Certified Surveillance Technician (CST) — Questions and Answers

Question 1: A mantrap (or airlock) is used in physical security to:

Monitor card reader health via OSDP supervision
Store backup credentials offline
Control access by allowing only one person to pass between two interlocked doors at a time (Correct answer)
Prevent electromagnetic interference from entering server rooms

Correct answer: Control access by allowing only one person to pass between two interlocked doors at a time

A mantrap uses two interlocked doors so that the first must close and verify before the second opens, preventing tailgating and piggybacking.

Question 2: In VMS cybersecurity hardening, why should the default VMS administrative account username and password be changed immediately after installation?

Default accounts cannot be assigned camera permissions
Default accounts consume more system licenses
Changing credentials improves video frame rate
Default credentials are known publicly and represent an easy attack vector for unauthorized access (Correct answer)

Correct answer: Default credentials are known publicly and represent an easy attack vector for unauthorized access

Default credentials for VMS software are publicly documented by manufacturers, making systems with unchanged defaults immediately vulnerable to unauthorized access by anyone who knows the software brand.

Question 3: Which federal law governs the protection of stored electronic communications and gives users rights against unauthorized access by third parties, including employers in some contexts?

Stored Communications Act (SCA) (Correct answer)
Children's Online Privacy Protection Act (COPPA)
Computer Fraud and Abuse Act (CFAA)
Gramm-Leach-Bliley Act (GLBA)

Correct answer: Stored Communications Act (SCA)

The Stored Communications Act (Title II of ECPA) protects the privacy of stored electronic communications such as emails and restricts access by service providers and third parties.

Question 4: What is the function of a 'request-to-exit' (REX) device in an access control system?

It signals the panel to unlock the door for egress without using a credential (Correct answer)
It triggers a lockdown when motion is detected near a door
It prevents re-entry using the same card within a set time window
It reboots the card reader after a failed read

Correct answer: It signals the panel to unlock the door for egress without using a credential

A REX device (motion sensor or push button) signals the access control panel to release the door latch for egress, allowing exit without a card swipe.

Question 5: Under US federal guidelines, what should a surveillance system operator do with footage that may be evidence in a legal investigation?

Overwrite it after 24 hours per standard policy
Compress it to the lowest quality to save space
Delete it to protect privacy
Preserve it beyond the normal retention period and document the chain of custody (Correct answer)

Correct answer: Preserve it beyond the normal retention period and document the chain of custody

Footage relevant to a legal matter must be preserved as evidence with documented chain of custody, regardless of normal retention schedules.

Question 6: Why should unused network ports on a surveillance switch be administratively disabled?

To reduce electricity consumption significantly
To free up bandwidth for video streams
To improve PoE delivery to active ports
To prevent unauthorized devices from being plugged into the network (Correct answer)

Correct answer: To prevent unauthorized devices from being plugged into the network

Disabling unused switch ports prevents an attacker or unauthorized device from gaining network access by physically connecting to an open port.

Question 7: A company deploys facial recognition cameras in its lobby and uses biometric data to identify employees. Which state law framework most directly regulates this practice?

State biometric information privacy laws such as Illinois BIPA (Correct answer)
Title III, because facial recognition intercepts real-time communications
ECPA, because facial data is an electronic communication
The SCA, because facial templates are stored by a third-party provider

Correct answer: State biometric information privacy laws such as Illinois BIPA

Illinois' Biometric Information Privacy Act (BIPA) and similar state laws require notice, consent, and data-handling rules for biometric identifiers like facial recognition templates.

Question 8: What is the function of an alarm control panel's 'event log' or 'history buffer'?

To log maintenance schedules
To record a time-stamped sequence of system events for review and audit (Correct answer)
To queue alarm signals for transmission during communication failures
To store encrypted user PINs

Correct answer: To record a time-stamped sequence of system events for review and audit

The event log maintains a time-stamped record of alarms, arm/disarm actions, faults, and user activity, which is critical for post-incident investigation and system auditing.

