Security, QoS & Regulatory Compliance Flashcards

What is the purpose of Quality of Service (QoS) in VoIP networks?

Answer: To prioritize VoIP packets for better call quality

The primary purpose of Quality of Service (QoS) in VoIP networks is to ensure that real-time voice traffic receives preferential treatment over other types of network traffic. By prioritizing VoIP packets, QoS mechanisms minimize latency, jitter, and packet loss, which are critical for maintaining clear and reliable voice communication. This directly contributes to better call quality and user experience.

Which security protocol is commonly used to encrypt SIP signaling?

Answer: TLS

Transport Layer Security (TLS) is commonly used to encrypt SIP signaling, providing confidentiality and integrity for the communication between SIP endpoints and servers. When SIP operates over TLS (SIPS), the entire SIP message exchange is encrypted, protecting sensitive information like call details and authentication credentials from eavesdropping and tampering. This secures the signaling path.

Why is SRTP used in VoIP communication?

Answer: To enhance RTP with security features

Secure Real-time Transport Protocol (SRTP) is an extension of RTP designed to provide confidentiality, message authentication, and replay protection for real-time media streams like voice and video. While RTP carries the actual media, SRTP adds crucial security features, encrypting the audio data to prevent eavesdropping and ensuring that the media packets haven't been tampered with or replayed maliciously.

What is a common QoS mechanism used to prioritize VoIP traffic?

Answer: DSCP

Differentiated Services Code Point (DSCP) is a common QoS mechanism used to classify and prioritize network traffic. By marking VoIP packets with a specific DSCP value, network devices (routers, switches) can identify them as high-priority traffic and give them preferential treatment. This ensures low latency and minimal packet loss for voice communication, crucial for call quality.

Which regulation ensures privacy and security for healthcare-related VoIP communication?

Answer: HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. law that sets standards for the protection of sensitive patient health information. For healthcare-related VoIP communication, HIPAA ensures that voice data, especially when it contains Protected Health Information (PHI), is handled securely and privately, requiring encryption, access controls, and audit trails to prevent breaches.

Which protocol is vulnerable to spoofing without proper security?

Answer: SIP

Session Initiation Protocol (SIP) is inherently vulnerable to spoofing without proper security measures. Attackers can forge SIP messages, impersonating legitimate users or servers to initiate unauthorized calls, redirect traffic, or disrupt services. This vulnerability necessitates the use of security protocols like TLS and strong authentication mechanisms to protect SIP communications from impersonation.

What is a primary goal of regulatory compliance in VoIP networks?

Answer: To ensure systems meet legal standards

The primary goal of regulatory compliance in VoIP networks is to ensure that the communication systems and their operations adhere to relevant legal, industry, and governmental standards. This includes regulations concerning data privacy, security, emergency services (E911), lawful interception, and record-keeping. Compliance protects both the organization and its users by ensuring ethical and legal operation.

What does jitter in a VoIP network refer to?

Answer: Variation in packet delay

Jitter in a VoIP network refers to the variation in the delay of received packets. While some delay is normal, inconsistent delays cause packets to arrive out of order or too late, leading to choppy, distorted, or missing audio. Jitter buffers are used to mitigate this by temporarily storing packets and playing them back at a steady rate, smoothing out the audio experience.

Which of the following enhances VoIP security?

Answer: Use firewalls and encryption

Enhancing VoIP security involves implementing multiple layers of protection. Firewalls control network access and block unauthorized traffic, acting as a barrier against external threats. Encryption (e.g., TLS for signaling, SRTP for media) protects the confidentiality and integrity of voice communications from eavesdropping and tampering, safeguarding sensitive conversations from interception.