nerdexam
CompTIA

CAS-002 · Question #730

In which of the following attacks does an attacker intercept call-signaling SIP message traffic and masquerade as the calling party to the called party and vice-versa?

The correct answer is B. Man-in-the-middle. VoIP is more vulnerable to man-in-the-middle attacks. In the man-in-the-middle attack, the attacker intercepts call-signaling SIP message traffic and masquerades as the calling party to the called party, and vice-versa. The attacker can hijack calls via a redirection server…

Technical Integration of Enterprise Components

Question

In which of the following attacks does an attacker intercept call-signaling SIP message traffic and masquerade as the calling party to the called party and vice-versa?

Options

  • ACall tampering
  • BMan-in-the-middle
  • CEavesdropping
  • DDenial of Service

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    89% (16)
  • D
    6% (1)

Explanation

VoIP is more vulnerable to man-in-the-middle attacks. In the man-in-the-middle attack, the attacker intercepts call-signaling SIP message traffic and masquerades as the calling party to the called party, and vice-versa. The attacker can hijack calls via a redirection server after gaining Answer option A is incorrect. Call tampering involves tampering a phone call in progress. Answer option D is incorrect. DoS attacks occur by flooding a target with unnecessary SIP call- signaling messages. It degrades the service and causes calls to drop prematurely and halts call Answer option C is incorrect. In eavesdropping, hackers steal credentials and other information.

Topics

#VoIP security#SIP#man-in-the-middle#call signaling

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice