CISSP: Chapter 15 - Secure Communication Channels Flashcard Set

Which of the following is NOT considered a best practice for securing multimedia collaboration platforms? A) Don't record meetings unless necessary, B) Use consumer-grade products, C) Use AES 256-bit encryption, or D) Restrict participants' sharing of their screens or cameras as appropriate

B) Use consumer-grade products - Best practices for securing multimedia collaboration platforms include recording meetings only when necessary to protect information, use AES 256-bit encryption, and restrict participants on sharing their screens or cameras when there's no need too, especially in big meetings. But using consumer-grade products is a no-no because they always lack the security controls and management features that we need to properly secure these platforms. Use Enterprise-grade products instead.

______ Rate Interface ISDN consists of two B channels (for data) and one D channel (for signaling), providing a total bandwidth of 128 Kbps (2B+D). Limited channels makes it good only for a single user ______ Rate Interface ISDN consists of multiple B channels and a single D channel. The number of B channels varies (typically 23B+D or 30B+D), offering higher bandwidth suitable for larger organizations or higher traffic needs.

Basic Rate Interface (BRI ISDN) Primary Rate Interface (PRI ISDN)

Is RPC secure?

By default, RPC doesn't provide any security beyond basic authentication.

Which of the following is NOT an advantage of VDI? A) Reduced user downtime during IR, B) Support for both persistent and non-persistent sessions, C) Support for both physical and remote logins, or D) Better implementation of data retention standards

C) Support for both physical and remote logins - VDI relies on VMs in a data center, so there is no computer at which a user could PHYSICALLY log in.

You are a CISO at an R&D company transitioning to 100% remote workforce. You don't have enough laptops for all your staff, so those without one will use their personal computers and printers for work. Your VPN concentrators are sufficient to support the entire workforce and you will require all staff members to connect to the VPN Which of the following best protect the confidentiality of your sensitive research data? A) SSH, B) Virtualized networks, C) VDI, or D) RPC

C) VDI, which stands for Virtualized Desktop Infrastructure. VDI allows your sensitive data to remain in your protected network even as users are able to work with it over a virtual desktop. Properly configured, this infrastructure prevents any sensitive data from being stored on the remote user's computer.

In a _______ VDI model, each user is assigned a dedicated virtual desktop that retains its configuration, settings, and user-installed applications across sessions. Users can personalize their desktop environment by installing applications, saving files, and customizing settings. Changes persist between sessions. In a _______ VDI model, users access a shared pool of virtual desktops. Once a user logs out, the virtual desktop resets to its original state, erasing any changes made during the session. This type of VDI typically consumes fewer resources as virtual desktops are shared among users, reducing storage and management overhead. Suitable for environments where users' needs are relatively standard, like in call centers or classrooms, where users require access to a basic desktop without customization. This is good for visitor accounts or school lab accounts.

Persistent and non-Persistent Virtual Desktop Infrastructure (VDI) refer to two different approaches in managing and deploying virtual desktops:

You are a CISO at an R&D company transitioning to 100% remote workforce. You don't have enough laptops for all your staff, so those without one will use their personal computers and printers for work. Your VPN concentrators are sufficient to support the entire workforce and you will require all staff members to connect to the VPN Which of the following additional VPN configurations should you also enable? A) Split Tunneling, B) Full Tunneling, C) VPN Kill switch, or D) Hybrid Tunneling

A) Split Tunneling - Because your staff will be using printers on their home networks, you will have to enable split tunneling, which allows some traffic to be sent over the VPN and other traffic to go to the local network or to the Internet directly. It routes specific traffic through the VPN while allowing other traffic to access the Internet directly.

