecurity Framework, which function encompasses activities to identify the occurrence of a cybersecurity event in a telecom network?

Accepted Answer

Detect

Answer

The 'Detect' function includes continuous monitoring, anomaly detection, and security event identification processes.

Question 3

A CTE executive must assess the risk of a DDoS attack against the company's SS7 signaling infrastructure. Which risk formula is most commonly applied?

Accepted Answer

Risk = Likelihood × Impact

Answer

The standard risk formula multiplies the likelihood of a threat occurring by the potential impact it would cause.

Question 4

Which SS7 attack allows an adversary to intercept SMS-based two-factor authentication codes sent to telecom subscribers?

Accepted Answer

SS7 MAP SRI-SM interception

Answer

SS7 MAP Send Routing Info for Short Message (SRI-SM) queries allow attackers to redirect SMS messages to a controlled endpoint.

Question 5

A telecom company implements network segmentation to isolate its OSS/BSS systems from the core network. This is an example of which security principle?

Accepted Answer

Defense in depth

Answer

Defense in depth uses multiple layered security controls so that failure of one layer does not compromise the entire system.

(CTE) Certified Telecommunications Executive Practice Test

(CTE) Certified Telecommunications Executive Practice Test

CTE Cybersecurity & Risk 2