MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. SIP stands for which protocol in VoIP communication?
   a. Session Integration Protocol
   b. Secure Interconnection Protocol
   c. Session Initiation Protocol
   d. Service Invocation Protocol
   Answer: cwikipedia​
2. The primary function of SIP in VoIP systems is to
   a. Encrypt call data
   b. Manage, establish, and terminate multimedia sessions
   c. Analyze network packets
   d. Monitor QoS metrics
   Answer: bpmc.ncbi.nlm.nih​
3. SIP operates at which layer of the OSI model?
   a. Network Layer
   b. Session Layer
   c. Physical Layer
   d. Presentation Layer
   Answer: bwikipedia​
4. SIP typically uses which transport protocols?
   a. TCP and UDP
   b. FTP and SMTP
   c. ICMP and BGP
   d. SNMP and ARP
   Answer: awikipedia​
5. The default port number for SIP over UDP/TCP is
   a. 80
   b. 443
   c. 5060
   d. 25
   Answer: cwikipedia​
6. Secure SIP (SIPS) uses which protocol for encryption?
   a. IPsec
   b. SSH
   c. TLS
   d. SSLv2
   Answer: cwikipedia​
7. The URI scheme for secure SIP communication is
   a. sips:user@example.com
   b. sip-secure:user@example.com
   c. sipssl:user@example.com
   d. ssip:user@example.com
   Answer: awikipedia​
8. SIP signaling messages are protected using
   a. TLS
   b. SRTP
   c. DES
   d. AES without TLS
   Answer: awraycastle​
9. Media streams in SIP are secured using
   a. SRTP
   b. HTTPS
   c. IMAP
   d. FTP
   Answer: awraycastle​
10. Which security service protects SIP message confidentiality?
    a. Authentication
    b. Confidentiality
    c. Integrity
    d. Availability
    Answer: bpmc.ncbi.nlm.nih​
11. The protocol SRTP ensures
    a. Authentication of SIP endpoints
    b. Encryption of media packets
    c. NAT traversal
    d. SIP call routing
    Answer: bwraycastle​
12. One major attack targeting SIP messages is
    a. Credential stuffing
    b. Registration hijacking
    c. SQL injection
    d. DNS tunneling
    Answer: boreilly​
13. SIP registration hijacking results in
    a. Unauthorized call redirection
    b. Data exfiltration via ICMP
    c. Router compromise
    d. Port exhaustion
    Answer: aoreilly​
14. The SIP attack involving unauthorized deregistration is called
    a. DoS flooding
    b. BYE attack
    c. DHCP exhaustion
    d. Smurf attack
    Answer: boreilly​
15. SIP username enumeration is a technique used to
    a. Guess active user accounts
    b. Encrypt signaling
    c. Manage NAT traversal
    d. Update routing tables
    Answer: aoreilly​
16. A brute force attack on SIP credentials is known as
    a. MitM attack
    b. SIP password cracking
    c. Buffer overflow
    d. TLS stripping
    Answer: boreilly​
17. Which SIP component enforces session policies and access control?
    a. Router
    b. Session Border Controller (SBC)
    c. IDS
    d. Voicemail server
    Answer: bwraycastle​
18. SBCs monitor traffic for
    a. Audio performance
    b. DoS attempts and signaling anomalies
    c. DNS resolution failures
    d. OS fingerprinting
    Answer: bwraycastle​
19. Flooding SIP with excessive INVITE or REGISTER messages leads to
    a. DDoS Attack
    b. Replay attack
    c. DNS poisoning
    d. Local privilege escalation
    Answer: aijert​
20. SIP flood attacks aim to
    a. Redirect packets
    b. Overload VoIP servers
    c. Capture traffic
    d. Fragment traffic
    Answer: bindusface​
21. A SIP DoS attack primarily targets
    a. Encryption keys
    b. Call setup channels
    c. Memory of routers
    d. Antivirus definitions
    Answer: bdiva-portal​
22. A firewall filtering SIP signaling is necessary because
    a. It blocks external threats
    b. It compresses packets
    c. It modifies codecs
    d. It hides IP addresses
    Answer: adiva-portal​
23. STIR/SHAKEN protocol combats
    a. Caller ID spoofing
    b. Malware injection
    c. Key reuse
    d. VLAN hopping
    Answer: abaeldung​
24. SIP authentication can use
    a. SRP (Secure Remote Password)