ADSL / SDSL / VDSL / G.fast

All of these are DSL technologies. There are different types of DSL, such as Asymmetric DSL (ADSL) and SDSL Symmetric (SDSL). ADSL provides faster download speeds than upload speeds, making it suitable for typical internet usage where users download more data than they upload. So these lines allocate more bandwidth for downstream data since users download content more than they upload content. SDSL, on the other hand, provides equal upload and download speeds, making it more suitable for businesses or applications requiring balanced speeds. Very High Bitrate Digital Subscriber Line (VDSL) is a variant of DSL technology that offers significantly faster data transmission speeds compared to traditional DSL, especially over shorter distances. VDSL can be both symmetric and asymmetric, depending on the specific implementation and configuration. G.fast is an advanced DSL technology designed to provide even higher data transmission speeds over copper telephone lines than VDSL. It's specifically engineered to achieve faster broadband speeds, especially in scenarios where fiber-optic connections (FTTH - Fiber To The Home) aren't feasible or cost-effective. It does this by running fiber-optic cable from the central office to a distribution point near the home and then finish with the last few hundred feet using the copper wires already in place.

always-on VPN vs VPN kill switch

Always-On VPN and VPN Kill Switch are two features used in VPN services, offering different functionalities to enhance privacy and security Always-On VPN ensures a persistent and continuous connection to the VPN server, automatically establishing the VPN connection whenever the device connects to the internet (no user interaction required). Provides continuous protection against potential threats, especially when using unsecured or public Wi-Fi networks, by ensuring that all data transmission occurs through the VPN. Ideal for users who want continuous protection and privacy, especially when regularly connecting to public Wi-Fi networks or requiring constant anonymity. A VPN Kill Switch is a security feature designed to instantly cut off internet access or block all internet traffic if the VPN connection drops unexpectedly or becomes unstable. This is better for security. The Kill Switch acts as a fail-safe mechanism to prevent any data from being transmitted outside the secure VPN tunnel in the event of a VPN disconnection. It prevents exposure of unencrypted data to the internet. Useful for users who prioritize security and want to ensure that no data is exposed if the VPN connection becomes unstable or disconnected unexpectedly.

You are a CISO at an R&D company transitioning to 100% remote workforce. You don't have enough laptops for all your staff, so those without one will use their personal computers and printers for work. Your VPN concentrators are sufficient to support the entire workforce and you will require all staff members to connect to the VPN You determine that many of your mission-critical systems rely on Remote Procedure Call (RPC). What measures should you take to ensure RPCs are secured? A) Implement ITU standard H.323, B) Tunnel RPC through TLS, C) Use PAP for authentication, or D) Enforce client-side authentication

B) Tunnel RPC through TLS - Since many implementations of RPC lack security controls, many organizations require TLS for authenticating hosts and encrypting RPC traffic.

True or False. Signaling protocols like SIP and H.323 deliver audio and video over IP networks. These protocols specifically transfer the voice and video stream.

False. SIP and H.323 are just signaling protocols used to set up communication sessions. But the actual voice stream is carried on media protocols, like Real-Time Transport Protocol (RTP), once the connection is established.

A more secure authentication protocol compared to the Password Authentication Protocol (PAP) and was designed to address some of the security vulnerabilities present in PAP. This protocol uses a three-way authentication process between the client and the server, including a periodic challenge and response processes to decrease the risk of MitM attacks.

CHAP stands for Challenge Handshake Authentication Protocol. Challenge: The server sends a random challenge to the client. It's just a nonce, or random value. Response: The client uses a one-way hash function (typically MD5) to encrypt the challenge using a secret shared key (password) known only to the client and server and sends the encrypted result back to the server. Verification: The server independently performs the same encryption process using its copy of the shared key and compares the result with the received response. If they match, authentication is successful. CHAP involves periodic challenges and responses throughout the connection session at regular intervals, requiring the client to re-authenticate. This ongoing verification reduces the chance of MitM attacks. CHAP also protects against replay attacks by using a different challenge each time, preventing attackers from reusing intercepted authentication messages. However, while CHAP was an improvement over PAP, it's not immune to all security risks. The primary weakness of CHAP lies in the fact that it uses a shared secret (password) for authentication, which could be susceptible to attacks if the shared secret is weak or if the server's database of shared secrets is compromised.