Question 9: Which document should a technician reference to determine the manufacturer-recommended cleaning interval for a camera dome housing?

Local fire code
Site security policy
NEC codebook
Installation manual or maintenance guide (Correct answer)

Correct answer: Installation manual or maintenance guide

The manufacturer's installation manual or maintenance guide specifies recommended cleaning intervals specific to the equipment model.

Question 10: A CST technician is asked to perform a security audit on a surveillance system. Which tool would BEST identify open, potentially vulnerable ports on surveillance devices?

A multimeter
A port scanner such as Nmap (Correct answer)
A cable tester
A spectrum analyzer

Correct answer: A port scanner such as Nmap

A port scanner like Nmap probes network devices to identify open ports and running services that may present security vulnerabilities.

Question 11: An installer is verifying the 'walk test' of a PIR sensor. What movement pattern will produce the most reliable detection?

Walking across the detector's field of view (lateral movement) (Correct answer)
Crawling below the lowest detection beam
Walking directly toward the detector from the front
Standing still within the detection zone

Correct answer: Walking across the detector's field of view (lateral movement)

PIR detectors are most sensitive to lateral movement that crosses detection zones, maximizing the differential infrared signal as the body moves between segments of the Fresnel lens.

Question 12: Which power standard is commonly used to provide both data and power to networked access control readers and IP cameras?

RS-485
PoE (Power over Ethernet) (Correct answer)
UPS battery backup
12 VDC direct supply only

Correct answer: PoE (Power over Ethernet)

PoE delivers electrical power alongside data over a standard Ethernet cable, simplifying installation of network-connected access devices.

Question 13: In the context of card reader & biometric access, what role does continuous professional development play for CST practitioners?

It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit
It is required only during the first year of certification
It is optional and only needed for career advancement

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in card reader & biometric access because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 14: What is the purpose of re-torquing conduit fittings during a surveillance system maintenance inspection?

To comply with IP67 ratings for cameras
To ensure weathertight seals and prevent moisture ingress (Correct answer)
To reduce signal attenuation
To increase cable bandwidth

Correct answer: To ensure weathertight seals and prevent moisture ingress

Conduit fittings can loosen over time due to thermal expansion and vibration; re-torquing ensures weathertight seals that keep moisture and pests out of cable runs.

Question 15: A CST is hired to install cameras in a retail store's restrooms to detect theft. What is the correct course of action?

Install cameras with lens angles that avoid toilet fixtures
Proceed if the client signs a liability waiver
Refuse the installation as restrooms are protected private spaces under virtually all jurisdictions (Correct answer)
Install audio-only devices instead as a compromise

Correct answer: Refuse the installation as restrooms are protected private spaces under virtually all jurisdictions

Virtually every U.S. jurisdiction prohibits video surveillance in restrooms and changing areas regardless of the stated purpose, making this installation illegal.

Question 16: A technician installs a photoelectric beam detector along a 500-foot fence line. At installation, what initial adjustment is most critical for reliable operation?

Adjusting the detection range potentiometer to maximum
Setting the pulse frequency to match the receiver
Programming the panel zone to a 24-hour response type
Precisely aligning the transmitter beam with the center of the receiver lens (Correct answer)

Correct answer: Precisely aligning the transmitter beam with the center of the receiver lens

Precise optical alignment of the transmitter beam with the receiver lens is critical; misalignment reduces signal margin, increasing susceptibility to false alarms and missed detections over long distances.

Question 17: A CST technician segments camera traffic on VLAN 20 and workstation traffic on VLAN 10. What additional device is required for the NVR on VLAN 20 to send alerts to the security workstation on VLAN 10?

A router or Layer 3 switch to perform inter-VLAN routing (Correct answer)
A media converter between the two VLANs
A managed switch with port mirroring enabled
A second NVR dedicated to VLAN 10

Correct answer: A router or Layer 3 switch to perform inter-VLAN routing

Communication between different VLANs requires a router or Layer 3 switch to route packets between the isolated network segments.

