CAS-003 · Question #284
A system administrator has a responsibility to maintain the security of the video teleconferencing system. During a self-audit of the video teleconferencing room, the administrator notices that…
The correct answer is C. Bluetooth is an unsecure communication channel. C (Bluetooth is an unsecure communication channel) is the correct concern. The critical detail is that the devices are wireless-enabled, meaning they likely use Bluetooth. Bluetooth has well-documented vulnerabilities - including BlueSnarfing, BlueJacking, and Bluebugging…
Question
A system administrator has a responsibility to maintain the security of the video teleconferencing system. During a self-audit of the video teleconferencing room, the administrator notices that speakers and microphones are hard-wired and wireless enabled. Which of the following security concerns should the system administrator have about the existing technology in the room?
Options
- AWired transmissions could be intercepted by remote users.
- BBluetooth speakers could cause RF emanation concerns.
- CBluetooth is an unsecure communication channel.
- DWireless transmission causes interference with the video signal.
How the community answered
(20 responses)- B5% (1)
- C90% (18)
- D5% (1)
Explanation
C (Bluetooth is an unsecure communication channel) is the correct concern. The critical detail is that the devices are wireless-enabled, meaning they likely use Bluetooth. Bluetooth has well-documented vulnerabilities - including BlueSnarfing, BlueJacking, and Bluebugging - that could allow an unauthorized nearby party to pair with or intercept audio from a conference room microphone, potentially capturing sensitive business discussions. This is a serious confidentiality risk. Option A is incorrect because wired transmissions are much harder to intercept remotely. Option B is partially true (RF emanations are a concern) but Bluetooth speakers producing RF emanations is a less specific and less critical concern than the insecure channel itself. Option D is a technical distraction with no meaningful security implication.
Topics
Community Discussion
No community discussion yet for this question.