_____________ is a set of international standards that govern the transmission of data over cable television (CATV) networks. It's primarily used for providing high-speed internet access through cable modems. It supports encryption for data transmitted between the cable modem and the provider's headend. The most recent versions, such as 3.0 and 3.1, use Advanced Encryption Standard (AES) encryption to secure the data passing through the network, preventing unauthorized access or eavesdropping.

Data-Over-Cable Service Interface Specification (DOCSIS)

This technology enables high-speed internet access over traditional analog telephone lines. In the 1980s, it was discovered that the copper telephone wires that go into our homes and offices are able to support much more bandwidth than the small amount required for voice communications. This new technology allowed for the simultaneous transmission of voice and data by separating frequencies.

Digital Subscriber Line (DSL) is a In the 1980s, we figured out that PTSN local loops (i.e., the copper telephone wires that go into our homes and offices) are able to support much more bandwidth than the small amount required for voice communications. DSL technology allows the simultaneous transmission of voice and data by separating frequencies. It divides the available bandwidth into different channels, with lower frequencies allocated for voice calls (telephone service) and higher frequencies for data transmission (internet service). To establish a DSL connection, you need a DSL modem at both ends: one at the customer's location (customer premises) and one at the internet service provider's (ISP) location (central office or DSL access multiplexer - DSLAM). The customer's location may also need a DSL Splitter if the home also has analog phone service. A bunch of DSL subscribers in the same neighborhood are then connected to the same DSLAM in the central office, where analog signals are sent to a voice switch (and on the PTSN) and digital signals are routed out to the Internet. Some tricky stuff: The DSL Splitter can't be more than 2.5 miles from the DSLAM.

Not specifically a single protocol but rather an authentication framework used in computer networks and is particularly prevalent in wireless networks (Wi-Fi) and Virtual Private Networks (VPNs). It doesn't define a specific authentication method itself but provides a framework that supports various authentication methods within its structure and network technologies (e.g., 802.11, 802.3, and PPP). It allows the implementation of different authentication methods within its structure. These methods can range from simple password-based authentication to more complex and secure mechanisms, such as digital certificates, IEEE 802.11x, RADIUS servers, or token-based authentication.

EAP stands for Extensible Authentication Protocol. It's an authentication framework used in computer networks and is particularly prevalent in wireless networks (Wi-Fi) and Virtual Private Networks (VPNs). EAP doesn't define a specific authentication method itself but provides a framework that supports various authentication methods within its structure and network technologies (e.g., 802.11, 802.3, and PPP). EAP is designed as an extensible and versatile framework that allows the implementation of different authentication methods, known as EAP methods or EAP types, within its structure. These methods can range from simple password-based authentication to more complex and secure mechanisms, such as digital certificates or token-based authentication. EAP operates by facilitating an authentication exchange between a client (such as a user's device) and an authentication server (e.g., a RADIUS server). This exchange varies based on the specific EAP method being used. Examples include: EAP-TLS: Utilizes digital certificates for mutual authentication between the client and server, ensuring a highly secure communication channel. EAP-PSK: Provides mutual authentication and session key derivation using a pre-shared key. EAP-TTLS: Tunneled TLS, which requires the server to have a CA-issued certificate, but makes this optional for the client.

_______ is a standard protocol suite defined by the International Telecommunication Union (ITU) that facilitates real-time multimedia communication, including voice, video, and data over IP-based networks. It's commonly used for audio and video conferencing, telephony, and other multimedia applications. It provides specifications for call signaling, call setup, and control within IP networks, similar to what Signaling System No. 7 (SS7) does for PTSNs. It defines how devices communicate to establish, manage, and terminate multimedia sessions.

