AXIS Risk Management & Mitigation 4

Question 1

An organization's AXIS video management system (VMS) runs on a Windows Server that also hosts unrelated business applications. What risk mitigation principle does this violate?

Accepted Answer

Principle of least functionality

Answer

The principle of least functionality (also called minimal footprint) states that systems should run only the services needed for their specific role; mixing VMS with unrelated apps expands the attack surface.

Question 2

Which AXIS device feature can be used to trigger an automated response (such as locking a door) when a predefined risk event is detected?

Accepted Answer

AXIS ACAP event rules with action engine

Answer

AXIS cameras include an event/action engine that can trigger automated responses—including I/O relay signals to locking mechanisms—when specific events occur.

Question 3

A penetration test on an AXIS deployment finds that SNMP v1 is enabled on cameras. Why is this a significant risk?

Accepted Answer

SNMP v1 transmits community strings in plaintext, allowing credential interception

Answer

SNMP v1 sends community strings (effectively passwords) unencrypted, so an attacker with network access can capture them and use them to query or modify device configuration.

Question 4

What is the PRIMARY purpose of conducting a Business Impact Analysis (BIA) before deploying a large-scale AXIS surveillance system?

Accepted Answer

To identify which systems and functions are most critical if the surveillance system fails

Answer

A BIA identifies critical business functions and quantifies the impact of a surveillance system outage, informing recovery time objectives and prioritization of mitigation resources.

Question 5

An AXIS administrator wants to limit the damage if a single camera account is compromised. Which access control strategy BEST achieves this?

Accepted Answer

Assign each camera a unique operator-level account with minimal permissions

Answer

Unique, minimal-privilege accounts per camera follow the principle of least privilege; a compromised account then only grants access to that single device.

(AXIS) AXIS Certified Professional Technicians Practice Test

(AXIS) AXIS Certified Professional Technicians Practice Test

AXIS Risk Management & Mitigation 4