Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 848 discussion

Actual exam question from CompTIA's SY0-601

Question #: 848
Topic #: 1

Callers speaking a foreign language are using company phone numbers to make unsolicited phone calls to a partner organization. A security analyst validates through phone system logs that the calls are occurring and the numbers are not being spoofed. Which of the following is the most likely explanation?

A. The executive team is traveling internationally and trying to avoid roaming charges.
B. The company’s SIP server security settings are weak.
C. Disgruntled employees are making calls to the partner organization.
D. The service provider has assigned multiple companies the same numbers.

Show Suggested Answer

Suggested Answer: B 🗳️

by LuckyAro at Jan. 17, 2024, 1:15 a.m.

Comments

Submit Cancel

SecNoob27639

1 year, 2 months ago

Selected Answer: B

The security analyst was able to confirm that the numbers weren't spoofed through the phone system logs. If the numbers had simply been duplicated, the security analyst wouldn't have been able to find that info on their internal phone system logs. Even if the service provider had given out duplicate phone numbers as D suggests, it would have looked like a spoofed number to the analyst, as the analyst can only see what is internal to the company. Which is why SIP server vulnerability, not Duplicated phone numbers.

upvoted 1 times

...

7308365

1 year, 5 months ago

B. Because when a company's SIP server security settings are weak, your phone system can be used to make expensive calls, or for this question specifically, unsolicited phone calls to a partner organization.

upvoted 2 times

7308365

1 year, 5 months ago

I passed my exam with a 778!!! I studied 700-849 in depth (meaning, even though each had a discussion with answers posted, I looked up the answers for myself to really understand the concepts) and all of the PBQ's in depth (PBQs: 153, 155, 156,157,725,726, 731, 733, 734) I looked over 600 to 700 the morning of the exam

upvoted 20 times

StaticK9

1 year, 5 months ago

Congrats! I take my exam tomorrow and have been studying 600-849 the past couple of days.

upvoted 6 times

Darewalex

1 year, 4 months ago

Hi Static, how was your exams? Were these questions and discussions helpful?

upvoted 4 times

...

DrCo6991

1 year, 5 months ago

Selected Answer: B

I believe B is correct.

upvoted 2 times

...

johnabayot

1 year, 5 months ago

Selected Answer: B

The company's SIP server security settings are weak. This can allow unauthorize callers to use the company's phone numbers to make unsolicited phone calls to the partner organization, or to intercept or modify the SIP messages. Therefore, the security analyst should check the SIP server security settings and make sure they are up to date and follow the best practices for SIP secuirty.

upvoted 3 times

...

Hs1208

1 year, 5 months ago

Selected Answer: D

D. The service provider has assigned multiple companies the same numbers.

upvoted 1 times

...

LuckyAro

1 year, 6 months ago

Selected Answer: D

Multiple companies are using the same numbers

upvoted 2 times

RamnathKM

1 year, 3 months ago

The numbers differ by country code. I think.

upvoted 1 times

...

Yomzie

1 year, 5 months ago

What is the likelihood of this scenario in real life?! Technically speaking, the chances of this happening, is very minimal. Better option is: B (SIP Server compromised).

upvoted 2 times

...

MortG7

1 year, 5 months ago

Just think about it...if I am in California (God Forbid), and I am part of a business, naturally, the defacto language will be English. The language being spoken in the question is foreign. We could deduce that they are not in California or in the USA for that matter..answer this..which company can assign the a number in California and also assign the same number to someone in a different country..

upvoted 4 times

...