Which element enforces encryption policy on calls?

Which element enforces encryption policy on calls?

• A. Security Profile
• B. Trust List
• C. QoS Policy
• D. Media Gateway

Answer: (D)

Encryption of the call media is handled where the actual voice streams are processed and secured, which is at the Media Gateway. The gateway sits on the media path between endpoints and can be configured to require and apply encryption (such as SRTP) for calls that traverse it, effectively enforcing the encryption policy for those calls. Security Profile defines what encryption methods endpoints can use and how signaling is protected, but it doesn’t enforce encryption across the entire call path by itself. The Trust List governs certificate trust for secure communications, for example TLS, rather than actively enforcing media encryption. QoS Policy deals with network quality and traffic prioritization, not encryption. Therefore, the Media Gateway is the component that enforces encryption policy on calls.

Encryption of the call media is handled where the actual voice streams are processed and secured, which is at the Media Gateway. The gateway sits on the media path between endpoints and can be configured to require and apply encryption (such as SRTP) for calls that traverse it, effectively enforcing the encryption policy for those calls.

Security Profile defines what encryption methods endpoints can use and how signaling is protected, but it doesn’t enforce encryption across the entire call path by itself. The Trust List governs certificate trust for secure communications, for example TLS, rather than actively enforcing media encryption. QoS Policy deals with network quality and traffic prioritization, not encryption. Therefore, the Media Gateway is the component that enforces encryption policy on calls.