SSCA Security, QoS & Regulatory Compliance 3

Question 1

Which protocol is used to establish encrypted key exchange for SRTP without embedding keys in SDP?

Accepted Answer

ZRTP

Answer

ZRTP (RFC 6189) performs a Diffie-Hellman key agreement in-band within the RTP stream itself, avoiding the need to pass keys through SDP.

Question 2

A VoIP administrator wants to protect SIP signaling in transit between two enterprises. Which combination is most appropriate?

Accepted Answer

SIP over TLS (SIPS) with mutual certificate authentication

Answer

SIP over TLS (SIPS URI scheme) encrypts signaling in transit, and mutual certificate authentication ensures both endpoints are verified.

Question 3

What is the maximum one-way latency recommended by the ITU-T G.114 standard for acceptable voice quality?

Accepted Answer

150 ms

Answer

ITU-T G.114 recommends a maximum one-way delay of 150 ms for high-quality voice; beyond 400 ms becomes unacceptable for interactive conversation.

Question 4

Which regulatory framework governs the privacy and security of protected health information in US healthcare VoIP deployments?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) requires safeguards for protected health information (PHI) including voice communications in healthcare settings.

Question 5

Which SIP security threat involves an attacker intercepting a 200 OK response and replacing the Contact header to redirect future calls to themselves?

Accepted Answer

SIP response hijacking (Contact spoofing)

Answer

Response hijacking occurs when an attacker intercepts a SIP response and modifies the Contact header to redirect subsequent in-dialog requests to an attacker-controlled endpoint.

(SSCA) Sip School Certified Associate Practice Test

(SSCA) Sip School Certified Associate Practice Test

SSCA Security, QoS & Regulatory Compliance 3