Question 18: A biometric reader is experiencing a high False Rejection Rate (FRR). The FIRST corrective action should be to:

Lower the acceptance threshold to the minimum setting
Switch to a PIN-only access method
Re-enroll affected users with fresh, higher-quality templates (Correct answer)
Replace the biometric reader entirely

Correct answer: Re-enroll affected users with fresh, higher-quality templates

High FRR is often caused by poor-quality enrollment templates; re-enrolling users with careful, high-quality scans typically resolves the issue.

Question 19: In surveillance storage planning, what does 'retention period' refer to?

The duration of a single camera's recording session
The length of time recorded footage is kept before being overwritten or deleted (Correct answer)
The time it takes to retrieve a video clip
The warranty period for the DVR/NVR

Correct answer: The length of time recorded footage is kept before being overwritten or deleted

Retention period defines how long video footage is stored before the system automatically overwrites or purges it.

Question 20: Which quality assurance method is most commonly applied in fourth amendment & privacy laws to verify that CST professional standards are being met?

Annual reviews conducted exclusively by non-technical management
Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Informal self-assessment without external validation
Relying on client satisfaction surveys as the sole measure of quality

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in fourth amendment & privacy laws, providing objective, measurable evidence that CST standards are consistently met.

Question 21: The Stored Communications Act (SCA), part of ECPA, governs access to:

Emails and other communications stored by electronic service providers (Correct answer)
Real-time audio surveillance in workplaces
Pen register data collected by ISPs
Video surveillance footage held by private businesses

Correct answer: Emails and other communications stored by electronic service providers

The SCA protects the privacy of stored wire and electronic communications held by third-party service providers such as email hosts.

Question 22: During an IP camera installation, the camera obtains an APIPA address (169.254.x.x) instead of a valid IP from the DHCP server. What is the most likely cause?

The switch port VLAN is incorrectly configured, and APIPA is the camera's VLAN fallback
The camera firmware is outdated and incompatible with the current DHCP server version
The DHCP server did not respond and the camera self-assigned a link-local address (Correct answer)
The PoE budget is insufficient, causing intermittent camera boot failures

Correct answer: The DHCP server did not respond and the camera self-assigned a link-local address

An APIPA address (169.254.x.x) is automatically assigned when a device cannot reach a DHCP server, indicating a network connectivity or DHCP configuration issue.

Question 23: Which of the following is a fundamental principle of card reader & biometric access as it applies to Certified Surveillance Technician?

Systematic evaluation and adherence to established industry standards (Correct answer)
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Prioritizing speed of completion over accuracy and compliance

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of card reader & biometric access in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 24: When installing cameras in a facility that processes cardholder data, which compliance framework governs physical security requirements including surveillance system placement?

SOC 2 Type II Availability Criteria
NIST SP 800-53 Moderate Baseline
PCI DSS (Payment Card Industry Data Security Standard) (Correct answer)
HIPAA Security Rule (45 CFR Part 164)

Correct answer: PCI DSS (Payment Card Industry Data Security Standard)

PCI DSS includes physical security requirements, including monitoring of card data environments with surveillance cameras to protect cardholder data.

Question 25: A surveillance technician is asked to install a hidden audio recorder in an employee break room. Which legal concern is MOST relevant?

HIPAA patient privacy rules
OSHA workplace safety regulations
FERPA educational records protections
State wiretapping or eavesdropping statutes requiring consent (Correct answer)

Correct answer: State wiretapping or eavesdropping statutes requiring consent

Hidden audio recording in a break room implicates state wiretapping/eavesdropping laws, many of which require all-party consent for recording private conversations.

Question 26: A technician is troubleshooting a PTZ camera that responds to pan and tilt commands but fails to operate the zoom function. What is the most likely cause?

The RS-485 control cable polarity is reversed, affecting only zoom data packets
The camera's zoom motor or the zoom control channel in the PTZ protocol configuration is faulty (Correct answer)
The NVR firmware does not support zoom commands for this camera's protocol version
The camera is operating in fixed-lens mode and zoom requires a hardware lens module upgrade

Correct answer: The camera's zoom motor or the zoom control channel in the PTZ protocol configuration is faulty

When pan/tilt work but zoom does not, the issue is likely isolated to the zoom motor mechanism, its control wiring, or an incorrect zoom address in the PTZ controller configuration.

