nerdexam
CompTIA

CAS-001 · Question #96

A company has recently implemented a video conference solution that uses the H.323 protocol. The security engineer is asked to make recommendations on how to secure video conferences to protect…

The correct answer is A. Implement H.235 extensions with DES to secure the audio and video transport. H.235 is the ITU-T security standard specifically designed as an extension to H.323 to provide authentication, integrity, and encryption for H.323 multimedia communications, including audio and video transport. It is the correct and purpose-built mechanism for securing H.323…

Technical Integration of Enterprise Components

Question

A company has recently implemented a video conference solution that uses the H.323 protocol. The security engineer is asked to make recommendations on how to secure video conferences to protect confidentiality. Which of the following should the security engineer recommend?

Options

  • AImplement H.235 extensions with DES to secure the audio and video transport.
  • BRecommend moving to SIP and RTP as those protocols are inherently secure.
  • CRecommend implementing G.711 for the audio channel and H.264 for the video.
  • DEncapsulate the audio channel in the G.711 codec rather than the unsecured Speex.

How the community answered

(26 responses)
  • A
    73% (19)
  • B
    15% (4)
  • C
    8% (2)
  • D
    4% (1)

Explanation

H.235 is the ITU-T security standard specifically designed as an extension to H.323 to provide authentication, integrity, and encryption for H.323 multimedia communications, including audio and video transport. It is the correct and purpose-built mechanism for securing H.323 sessions. Option B is incorrect because SIP and RTP are not inherently secure-RTP transmits media in cleartext by default and requires SRTP for encryption. Option C is wrong because G.711 and H.264 are audio and video codecs respectively; they handle encoding, not security. Option D is incorrect because switching between audio codecs (G.711 vs. Speex) provides no confidentiality protection. H.235 is the industry-standard answer for H.323 security.

Topics

#H.323#H.235#video conferencing security#protocol encryption

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice