Voice, Video, and Collaboration

Question 1

Voice over Internet Protocol (VoIP)

Answer 1

set of technologies that enables voice to be sent over a packet network

Question 2

Session Initiation Protocol

Answer 2

Signaling protocol used for initiating, maintaining, and terminating communication sessions that include voice and messaging applications.

Question 3

VOIP Attacks vectors

Answer 3

Spoof Caller ID which facilitates vishing (VoIP phishing) or Spam over Internet Telephony(SPIT)
Call management systems and VOIP phones can be vulnerable to host operating systems and DoS attacks
MIMT may succeed by spoofing call managers or endpoint connection transmission
Unencrypted network traffic may include VoIP which makes decoding VoIP streams possible.

Question 4

Zoombombing

Answer 4

unwanted intrusion by an outsider into a video conference call.

Question 5

Security measures to zoombombing

Answer 5

Access Controls such as virtual waiting rooms, password protected virtual meetings, and screensharing restrictions.

Question 6

Instant Messaging (IM) vulnerabilities

Answer 6

Does not enforce strong authentication; can be spoofed
No encryption;packet sniffing
File Transfer and remote access; risk of malicious code deposit
Social Engineering Attacks

Question 7

Email Security Goals

Answer 7

Secure placement of email servers and gateways on network
Ensure nonrepudiation
Achieve privacy and confidentiality
Classify sensitive content

Question 8

Email Security Solutions

Answer 8

Digital Signatures
Anti Malware Scanning
Block suspicious attachments
Filters
Encryption
Training