AXIS Risk Management & Mitigation 5

Question 1

An AXIS deployment uses AXIS Device Manager to manage 200 cameras. Which risk does centralized management software introduce that must be explicitly mitigated?

Accepted Answer

Compromise of the management server grants control over all managed devices

Answer

Centralized management creates a high-value single point of attack; compromising the management server can give an attacker simultaneous access to every device it manages.

Question 2

Which AXIS cybersecurity guideline recommends removing or disabling the root account and using named administrator accounts instead?

Accepted Answer

AXIS OS Hardening Guide

Answer

The AXIS OS Hardening Guide explicitly recommends disabling the root account and creating named accounts to improve accountability and reduce shared-credential risk.

Question 3

A risk assessment categorizes a threat as having 'low likelihood but catastrophic impact.' What is the RECOMMENDED treatment approach?

Accepted Answer

Implement controls to reduce impact and develop a contingency plan

Answer

Catastrophic-impact risks warrant impact-reduction controls and contingency planning regardless of low likelihood, because a single occurrence could be devastating.

Question 4

In an AXIS surveillance deployment, 'defense in depth' is BEST illustrated by which combination of controls?

Accepted Answer

Applying network segmentation, strong passwords, encrypted streams, and audit logging simultaneously

Answer

Defense in depth layers multiple independent security controls (network, authentication, encryption, audit) so that the failure of any one control does not result in a full breach.

Question 5

An organization wants to quantify risk numerically for budget justification. Which method assigns dollar values to potential losses to support this goal?

Accepted Answer

Quantitative risk assessment using Annual Loss Expectancy (ALE)

Answer

Quantitative risk assessment calculates Annual Loss Expectancy (ALE = SLE × ARO), providing dollar figures that directly support budget decisions.

(AXIS) AXIS Certified Professional Technicians Practice Test

(AXIS) AXIS Certified Professional Technicians Practice Test

AXIS Risk Management & Mitigation 5