CompTIA CASP+ Practice Test

Which security control is most likely to mitigate VoIP DoS attacks that cause call drops and garbled signals?

1. Intrusion detection system

2. Firewalls with QoS settings

3. Load balancers

4. Network segmentation

The correct answer is: Firewalls with QoS settings

Firewalls with Quality of Service (QoS) settings are particularly effective in mitigating VoIP Denial of Service (DoS) attacks that can lead to call drops and poor signal quality. QoS settings prioritize traffic on a network, allowing important data packets related to VoIP communication, such as voice streams, to be transmitted with higher priority over less critical traffic. In VoIP environments, maintaining the quality and reliability of voice communications is essential, and DoS attacks often seek to overwhelm the network or disrupt the flow of VoIP data. By configuring firewalls to manage bandwidth allocation and prioritizing VoIP traffic, organizations can help ensure that voice communication remains stable even under duress from potential attacks. This proactive approach minimizes the impact of malicious traffic and enhances the overall resilience of VoIP services. While intrusion detection systems can identify and alert on attacks, they do not actively mitigate the effects of DoS. Load balancers help distribute traffic across servers but may not specifically address the prioritization of VoIP traffic. Network segmentation can enhance security by isolating certain network segments but does not inherently protect VoIP from DoS attacks. Therefore, firewalls with QoS settings are the most direct solution for addressing the specific challenges posed by VoIP Do