5.3 Implement Toll Fraud Prevention on Webex Calling 350-801 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is concerned about an attacker intercepting signaling or media for Webex Calling calls to learn sensitive information and potentially manipulate call routing. Which built-in Webex Calling feature directly mitigates this risk?

   • ADial plan restrictions
   • BUser role assignment in Control Hub
   • CCall detail record (CDR) export
   • DTLS/SRTP encryption for signaling and media
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A remote sales team uses the Webex Calling desktop app on personal laptops. After a phishing campaign, several users' Microsoft 365 credentials were compromised, and the attacker used those credentials to log into the Webex Calling portal and make international calls. The company wants to prevent this specific attack vector from succeeding again. What should the administrator implement?

   • AChange the users' passwords manually every week
   • BRestrict the desktop app to only connect from the corporate VPN
   • CEnforce multi-factor authentication (MFA) for all Webex Calling users
   • DDisable the desktop app and require users to use a physical desk phone
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company is concerned about an attacker intercepting the signaling messages between the Webex Calling client and the service to steal credentials or manipulate call setup. Which built-in feature of Webex Calling directly protects the signaling path?

   • ACall detail record (CDR) logging
   • BDial plan restrictions
   • CSRTP encryption for the media stream
   • DTLS encryption for the signaling channel
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company has a small IT team where the same administrator manages user accounts, calling permissions, and billing. After a security review, the company wants to reduce the risk of an insider or compromised admin account making unauthorized changes that could enable toll fraud. What is the most effective administrative change to implement?

   • ADisable the administrator's ability to make outgoing calls
   • BEnable call detail record (CDR) export for the administrator's account
   • CRequire the administrator to change their password every 90 days
   • DSeparate the roles so that no single administrator has both user management and billing/permission rights
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to proactively reduce the risk of toll fraud. The security team has limited time and wants to focus on the most impactful activities. Which combination of activities represents the most effective proactive approach?

   • ARegularly audit user permissions and calling behaviors, and review call analytics for unusual patterns
   • BOnly review the monthly bill for total charges
   • COnly disable the voicemail feature for all users
   • DOnly change the administrator password on a quarterly basis
   Reveal Solution Discussion Select an answer first