CSP Cybersecurity & Digital Surveillance 2 — Questions and Answers
Question 1: What type of attack involves an adversary intercepting and potentially altering communication between two parties without their knowledge?
- Denial of Service (DoS)
- Man-in-the-Middle (MitM) (Correct answer)
- SQL Injection
- Phishing
Correct answer: Man-in-the-Middle (MitM)
A Man-in-the-Middle attack occurs when an attacker secretly intercepts and relays messages between two parties who believe they are communicating directly.
Question 2: In digital surveillance systems, what is the primary purpose of network segmentation?
- To increase internet bandwidth
- To isolate surveillance networks from general corporate traffic (Correct answer)
- To reduce the number of cameras needed
- To simplify user authentication
Correct answer: To isolate surveillance networks from general corporate traffic
Network segmentation isolates surveillance systems on dedicated network segments, limiting exposure to breaches and unauthorized access from other network zones.
Question 3: Which protocol is most commonly used to encrypt web-based access to IP camera management interfaces?
- HTTP
- FTP
- HTTPS/TLS (Correct answer)
- Telnet
Correct answer: HTTPS/TLS
HTTPS using TLS encryption protects web-based camera management interfaces by encrypting data in transit between the browser and the device.
Question 4: A surveillance camera is discovered still using its factory-set default password. This represents which category of vulnerability?
- Zero-day vulnerability
- Default credential vulnerability (Correct answer)
- Buffer overflow
- Cross-site scripting
Correct answer: Default credential vulnerability
Default credential vulnerabilities occur when devices retain manufacturer-set usernames and passwords that are publicly known and never changed by the operator.
Question 5: What is the function of a VLAN (Virtual Local Area Network) in protecting a surveillance system?
- It increases video resolution transmitted over the network
- It logically separates surveillance traffic from other network traffic (Correct answer)
- It provides wireless connectivity to IP cameras
- It compresses video footage for storage
Correct answer: It logically separates surveillance traffic from other network traffic
VLANs logically segment network traffic so that surveillance devices operate on an isolated broadcast domain, reducing the risk of cross-network attacks.
Question 6: Which cybersecurity framework is most commonly referenced when assessing the security posture of critical infrastructure surveillance systems in the US?
- PCI DSS
- NIST Cybersecurity Framework (Correct answer)
- HIPAA Security Rule
- SOC 2 Type II
Correct answer: NIST Cybersecurity Framework
The NIST Cybersecurity Framework provides a voluntary set of standards and guidelines widely used for managing cybersecurity risk in critical infrastructure, including surveillance systems.
Question 7: In the context of IP-based surveillance, what does 'firmware hardening' primarily involve?
- Installing physical armor on camera housings
- Disabling unnecessary services and updating firmware to remove known vulnerabilities (Correct answer)
- Increasing the processing power of the camera
- Adding redundant power supplies to devices
Correct answer: Disabling unnecessary services and updating firmware to remove known vulnerabilities
Firmware hardening involves updating device firmware to patched versions and disabling unused ports, protocols, and services to minimize the attack surface.
CSP Cybersecurity & Digital Surveillance 2
What type of attack involves an adversary intercepting and potentially altering communication between two parties without their knowledge?