H.323 Many video conferencing systems and hardware endpoints use the H.323 protocol suite for establishing and conducting video conferences over IP networks. Examples include Polycom, Lifesize, and Cisco TelePresence endpoints. H.323 gateways and bridges enable communication between H.323-based networks and other communication protocols and non-H.323-based networks, such as the Public Switched Telephone Network (PSTN) or SIP-based networks. NOTE: While newer protocols like SIP (Session Initiation Protocol) have gained popularity, H.323 remains in use, particularly in legacy systems and environments where interoperability with older devices and networks is required.

Name at least 5 ways to secure VoIP networks

Hackers can intercept incoming and outgoing calls, carry out DoS attacks, eavesdrop on sensitive conversations, spoof phone calls and even spoof SIP servers. To prevent eavesdropping and spoofing of phone calls, encrypt VoIP traffic. VoIP traffic can be encrypted with TLS. To prevent impersonation of clients and servers, implement authentication so only authorized telephony devices are working on the network. Additionally, install and maintain stateful firewalls, rogue detection mechanisms, and intrusion detection systems that monitor for abusive call patterns and other types of VoIP Indicators of compromise. Also, ensure you disable unnecessary ports and services on routers, switches, PCs and IP telephones. Keep patches updated on each network device involved with VoIP transmissions, such as the call-processing manager server, the voicemail server, and the gateway server.

____ Telephony, also known as Voice over Internet Protocol (VoIP), refers to the technology that enables voice communication and multimedia sessions over the internet or other IP-based networks. Instead of using traditional circuit-switched telephone networks like with PTSN, this technology converts voice signals into digital packets and transmits them over IP networks. It often offers cost advantages compared to traditional telephony, especially for long-distance and international calls. By utilizing internet infrastructure, it bypasses the charges associated with traditional telephone networks. Examples of this technology services include Skype, Zoom, WhatsApp, etc.

IP Telephony NOTE: VoIP is widely used to refer to the actual services offered: caller ID, QoS, voicemail, and so on. But IP Telephony is an umbrella term for all real-time applications over IP, including VoIP. NOTE: IP Telephony is often integrated with Unified Communications (UC) platforms, Like MS Teams, Slack, and Cisco Webex, which combines voice, video, messaging, and collaboration tools into a single, integrated system for seamless communication within organizations.

What security issues do IP Telephony services face?

IP Telephony services, such as VoIP, integrate with the TCP/IP protocol, allowing attackers to leverage their experience with traditional networks to probe for flaws in both the architecture and implementation of VoIP systems. SIP-based signaling suffers from the lack of encrypted call channels and authentication of control signals. Attackers can tap into the SIP server and client communication to sniff out login IDs, passwords/PINs, and phone numbers. If an attacker can intercept voice packets, they may eavesdrop on ongoing conversations. Attackers can also masquerade identities by redirecting SIP control packets from a caller UAC to a forged destination to mislead the caller into communicating with an unintended end system. Just like traditional TCP servers, attackers can flood SYN packets to RTP servers that help carry voice and video traffic. This will overwhelm these servers and knock them offline. Another issue is the impersonation of servers. Attackers can impersonate SIP servers and issue commands, such as BYE, CHECKSYNC, and RESET to VoIP clients.

S-RPC

If your organization uses RPC, then you should really consider upgrading to Secure RPC (S-RPC), which provides authentication of both users and hosts as well as traffic encryption.

What is UC?

In essence, while IP Telephony specifically refers to voice calls over IP networks, like VoIP, Unified Communications (UC) extends beyond voice communication to incorporate a broader spectrum of communication and collaboration tools, facilitating a more comprehensive and integrated communication experience. UC includes real-time and non-real-time communications technologies in one, single platform. Non-real-time communications include e-mail and text message, whereas real-time includes telephone and video conferencing. Examples of UC platforms include Slack or Microsoft Teams.

This protocol was created in the 1980s and was widely used for providing authentication by encapsulating PPP connections. This was especially for dial-up connections. It is considered insecure primarily because it transmits user credentials, such as usernames and passwords, in plain text over the network without encryption. Due to its inherent security weaknesses, it has largely been replaced by more secure authentication protocols such as CHAP (Challenge Handshake Authentication Protocol) and EAP (Extensible Authentication Protocol), which incorporate encryption and stronger security measures to protect user credentials during authentication processes.

