An attacker attempts to create a DoS event against the VoIP system of a company. The attacker uses a tool to flood the network with a large number of SIP INVITE traffic. Which of the following would…

IDS/IPS systems can detect anomalous SIP INVITE traffic patterns and actively block or alert on flood-based DoS attacks.

Requiring encrypted SIP raises the bar for attackers by making it significantly harder to craft and inject valid SIP INVITE messages at scale.

Separate VLANs for voice and data limit the blast radius of a flood attack by isolating voice infrastructure from general network traffic.

QoS parameters on switches manage bandwidth allocation and traffic prioritization between traffic classes, but they do not block or drop packets based on content or attack signatures. A flood of SIP INVITE packets would still consume resources and overwhelm the VoIP system because QoS simply assigns priority - it has no mechanism to detect or suppress the attack traffic itself.