Question 27: What is the primary ethical obligation of a CST professional when a conflict of interest arises during intrusion detection & monitoring activities?

Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Resolve the conflict privately without informing stakeholders
Proceed while favoring the outcome that benefits the professional personally
Ignore the conflict if it does not directly affect the current task

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in intrusion detection & monitoring is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 28: Which action should a technician take FIRST when arriving to export evidence from a DVR at a crime scene?

Disconnect the DVR from the network to prevent remote tampering
Begin exporting all available footage immediately
Reboot the DVR to clear any errors before export
Photograph the DVR display showing current date and time alongside a reference clock (Correct answer)

Correct answer: Photograph the DVR display showing current date and time alongside a reference clock

Photographing the DVR clock display next to a reference clock immediately documents the time discrepancy before any changes occur.

Question 29: In a school environment, where should cameras NOT be placed due to privacy regulations?

Restrooms and locker rooms (Correct answer)
Main hallways
Parking lots
Building entrances

Correct answer: Restrooms and locker rooms

Cameras in restrooms and locker rooms are prohibited by privacy laws and regulations, including FERPA considerations and state statutes.

Question 30: When documenting activities related to video management software, which practice is considered essential for CST certification holders?

Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
Keeping documentation in personal notes that are not accessible to other team members
Recording only outcomes while omitting the methods and processes used
Completing documentation only when requested by auditors or supervisors

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in video management software. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 31: During system commissioning, a PIR detector repeatedly triggers false alarms near a south-facing window. The most likely cause is:

Insufficient detection range
A faulty tamper switch
Thermal masking from sunlight heating the detection zone (Correct answer)
Incorrect wiring polarity

Correct answer: Thermal masking from sunlight heating the detection zone

Direct sunlight can heat surfaces within the PIR's detection pattern, creating thermal gradients that mimic body heat and trigger false alarms.

Question 32: When enrolling a finger for a fingerprint reader, best practice requires capturing how many sample scans?

2
10 or more
3 to 5 (Correct answer)
1

Correct answer: 3 to 5

Capturing 3 to 5 sample scans during enrollment creates a more robust biometric template and reduces false rejections.

Question 33: Which technology uses a 13.56 MHz frequency and supports onboard data encryption for contactless smart card access?

Magnetic stripe
Barcode
125 kHz HID Prox
MIFARE / iCLASS (Correct answer)

Correct answer: MIFARE / iCLASS

MIFARE and iCLASS operate at 13.56 MHz and use cryptographic keys stored on the card chip, providing encrypted, more secure contactless transactions.

Question 34: In the context of evidence export & timestamping, what role does continuous professional development play for CST practitioners?

It is optional and only needed for career advancement
It is required only during the first year of certification
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in evidence export & timestamping because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 35: The California Consumer Privacy Act (CCPA) grants California residents rights regarding personal information collected by businesses. For a surveillance company, this MOST likely means:

All surveillance footage of California residents must be destroyed within 24 hours
Businesses must disclose what personal data (including surveillance footage) they collect and honor deletion requests under specified conditions (Correct answer)
Surveillance footage is explicitly exempted from CCPA as security data
Only footage shared with law enforcement is subject to CCPA requirements

Correct answer: Businesses must disclose what personal data (including surveillance footage) they collect and honor deletion requests under specified conditions

CCPA requires covered businesses to inform consumers of data collected (which can include surveillance footage) and to honor rights of access and deletion, subject to applicable exemptions.

Question 36: In intrusion detection systems, what does the term 'cross-zoning' refer to?

Dividing a facility into geographic sectors
Requiring two separate zones to alarm before triggering a response (Correct answer)
Wiring sensors across multiple panels
Connecting zones from different buildings

Correct answer: Requiring two separate zones to alarm before triggering a response

Cross-zoning requires activation of two independent detection zones to confirm an intrusion before generating an alarm, significantly reducing false alarm rates.

