H11-861_V4-0 practice question 2 of 15

In the encrypted conference scenario, the SIP transmission type must be set to TLS on both the MCU and endpoint.

Full set: 60 questions
Answer options
A: TRUE
B: FALSE
Correct Answer:
TRUE
Explanation

In a secure or encrypted video conference, it is imperative to protect both the signaling traffic (call setup, control, and teardown) and the media traffic (audio and video streams). The Session Initiation Protocol (SIP) is used for signaling. To encrypt this signaling traffic, SIP must be transported over a secure protocol, which is Transport Layer Security (TLS). For a secure connection to be successfully established between a conference endpoint and the Multipoint Control Unit (MCU), both devices must be configured to use the same transport protocol. Therefore, in an encrypted conference scenario, both the MCU and the endpoint must have their SIP transmission type set to TLS to ensure the confidentiality and integrity of the signaling messages.

Why Incorrect

The alternative, "False," is incorrect because failing to use TLS on both the MCU and the endpoint would mean the SIP signaling would be transmitted in plaintext over UDP or TCP. This would expose sensitive call control information, such as participant details and call parameters, to potential eavesdropping, which violates the fundamental requirement of an "encrypted conference scenario." While media encryption (using SRTP) is also crucial, it does not protect the signaling plane; secure signaling via TLS is a mandatory and distinct component of a fully encrypted conference.

References

1. Huawei CloudMCU V600R019C10 Administrator Guide: In the section "Security Management > Certificate Management > Configuring a SIP TLS Encrypted Channel," the guide explicitly states the procedure for enabling encrypted signaling. It details that for a secure SIP trunk, the "Transport protocol" must be set to "TLS." This implies that both the CloudMCU and the connecting device (the endpoint) must be configured for TLS to establish the encrypted channel. (Reference: Section 10.3.4, "Configuring a SIP TLS Encrypted Channel").

2. Huawei HCIA-Video Conference V4.0 Training Material (H11-861): The official training materials for this certification cover conference security in detail. In the module discussing security protocols, it is specified that H.323 signaling is secured by H.235, while SIP signaling is secured using TLS. The material emphasizes that for end-to-end signaling encryption, both the terminal (endpoint) and the platform (MCU) must enable and be configured for TLS transport. (Reference: HCIA-Video Conference V4.0 Training Material, Chapter on "Video Conferencing Security Technology").

3. Huawei TE30, TE40, TE50, TE60, TX50, RP100, RP200 V600R019C00 Administrator Guide: In the section "Security > TLS," the guide explains, "The endpoint supports Transport Layer Security (TLS) to encrypt signaling and communication with other devices." It further details the configuration steps, which require selecting "TLS" as the "SIP transport protocol." This configuration on the endpoint must match the server's (MCU's) configuration for a secure call to be established. (Reference: Chapter 12, "Security," specifically the subsection on TLS configuration for SIP).

Scroll to Top