Explanation: VoIP is more vulnerable to man-in-the-middle attacks. In the man-in-the- middle attack, the attacker intercepts call-signaling SIP message traffic and masquerades as the calling party to the called party, and vice-versa. The attacker can hijack calls via a redirection server after gaining this position.
Answer option A is incorrect. Call tampering involves tampering a phone call in progress.
Answer option D is incorrect. DoS attacks occur by flooding a target with unnecessary SIP call-signaling messages. It degrades the service and causes calls to drop prematurely and halts call processing.
Answer option C is incorrect. In eavesdropping, hackers steal credentials and other information.

Change Management is used to ensure that standardized methods and procedures are used for efficient handling of all changes. A change is "an event that results in a new status of one or more configuration items (CIs)" approved by management, cost effective, enhances business process changes (fixes) - with a minimum risk to IT infrastructure. The main aims of Change Management are as follows:
* Minimal disruption of services
* Reduction in back-out activities
* Economic utilization of resources involved in the change
Answer option B is incorrect. Configuration Management (CM) is an Information Technology Infrastructure Library (ITIL) IT Service Management (ITSM) process. It tracks all of the individual Configuration Items (CI) in an IT system, which may be as simple as a single server, or as complex as the entire IT department. In large organizations a configuration manager may be appointed to oversee and manage the CM process.
Answer option A is incorrect. Exception management is a process in which experienced personnel and software tools are used to investigate, resolve, and handle process deviation, malformed data, infrastructure or connectivity issues. It increases the efficiency of business processes and contributes in the progress of business.
Answer option C is incorrect. Risk Management is used to identify, assess, and control risks. It includes analyzing the value of assets to the business, identifying threats to those assets, and evaluating how vulnerable each asset is to those threats. Risk Management is part of Service Design and the owner of the Risk Management is the Risk Manager.
Risks are addressed within several processes in ITIL V3; however, there is no dedicated Risk Management process. ITIL V3 calls for "coordinated risk assessment exercises', so at IT Process Maps we decided to assign clear responsibilities for managing risks.

Explanation: Answer option C is correct.
Social networking web sites provide a virtual community in which people with a shared interest may communicate. These sites provide users the ability to create their profile page.
The users can post their thoughts, ideas, and anything else and can share it with their friends. Some popular social networking sites are MySpace, Twitter, and Facebook.
Answer option A is incorrect. Electronic commerce, commonly known as e-commerce or eCommerce, or e-business consists of the buying and selling of products or services over electronic systems such as the Internet and other computer networks. The amount of trade conducted electronically has grown extraordinarily with widespread Internet usage. E- commerce sites can be used by users to browse various products and to make purchases.
Amazon.com is an example of an e-commerce site.
Answer options D and B are incorrect. These are not valid options.

Transport Layer Security (TLS) and its predecessor. Secure Sockets Layer (SSL), are cryptographic protocols that provide security for communications over networks, such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end.
Several versions of the protocols are in widespread use in applications like web browsing, electronic mail, Internet faxing, instant messaging and voice-over-IP (VoIP).
The TLS protocol allows client/server applications to communicate across a network in a way designed to prevent eavesdropping and tampering. TLS provides endpoint authentication and communications confidentiality over the Internet using cryptography.
TLS provides RSA security with 1024 and 2048 bit strengths.
In typical end-user/browser usage, TLS authentication is unilateral: only the server is authenticated (the client knows the server's identity), but not vice versa (the client remains unauthenticated or anonymous).
TLS also supports the more secure bilateral connection mode (typically used in enterprise applications), in which both ends of the "conversation"' can be assured with whom they are communicating (provided they diligently scrutinize the identity information in the other party's certificate). This is known as mutual authentication, or 2SSL. Mutual authentication requires that the TLS client-side also hold a certificate (which is not usually the case in the end-user/browser scenario). Unless, that is. TLS-PSK. the Secure Remote Password (SRP) protocol or some other protocol is used that can provide strong mutual authentication in the absence of certificates.
Typically, the key information and certificates necessary for TLS are handled in the form of
X.509 certificates, which define required fields and data formats.
SSL operates in modular fashion. It is extensible by design, with support for forward and backward compatibility and negotiation between peers.
Answer option B is incorrect. Hypertext Transfer Protocol Secure (HTTPS) is a protocol used in the Universal Resource Locater (URL) address line to connect to a secure site.
When an SSL connection is established between a Web browser and a Web server, HTTPS should be entered, instead of HTTP, as the protocol type in the URL. HTTPS uses TCP port 443 as the default port.
Answer option C is incorrect. The Simple Network Management Protocol (SNMP) allows a monitored device (for example, a router or a switch) to run an SNMP agent. This protocol is used for managing many network devices remotely.
When a monitored device runs an SNMP agent, an SNMP server can then query the SNMP agent running on the device to collect information such as utilization statistics or device configuration information. An SNMP-managed network typically consists of three components: managed devices, agents, and one or more network management systems.

Vulnerability scanners work on the concept of port scanners. In addition to identifying hosts and open ports, a vulnerability scanner also provides information on the associated vulnerabilities. Vulnerability scanners are very useful to identify out-of-date software versions, applicable patches, system upgrades, etc. The weakness of these scanners is that they can only identify surface vulnerabilities. These scanners are unable to address the overall risk level of a scanned network.
Answer option B is incorrect. Paros is a Web application vulnerability scanner that supports editing /viewing HTTP/HTTPS messages on-the-fly to change items such as cookies and form fields. It also includes various features, such as Web traffic recorder, Web spider, hash calculator, and a scanner for testing common Web application attacks such as SQL injection and cross-site scripting. A SYN scan is a type of TCP scanning. This scan type is also known as 'half-open scanning' because it does not open a full TCP connection. The port scanner generates a SYN packet. If the target port is open, it responds with a SYN- ACK packet. The scanner host responds with an RST packet that causes the connector before the handshake is completed.
Answer option C is incorrect. A port scanner is a software tool that is designed to search a network host for open ports. This tool is often used by administrators to check the security of their networks. It is also used by hackers to compromise the network and systems.