AXIS Risk Management & Mitigation 2

Question 1

When conducting a risk assessment for an AXIS network video surveillance deployment, what is the FIRST step in the process?

Accepted Answer

Identify and inventory all assets in scope

Answer

Asset identification and inventory is always the first step in a risk assessment because you cannot protect or evaluate risk for assets you don't know exist.

Question 2

An AXIS camera is discovered on a network segment shared with corporate workstations. Which mitigation strategy BEST reduces lateral movement risk?

Accepted Answer

Move the camera to a dedicated VLAN

Answer

Placing cameras on a dedicated VLAN network-segments IoT devices from corporate endpoints, limiting an attacker's ability to pivot from a compromised camera to workstations.

Question 3

Which threat is MOST effectively mitigated by enabling IEEE 802.1X port-based authentication on switch ports connected to AXIS cameras?

Accepted Answer

Unauthorized physical replacement of a camera with a rogue device

Answer

IEEE 802.1X ensures that only authenticated devices can communicate on the network, so a rogue device plugged into a camera port cannot gain network access.

Question 4

A risk register entry shows 'likelihood: high, impact: low.' What is the MOST appropriate response strategy for this risk in an AXIS deployment?

Accepted Answer

Accept the risk with monitoring controls in place

Answer

High-likelihood, low-impact risks are typically accepted with monitoring because remediation cost often exceeds potential loss.

Question 5

AXIS recommends disabling unused services and ports on cameras as a hardening measure. This practice directly reduces which attack surface component?

Accepted Answer

Network-accessible entry points

Answer

Disabling unused services removes listening ports and protocols, shrinking the set of network entry points an attacker can exploit.

(AXIS) AXIS Certified Professional Technicians Practice Test

(AXIS) AXIS Certified Professional Technicians Practice Test

AXIS Risk Management & Mitigation 2