5.3 Implement Toll Fraud Prevention on Webex Calling 350-801 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   An administrator discovers that a user's extension has been making calls to a premium-rate number, but the user denies making the calls. The administrator checks the call detail records and sees the calls originated from the user's desk phone IP address. However, the user's desk phone was physically turned off at the time of the calls. What is the most likely explanation for this discrepancy?

   • AThe desk phone has a built-in battery that allowed it to make calls while off
   • BAn attacker compromised the user's credentials and used a softphone or another device to register with the user's extension
   • CThe call detail records are inaccurate and should be ignored
   • DThe user is lying and made the calls from the desk phone
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a hybrid workforce. Some users are on Webex Calling with desk phones, and others use the mobile app. The company wants to enforce a strong authentication policy that protects against credential theft for both groups, but the desk phones do not support TOTP tokens. What is the most effective way to secure both user types?

   • AEnforce MFA for all users and require desk phone users to use a softphone instead
   • BDisable the mobile app and require all users to use desk phones
   • COnly enforce a strong password policy for both groups
   • DEnforce MFA for the mobile app users and use certificate-based authentication or secure activation codes for the desk phones
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a group of temporary contractors who need to make local calls for three months. The administrator wants to ensure that after the contract ends, these users cannot make any calls. What is the most efficient administrative action to take?

   • ADelete the contractor user accounts immediately when their contract ends
   • BChange each contractor's password to a random value when their contract ends
   • CPlace the contractor users in a dedicated calling behavior with local calling permissions, and remove them from that behavior when their contract ends
   • DDisable the entire company's local calling permissions
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   In Webex Calling Control Hub, which administrative setting is used to restrict a user's ability to make international calls?

   • ANetwork settings
   • BCall permissions
   • CBilling settings
   • DDevice provisioning
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   Which attack method is a common toll fraud vector where an attacker gains access to a user's credentials and then places calls to premium-rate numbers?

   • APhishing
   • BDenial of service
   • CCredential theft
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first