AXIS Risk Management & Mitigation 3

Question 1

An AXIS technician discovers that a camera stream is being intercepted on the LAN. Which technology would MOST directly prevent this type of eavesdropping?

Accepted Answer

Enabling RTSP over TLS (RTSPS)

Answer

RTSP over TLS encrypts the video stream in transit, preventing plaintext interception by anyone on the same network segment.

Question 2

What does a 'residual risk' represent after security controls have been applied to an AXIS surveillance system?

Accepted Answer

The risk remaining after all mitigations are in place

Answer

Residual risk is the remaining exposure after all chosen security controls and mitigations have been implemented.

Question 3

Which vulnerability in older AXIS camera firmware is MOST commonly exploited in supply-chain or third-party integration scenarios?

Accepted Answer

Hard-coded default credentials not changed at deployment

Answer

Hard-coded or unchanged default credentials are one of the most frequently exploited vulnerabilities in IoT deployments, including third-party integrations that retain factory defaults.

Question 4

A physical security audit reveals that an outdoor AXIS camera enclosure can be opened without tools. Which risk category does this PRIMARILY represent?

Accepted Answer

Physical tamper risk

Answer

An enclosure accessible without tools exposes internal hardware to direct physical manipulation, which is classified as a physical tamper risk.

Question 5

AXIS CEVD (Coordinated External Vulnerability Disclosure) is a program designed to:

Accepted Answer

Allow external researchers to report vulnerabilities responsibly

Answer

AXIS CEVD provides a structured channel for security researchers to report vulnerabilities to AXIS before public disclosure, enabling coordinated patching.

(AXIS) AXIS Certified Professional Technicians Practice Test

(AXIS) AXIS Certified Professional Technicians Practice Test

AXIS Risk Management & Mitigation 3