N10-005 · Question #588
Which of the following MUST be used when securing a VoIP network consisting of private IP addresses?
The correct answer is B. Application layer firewall. Securing a VoIP network with private IP addresses requires an application layer firewall because VoIP protocols like SIP operate at Layer 7 and need deep packet inspection to be properly controlled.
Question
Which of the following MUST be used when securing a VoIP network consisting of private IP addresses?
Options
- AIPS
- BApplication layer firewall
- CIDS
- DAn unmanaged switch
How the community answered
(31 responses)- A10% (3)
- B74% (23)
- C13% (4)
- D3% (1)
Why each option
Securing a VoIP network with private IP addresses requires an application layer firewall because VoIP protocols like SIP operate at Layer 7 and need deep packet inspection to be properly controlled.
An IPS can detect and block attack patterns but does not provide the application-layer protocol awareness needed to properly manage VoIP signaling and media streams.
An application layer firewall (Layer 7 firewall) can inspect and filter SIP and RTP traffic used by VoIP, understanding the protocol semantics needed to permit legitimate calls while blocking malicious traffic. Private IP addressing means NAT traversal and SIP header manipulation must also be handled, which only an application-aware firewall can manage. Standard packet filters cannot interpret VoIP signaling, making application layer inspection essential.
An IDS is a passive detection-only device and cannot actively filter or control VoIP traffic on the network.
An unmanaged switch provides no security features whatsoever and cannot inspect, filter, or control any network traffic.
Concept tested: Application layer firewall for VoIP security
Source: https://learn.microsoft.com/en-us/azure/firewall/protect-azure-virtual-desktop
Topics
Community Discussion
No community discussion yet for this question.