Question 37: A security director requests cameras with license plate capture capability at a parking garage entrance. What lens specification is most critical for this application?

Long focal length lens (12mm or greater) to narrow the field of view and capture plate detail (Correct answer)
Short 2.8mm lens to capture both the vehicle and surrounding area
Wide dynamic range (WDR) sensor to handle varying light conditions
Fish-eye lens to capture the widest possible view of approaching vehicles

Correct answer: Long focal length lens (12mm or greater) to narrow the field of view and capture plate detail

License plate capture requires a narrow field of view achieved with a longer focal length lens to capture enough pixel density on the plate for character recognition.

Question 38: Which access control model assigns permissions based on a user's role within an organization rather than individual identity?

Attribute-Based Access Control (ABAC)
Discretionary Access Control (DAC)
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC) (Correct answer)

Correct answer: Role-Based Access Control (RBAC)

RBAC grants access permissions based on defined organizational roles (e.g., 'employee,' 'manager,' 'security'), simplifying large-scale access management.

Question 39: In Carpenter v. United States (2018), the Supreme Court ruled that accessing historical cell-site location information (CSLI) requires:

Notification to the target within 90 days
Consent from the cellular carrier only
A subpoena certified as relevant to an investigation
A warrant supported by probable cause (Correct answer)

Correct answer: A warrant supported by probable cause

Carpenter held that the third-party doctrine does not apply to historical CSLI because it reveals a detailed chronicle of a person's movements and requires a warrant.

Question 40: Which camera type is best suited for monitoring a large open parking lot with varying light conditions throughout the day?

Fixed focal length dome camera
Pinhole covert camera
Wide dynamic range (WDR) PTZ camera (Correct answer)
Standard analog bullet camera

Correct answer: Wide dynamic range (WDR) PTZ camera

A WDR PTZ camera handles high-contrast lighting and can pan to cover a large parking lot area effectively.

Question 41: An active infrared beam detector generates a fault condition when the receiver signal drops by what typical threshold percentage?

75%
25% (Correct answer)
50%
10%

Correct answer: 25%

Most active IR beam detectors are engineered to alarm when received signal strength drops by approximately 25%, balancing sensitivity with immunity to minor obstructions like fog or insects.

Question 42: When configuring a static IP address on an IP camera, which four parameters are typically required?

IP address, default gateway, RTSP port, HTTP port
IP address, subnet mask, VLAN ID, port number
IP address, MAC address, SSID, port number
IP address, subnet mask, default gateway, DNS server (Correct answer)

Correct answer: IP address, subnet mask, default gateway, DNS server

Static IP configuration requires at minimum an IP address, subnet mask, default gateway, and DNS server to enable network communication.

Question 43: Which quality assurance method is most commonly applied in cctv camera selection & placement to verify that CST professional standards are being met?

Annual reviews conducted exclusively by non-technical management
Relying on client satisfaction surveys as the sole measure of quality
Informal self-assessment without external validation
Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in cctv camera selection & placement, providing objective, measurable evidence that CST standards are consistently met.

Question 44: What is the BEST method to verify the integrity of a firmware update file before installing it on a surveillance device?

Check the file size only
Install it and see if the device boots
Check the file date
Verify the file's cryptographic hash (MD5/SHA) against the manufacturer's published value (Correct answer)

Correct answer: Verify the file's cryptographic hash (MD5/SHA) against the manufacturer's published value

Comparing the cryptographic hash of the downloaded file against the manufacturer's published hash confirms the file has not been tampered with.

Question 45: What is the purpose of enabling HTTPS instead of HTTP on an IP camera's web interface?

To encrypt login credentials and configuration data in transit (Correct answer)
To increase storage capacity
To allow faster video streaming
To enable PTZ control

Correct answer: To encrypt login credentials and configuration data in transit

HTTPS encrypts communication between the browser and the camera's web interface, protecting credentials from being intercepted.

Question 46: What document must accompany exported video evidence to maintain admissibility throughout its custody lifecycle?