    b. RC4
    c. RSA 1024
    d. Diffie-Lambert
    Answer: apmc.ncbi.nlm.nih​
25. The A-SIP protocol enhances SIP by providing
    a. Mutual authentication
    b. Traffic redirection
    c. QoS adjustment
    d. NAT detection
    Answer: apmc.ncbi.nlm.nih​
26. KP-SIP provides
    a. Key management for SIP signaling
    b. TCP acceleration
    c. DNS resolution
    d. IPv6 translation
    Answer: apmc.ncbi.nlm.nih​
27. Man-in-the-Middle attacks on SIP involve
    a. Message interception
    b. Device overclocking
    c. IP fragmentation
    d. Certificate chaining
    Answer: aoreilly​
28. SIP spoofing attacks attempt to
    a. Impersonate users or servers
    b. Bypass media codecs
    c. Rewrite DNS records
    d. Change encryption algorithms
    Answer: adiva-portal​
29. Encryption at the SIP layer can fail if
    a. Intermediate nodes do not support TLS
    b. UDP is used
    c. Log files are too small
    d. SIP timers reset
    Answer: awikipedia​
30. SIP signaling is separated from
    a. Media streams
    b. Transport routing
    c. Data encryption
    d. DNS resolution
    Answer: awikipedia​
31. Which protocol can negotiate keys for SRTP?
    a. MIKEY
    b. HTTPS
    c. SNMP
    d. SMTP
    Answer: awikipedia​
32. An Intrusion Detection System (IDS) for SIP compares messages against
    a. SIP RFC standards
    b. MAC addresses
    c. Password hashes
    d. TLS certificates
    Answer: aoracle​
33. Anomaly-based SIP IDS detects attacks by
    a. Studying message deviations
    b. Counting packet length
    c. Forcing TLS
    d. Encoding SRTP
    Answer: aoracle​
34. Which feature ensures SIP availability under attack?
    a. Rate-constraint mechanisms
    b. Service advertisement
    c. VLAN pruning
    d. Network sniffing
    Answer: aoracle​
35. SIP over NAT can have issues with
    a. IP address translation
    b. Codec mismatch
    c. Packet loss
    d. Port mirroring
    Answer: adiva-portal​
36. Flooding SIP messages without spoofing can occur via
    a. Security tunnels
    b. Web proxies
    c. DNS relays
    d. SDN layers
    Answer: aijert​
37. A SIP REGISTER request is used to
    a. Authenticate a user with the registrar
    b. Transfer RTP data
    c. Request encryption
    d. Initialize TCP connection
    Answer: awikipedia​
38. The INVITE method in SIP is used to
    a. Start a session
    b. Terminate a call
    c. Forward DNS
    d. Query NAT ports
    Answer: awikipedia​
39. The BYE method performs
    a. Session termination
    b. Registration setup
    c. Codec negotiation
    d. Keepalive signal
    Answer: awikipedia​
40. SIP user identity impersonation attacks exploit
    a. Weak authentication
    b. Secure tunneling
    c. Proxy validation
    d. DNS amplification
    Answer: aijert​
41. SIP replay attacks involve
    a. Re-sending captured SIP messages
    b. Flooding TLS handshake
    c. Modifying encryption keys
    d. Overwriting log packets
    Answer: aoreilly​
42. A SIP proxy’s main role is
    a. Forward signaling requests
    b. Encrypt RTP traffic
    c. Block TCP flows
    d. Manage VLANs
    Answer: awikipedia​
43. SIP loops can occur due to
    a. Misconfigured routes
    b. SRTP failures
    c. IP spoofing only
    d. Faulty hardware
    Answer: awikipedia​
44. The integrity of SIP messages ensures
    a. No alteration during transit
    b. High speed delivery
    c. Packet segmentation
    d. Address translation
    Answer: apmc.ncbi.nlm.nih​
45. Mutual authentication in SIP prevents
    a. Unauthorized registration
    b. Codec mismatch
    c. Firewall bypass
    d. Proxy duplication
    Answer: apmc.ncbi.nlm.nih​
46. SIP replay defense mechanisms involve
    a. Nonce and timestamp validation
    b. Port filtering only
    c. VLAN assignment
    d. UDP prioritization
    Answer: apmc.ncbi.nlm.nih​
47. To mitigate SIP brute-force attacks, admins should
    a. Implement account lockouts
    b. Disable TLS
    c. Increase bandwidth
    d. Use plaintext credentials
    Answer: abaeldung​
48. Secure-SIP (S-SIP) combines
    a. A-SIP and KP-SIP
    b. TLS and SSL
    c. SRTP and RTP
    d. HTTPS and SIP-T
    Answer: apmc.ncbi.nlm.nih​
49. SIP spoof prevention systems often include
    a. Policy Enforcement modules
    b. Codec transcoders
    c. TCP routers
    d. NAT/PAT suppressors
    Answer: aijert​
50. Overall SIP traffic security depends on integrating
    a. Authentication, encryption, and intrusion detection
    b. QoS mechanisms
    c. ARP filtering
    d. Network virtualization
    Answer: awraycastle+1​

1. https://en.wikipedia.org/wiki/Session_Initiation_Protocol
2. https://pmc.ncbi.nlm.nih.gov/articles/PMC9740847/
3. https://wraycastle.com/blogs/knowledge-base/session-initiation-protocol
4. https://www.oreilly.com/library/view/hacking-voip/9781593271633/ch02s05.html
5. https://www.ijert.org/session-initiation-protocol-sip-flooding-prevention
6. https://www.indusface.com/learning/voip-flood-attack/
7. https://www.diva-portal.org/smash/get/diva2:833435/FULLTEXT01.pdf
8. https://www.baeldung.com/cs/voip-hacking-countermeasures
9. https://docs.oracle.com/cd/E95618_01/html/sbc_scz810_security/GUID-73A32803-097C-496F-9709-7B51CF54382B.htm
10. https://www.interviewbit.com/cyber-security-mcq/
11. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
12. https://www.scribd.com/document/488601324/Cyber-security-MCQ-NOTES
13. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
14. https://www.yeahhub.com/cyber-security-ethical-hacking-mcq-questions-answers-part1/
15. https://www.scribd.com/document/524434738/mcq-questions-on-cyber-security
16. https://instrumentationtools.com/cyber-security-multiple-choice-questions-and-answers/
17. https://engineering.unt.edu/cse/research/labs/nsl/sites/default/files/biblio/documents/security_issues_voip_telecom_networks.pdf
18. https://ieeexplore.ieee.org/document/1638122
19. https://sangoma.com/blog/6-common-ways-to-suffer-a-voip-attack/
20. https://www.studocu.com/in/document/karnataka-state-akkamahadevi-womens-university/cyber-security/unit-1-mcqs-this-pdf-contains-mcqs-from-unit-1-of-cybersecurity/114363147