Password Authentication Protocol (PAP)

Within the context of Session Initiation Protocol (SIP), what is the responsibility of the UAC and UAS components?

In the context of the Session Initiation Protocol (SIP), the User Agent Client (UAC) and User Agent Server (UAS) represent two essential components involved in establishing and managing SIP sessions: The UAC is the application that initiates SIP requests on behalf of a user or an application. It's responsible for creating and sending SIP requests to other SIP entities to initiate a session or perform an action. The UAC generates SIP INVITE requests to establish a session, sends REGISTER requests to register its location with a SIP registrar, and issues other SIP requests, such as BYE (to terminate a session) or ACK (to acknowledge responses). In a VoIP application, the software that allows a user to make a call by dialing a number or selecting a contact is an example of a UAC. It generates the SIP request to set up the call. The UAS is a SIP server that receives SIP requests, processes them, and generates responses. It listens for incoming SIP requests, acts on them, and generates appropriate responses to handle the requests. It relies on a 3-way handshake. The UAS handles incoming SIP INVITE requests by processing them to establish a session, responds to REGISTER requests for user location registration, and generates responses to other SIP requests it receives. When a call is received on a VoIP application, the software that receives the call request, processes it, and allows the user to accept or decline the call is an example of a UAS.

This legacy technology is similar to DSL in that it leverages telephone lines to enable data, voice, and signaling traffic over a medium, but it coverts data digitally over analog telephone lines. Tip: This technology uses "B" and "D" channels and you should know the difference for the exam.

Integrated Services Digital Network (ISDN) borrows the same approach as DSL by leveraging legacy telephone lines to enable data, voice, and signaling traffic to travel over a medium. But ISDN is a set of standards that enables the transmission of voice, video, and data simultaneously over digital telephone lines that were previously used only for analog voice transmission. it comes in two flavors: BRI and PRI It was developed to provide a more efficient and versatile way of transmitting multiple types of information over the same network infrastructure. ISDN was widely used for digital voice calls, video conferencing, and data transfer in the past. However, its usage has declined with the proliferation of high-speed internet connections like broadband and fiber optics, which offer greater bandwidth and more advanced services. ISDN is therefore legacy technology but organizations do sometimes rely on it for backup communications. Unlike traditional analog telephone lines, which carry voice signals as electrical waveforms, ISDN lines transmit data digitally in the form of binary digits (1s and 0s). ISDN lines consist of two types of channels: Bearer (B) Channels: These channels carry user data, including voice, video, or digital information. B channels are typically used for actual data transmission and can be aggregated to increase bandwidth. Delta (D) Channels: These channels are "out-of-band" from the B channels and are used for signaling and control purposes, managing call setup, teardown, and other network signaling functions. D channels carry control information but don't transmit user data. They also handle supplementary services like call waiting or caller ID.

This telephone network is a global, circuit-switched network that enables the exchange of voice, data, and video communications over traditional telephone lines. It's the infrastructure used for traditional landline telephony. As opposed to packet switching, circuit switching establishes a dedicated communication channel (like a closed circuit) between two parties for the entire duration of a communication session. This pathway is established through a series of interconnected switches and physical copper wires or fiber-optic cables. Throughout the call, this circuit remains dedicated solely to the two parties involved, ensuring continuous, real-time communication. This network uses a series of switches, also known as Private Branch Exchanges (PBXs), to route the call through the most efficient path based on the dialed number's location. These switches rely on other technologies, like SS7, to setup and manage calls.

Public Switched Telephone Network (PTSN)

This protocol listens on TCP port 135 and allows computer programs to execute code or call procedures on a remote system or server over a network, as if they were local procedures or functions. It uses various communications protocols to facilitate communication between systems, such as HTTP, TCP/IP, or custom protocols.

