Join the discussion
Question 14/23
The Avaya WebRTC solution uses the web intensively to make media calls from a standard web browser in the internet, into internal and secure communication premises in the enterprise.
Which statement about security between the Enterprise-edge and those standard Web browsers in the internet is true?
Which statement about security between the Enterprise-edge and those standard Web browsers in the internet is true?
Correct Answer: B
Explanation
Validation of the authorization token.
The WebRTC Snap-in will validate the authorization token created and encrypted by the web server. If the snap-in can decrypt the token and ensure that the time stamp is valid, it knows that the incoming HTTP request is valid. The time stamp will usually be short lived; on the order of 5-10seconds to protect against reply attacks.
References: Avaya WebRTC Snap-in Reference, Release 3.1 (May 2016), page 27
https://downloads.avaya.com/css/P8/documents/101013939
Validation of the authorization token.
The WebRTC Snap-in will validate the authorization token created and encrypted by the web server. If the snap-in can decrypt the token and ensure that the time stamp is valid, it knows that the incoming HTTP request is valid. The time stamp will usually be short lived; on the order of 5-10seconds to protect against reply attacks.
References: Avaya WebRTC Snap-in Reference, Release 3.1 (May 2016), page 27
https://downloads.avaya.com/css/P8/documents/101013939
Add Comments
- Other Question (23q)
- Q1. On Avaya Session Border Controller for Enterprise (SBCE), which statement about how to exa...
- Q2. What should be verified before running the initTM -f command on the Command Line Interface...
- Q3. Avaya Aura Presence Services 7.x is implemented on Avaya BreezeTM (formerly known as Engag...
- Q4. The provisioning script automatically runs as part of the first boot-up of the Avaya Sessi...
- Q5. In the context of Avaya Aura Presence Services 7.x, what is a Fetcher?...
- Q6. Which configuration must be completed before configuring a TSAPI link on Avaya Aura Applic...
- Q7. WebRTC is used for which type of calls?
- Q8. To allow trust between Avaya Aura System Manager (SMGR) and Avaya Aura Messaging (AAM), th...
- Q9. To watch Avaya Session Border Controller for Enterprise (SBCE) messages in real-time as th...
- Q10. In Avaya Session Border Controller for Enterprise (SBCE) 7.x, which two configuration scre...
- Q11. You are creating a SIP Entity for Avaya Aura Engagement Development Platform - EDP / Avaya...
- Q12. What are three ways of accessing Avaya Aura Application Enablement Services (AES) to perfo...
- Q13. If more than one Avaya BreezeTM node is available in the cluster, which statement about re...
- Q14. The Avaya WebRTC solution uses the web intensively to make media calls from a standard web...
- Q15. You are creating the identity certificates that must be installed in the Avaya Session Bor...
- Q16. Which statement about WebRTC and Media Resources is true?...
- Q17. When planning the Avaya Session Border Controller for Enterprise (SBCE) for SIP Trunking, ...
- Q18. The WebRTC snap-in needs to be loaded on which of Avaya BreezeTM cluster?...
- Q19. In the Avaya Session Border Controller for Enterprise (SBCE), before a traffic carrying Ne...
- Q20. Which statement describes Cross-Origin Resource Sharing (CORS)?...
- Q21. What is the process for establishing a command line session to the AES Management IP Addre...
- Q22. You need to connect Avaya BreezeTM platform that is hosting Avaya Aura Presence Services S...
- Q23. In Avaya Aura Communication Manager (CM) for TSAPI, which type of CTI-link needs to be con...
