3.5: Voice Over IP

Question 1

Trunking

Answer 1

Trunks can connect an organization’s private branch exchange (PBX) to telecommunications providers that offer VoIP trunking.

Question 2

What are trunks

Answer 2

telecommunications circuits designed to carry several simultaneous telephone conversations.

Question 3

VoIP Threats and Vulnerabilities

Answer 3

VOIP systems are connected to the TCP/IP network thus is vulnerable to all types of attacks that plague workstations and servers.

Question 4

Type of Threats and Vulnerabilities

Answer 4

• Eavesdropping -
• Spoofing
• Malware
• Denial of service
• Toll fraud - Attack designed to steal long-distance service by using another organization’s telephone network for one’s personal use.

Question 5

How to protect VOIP

Answer 5

Because VoIP systems communicate over TCP/IP, and because many are based on conventional operating systems, VoIP is protected through primarily the same measures that are used to protect other IT systems.

Question 6

Private Bank Exchange (PBX)

Answer 6

It’s a private telephone switch used by an organization to manage its internal telephone calls, as well as telephone calls with parties in the public telephone network.

Question 7

PBX Threats and vulnerabilities

Answer 7

• Default Passwords on an administrator console
• Dial -in modem - dial-in using default password or no authentication at all.
• Toll fraud
• Espionage

Question 8

PBX countermeasures

Answer 8

• Admin access control
• Physical access control
• Regular log reviews
• Calling restriction