RPC stands for Remote Procedure Call and it listens on TCP port 135. It's a ubiquitous protocol that allows a computer program to execute code or call procedures on a remote system or server over a network, as if they were local procedures or functions. RPC is commonly used in distributed computing environments, where different systems need to communicate and perform tasks across a network. It's prevalent in client-server applications, remote access to resources, and distributed computing frameworks. RPC implementations use various communication protocols to facilitate communication between the client and server, such as HTTP, TCP/IP, or custom protocols. Common RPC frameworks include DCOM (Distributed Component Object Model), CORBA (Common Object Request Broker Architecture), and gRPC (Google Remote Procedure Call), among others. Imagine you have a client application running on one computer and a server application running on another computer. The client needs to calculate the square of a number, but it doesn't have the function to perform this calculation locally. Instead, it relies on the server to execute this operation. The client application makes an RPC request to the server, asking it to calculate the square of a specific number (let's say 5). The server then computes the square of 5 (25) and generates a response message containing the result. The client receives the response containing the calculated square (25) from the server. In this scenario, the client application doesn't have the capability to calculate the square itself, so it delegates this task to the server using an RPC mechanism

In the context of Session Initiation Protocol (SIP), this separate protocol is often used in conjunction with SIP to facilitate the transmission of real-time multimedia data, such as audio and video, during SIP sessions. It is important to note that SIP itself is not used to stream the conversation because it is just a signaling protocol. The actual voice stream is carried on this media protocol, which provides a standardized packet format for delivering audio and video over IP networks.

Real-time Transport Protocol (RTP) RTP packets are created at the application layer and handed to the transport layer for delivery. Each unit of RTP media data created by an application begins with the RTP packet header. The RTP header has a minimum size of 12 bytes. After the header, optional header extensions may be present.

These are both remote desktop access technologies that allow users to connect to and control a remote computer or server from a different location. However, they differ in their architecture, features, and the way they operate: ________ is developed by Microsoft and is primarily used in Windows-based environments and works over TCP port 3389. It offers encryption and authentication mechanisms to secure remote connections. ________ is an open-source remote desktop protocol developed by RealVNC and other contributors. It works over TCP port 5900. It's available on multiple platforms, including Windows, macOS, Linux, and Unix-based systems.

Remote Desktop Protocol (RDP) and Virtual Network Computing (VNC) When using these remote desktop technologies, try to ensure that connections are encrypted. And if you must have an external RDP or VNC server, ensure their corresponding ports are blocked at your firewall.

This protocol is a better alternative to H.323. It's a signaling protocol used for initiating, maintaining, and terminating real-time communication sessions over IP networks. It's widely used for various forms of communication, like voice and video calls, instant messaging, multimedia conferences, and other applications that require real-time interaction. It's primarily used to establish and manage communication sessions between users or devices. It handles the initiation of sessions, negotiation of capabilities, and the exchange of information necessary to set up a communication link. It allows users to be located anywhere on the internet, enabling flexible and location-independent communication. It also supports mechanisms for determining user availability or presence status. It typically operates over the User Datagram Protocol (UDP) or Transmission Control Protocol (TCP) and uses port 5060 for signaling.

Session Initiation Protocol (SIP)

This is a set of telephony signaling protocols used by network elements, such as switches (PBXs), which are to set up, manage, and terminate voice and data calls in Public Switched Telephone Networks (PSTNs) and mobile networks. It's a crucial system for call control, signaling, and network management in traditional telecommunication networks. When a call is initiated, these protocols facilitate the exchange of signaling messages between network elements (such as switches or service control points) to set up the call, identify the calling and called parties, and manage call features (e.g., call forwarding, caller ID).

