nerdexam
CompTIA

CAS-001 · Question #370

In which of the following attacks does an attacker intercept call-signaling SIP message traffic and masquerade as the calling party to the called party and vice-versa?

The correct answer is B. Man-in-the-middle. VoIP is more vulnerable to man-in-the-middle attacks. In the man-in-the-middle attack, the attacker intercepts call-signaling SIP message traffic and masquerades as the calling party to the called party, and vice-versa. The attacker can hijack calls via a redirection server…

Enterprise Security

Question

In which of the following attacks does an attacker intercept call-signaling SIP message traffic and masquerade as the calling party to the called party and vice-versa?

Options

  • ACall tampering
  • BMan-in-the-middle
  • CEavesdropping
  • DDenial of Service

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    88% (30)
  • C
    6% (2)
  • D
    3% (1)

Explanation

VoIP is more vulnerable to man-in-the-middle attacks. In the man-in-the-middle attack, the attacker intercepts call-signaling SIP message traffic and masquerades as the calling party to the called party, and vice-versa. The attacker can hijack calls via a redirection server after gaining Answer option A is incorrect. Call tampering involves tampering a phone call in progress. Answer option D is incorrect. DoS attacks occur by flooding a target with unnecessary SIP call- signaling messages. It degrades the service and causes calls to drop prematurely and halts call Answer option C is incorrect. In eavesdropping, hackers steal credentials and other information.

Topics

#man-in-the-middle#SIP#VoIP security#call signaling attack

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice