CAS-002 · Question #106
A company has recently implemented a video conference solution that uses the H.323 protocol. The security engineer is asked to make recommendations on how to secure video conferences to protect…
The correct answer is A. Implement H.235 extensions with DES to secure the audio and video transport. H.235 is the ITU-T security extension specifically designed for H.323, providing authentication and media stream encryption to protect video conference confidentiality.
Question
A company has recently implemented a video conference solution that uses the H.323 protocol. The security engineer is asked to make recommendations on how to secure video conferences to protect confidentiality. Which of the following should the security engineer recommend?
Options
- AImplement H.235 extensions with DES to secure the audio and video transport.
- BRecommend moving to SIP and RTP as those protocols are inherently secure.
- CRecommend implementing G.711 for the audio channel and H.264 for the video.
- DEncapsulate the audio channel in the G.711 codec rather than the unsecured Speex.
How the community answered
(40 responses)- A85% (34)
- B8% (3)
- C3% (1)
- D5% (2)
Why each option
H.235 is the ITU-T security extension specifically designed for H.323, providing authentication and media stream encryption to protect video conference confidentiality.
H.235 defines the security framework for H.323-based multimedia communications, including authentication mechanisms and encryption of audio and video transport streams using symmetric ciphers such as DES or AES. Implementing H.235 directly extends the existing H.323 deployment with confidentiality controls without requiring migration to a different signaling protocol.
SIP and RTP are not inherently secure - both transmit signaling and media in plaintext by default and require TLS and SRTP respectively to achieve confidentiality equivalent to H.323 with H.235.
G.711 and H.264 are audio and video compression codecs respectively; they define how media is encoded and compressed, not how it is encrypted or protected.
G.711 and Speex are both audio codecs used for compression; neither provides encryption or any confidentiality mechanism, so switching between them has no security benefit.
Concept tested: H.235 security extension for H.323 video conferencing confidentiality
Source: https://www.itu.int/rec/T-REC-H.235/en
Topics
Community Discussion
No community discussion yet for this question.