Signaling System No. 7 (SS7) For example, assume Bob wants to call Alice. Bob's phone is connected to a Signal Switching Point (SSP) belonging to his telephone company (Note: Don't confuse this with a PBX switch, which is used to manage internal calls within an organization and more. The SSP and PBX are similar but SSP manages call setup, routing, and service provisioning within the SS7 telecommunication network). When the call initiates, Bob's Telephone company's SSP then finds the SSP of the Telephone company providing Alice's phone service and they negotiate a call set up. The call is routed over one or more Signal Transfer Points (STPs), which interconnect the two SSPs. The STP is like a special router designed for routing signaling messages within the SS7 network. STPs perform similar function in a circuit-switched network as routers do in an IP network. That's how a call works with SS&, but if Alice decides she wants to conference in another person with a mobile phone from the cellular network, her SSP could query a Service Control Point (SCP) repo, which controls advanced features such as finding mobile phone subscribers' SSPs and enabling conference Calls involving multiple networks.

Explain the 3 major components of the SIP architecture and how it works (e.g., Proxy server, Registrar Server, and Redirect Server)

The SIP architecture consist of: Proxy Server: used to relay packets within a network between the User Agent Client (UAC) and User Agent Server (UAS). It also forwards requests generated by callers to their respective recipients. Proxy servers are also generally used for name mapping, which allows the proxy server to interlink an external SIP system to an internal SIP client. Registrar Server: Keeps a centralized record of the updated location of all the users on the network. These addresses are stored on a location server. When a user initiates a SIP INVITE request, it gets sent to a Registrar or Location server, which responds back with the IP of the requested agent (e.g., "contact" sip:[email protected]). The UAC can then send the invite directly to the other UAC to establish a session. Redirect Server: Allows SIP devices to retain their SIP identities despite changes in their geographic location. This allows a device to remain accessible when its location is physically changed and hence while it moves through different networks. The use of redirect servers allows clients to remain within reach while they move through numerous network coverage zones.

What are some ways we can help secure meeting applications? For example, how can you prevent your employees from getting "zoom-bombed?"

To prevent attacks like "zoom-bombing," consider the following best practices: -Use Enterprise-grade products over consumer-grade products. They are more secure. -Use AES 256-bit encryption, when feasible. -Control access to very meeting. Enterprise-grade conferencing services can integrate with your identity and access management service to ensure strong authentication. Failing that, ensure that, at a minimum, each meeting is password-protected. -Enable the waiting room feature so you can screen callers before they enter the meeting. Restrict participants from sharing their screens or cameras, as appropriate. In big meetings, it's likely you don't need everyone to be on camera or have audio anyway. -Keep software updated. -Know how to eject unwanted participants. If you do get zoom-bombed, that is not the time to figure out how to eject (and lock out) an offending participant. Know how to do it beforehand.

True or False: DSL is obsolete

True. Despite being in wide use, DSL is an obsolete technology. Major telecommunications companies around the world have announced plans to phase out DSL by 2025.

VPN Split Tunnel vs VPN Full Tunnel

VPN Split Tunneling and VPN Full Tunneling are two different configurations in a VPN that dictate how network traffic is routed through the VPN connection. With Split Tunneling, only a portion of the device's internet traffic is routed through the VPN tunnel, while the rest accesses the internet directly without passing through the VPN. Allows simultaneous access to both local and remote networks, optimizing bandwidth usage by directing only necessary or sensitive traffic through the VPN. It can improve network performance for local resources while benefiting from VPN security for selected traffic. For example, users will be able to print from their home printer. But, should they pick up malware or become compromised on the Internet, they will automatically get a free ride into your corporate network through the VPN. Useful when users need to access both local resources (like printers, local servers) and remote resources through the VPN without compromising performance. It's also handy for conserving VPN bandwidth for sensitive data. Full Tunneling is the more secure alternative. It routes ALL of the device's internet traffic through the VPN tunnel, regardless of whether it's destined for the remote network or the public internet. Offers comprehensive security by encrypting all traffic, ensuring that even internet browsing or accessing local resources benefits from VPN encryption and protection. Ideal for scenarios where comprehensive security and encryption are essential for all online activities, especially when accessing the internet from untrusted or public networks.