A warranty certificate for the recording equipment
A chain of custody form signed by each person who handled the evidence (Correct answer)
An insurance policy for the storage media
A manufacturer's spec sheet for the DVR

Correct answer: A chain of custody form signed by each person who handled the evidence

A chain of custody form documents every transfer and handling of evidence, establishing an unbroken record required for court admissibility.

Question 47: A court requests surveillance video with 'authenticated timestamps.' Which method provides the strongest authentication?

Submitting the original DVR hard drive without export
Cross-referencing DVR footage with synchronized NTP logs and providing a signed affidavit of time verification (Correct answer)
Verbal testimony from the technician about when the recording was made
Showing the on-screen date/time display in the video

Correct answer: Cross-referencing DVR footage with synchronized NTP logs and providing a signed affidavit of time verification

Combining NTP log cross-reference with a signed affidavit creates a legally defensible, corroborated timestamp authentication chain.

Question 48: Which quality assurance method is most commonly applied in card reader & biometric access to verify that CST professional standards are being met?

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Informal self-assessment without external validation
Relying on client satisfaction surveys as the sole measure of quality
Annual reviews conducted exclusively by non-technical management

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in card reader & biometric access, providing objective, measurable evidence that CST standards are consistently met.

Question 49: What is the primary advantage of using a cellular communicator as a backup path for an alarm system?

It provides communication even when telephone lines are cut or disabled (Correct answer)
It eliminates the need for a control panel
It reduces the central station monitoring fees
It allows wireless sensor installation

Correct answer: It provides communication even when telephone lines are cut or disabled

Cellular communicators operate independently of landline infrastructure, ensuring alarm signals reach the central station even if an intruder cuts the telephone lines.

Question 50: During export, a technician discovers the DVR's footage has gaps (missing minutes) in the recorded timeline. What must be documented?

The start and end time of each gap, possible cause, and whether the gap existed before export began (Correct answer)
Only the gap duration
The total percentage of footage lost
Nothing—gaps are normal and do not require documentation

Correct answer: The start and end time of each gap, possible cause, and whether the gap existed before export began

Documenting each gap's precise timing, extent, and pre-existing nature prevents the gaps from being attributed to tampering during the export process.

Question 51: In a monitored alarm system, what is the standard communication path used as a primary channel under UL 2050 requirements?

Internet (IP) transmission
Cellular-only transmission
Radio frequency (RF) transmission
Digital communicator over PSTN (Correct answer)

Correct answer: Digital communicator over PSTN

UL 2050 traditionally recognizes the digital communicator over the Public Switched Telephone Network (PSTN) as the primary communication path, though IP and cellular are now widely used as supplements or replacements.

Question 52: What is the primary ethical obligation of a CST professional when a conflict of interest arises during card reader & biometric access activities?

Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Resolve the conflict privately without informing stakeholders
Ignore the conflict if it does not directly affect the current task
Proceed while favoring the outcome that benefits the professional personally

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in card reader & biometric access is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 53: Which wiring configuration is required to ensure a contact device reports both an alarm condition AND a tamper condition on a single two-wire circuit?

Normally closed (NC) contact with end-of-line resistor
Normally open (NO) contact only
Four-wire supervised loop
Double-balanced circuit with two resistors (Correct answer)

Correct answer: Double-balanced circuit with two resistors

A double-balanced circuit uses two resistors—one in series and one in parallel—to create three distinct resistance states: normal, alarm, and tamper/short.

Question 54: Which biometric technology analyzes the pattern of veins beneath the skin surface for identification?

Facial geometry mapping
Fingerprint ridge mapping
Retinal blood vessel scanning
Vascular (vein) pattern recognition (Correct answer)

Correct answer: Vascular (vein) pattern recognition

Vascular recognition captures near-infrared images of subcutaneous vein patterns in the hand or finger, which are extremely difficult to spoof.

Question 55: An iris recognition system is classified as which type of biometric modality?

Soft biometric
Physiological biometric (Correct answer)
Behavioral biometric
Token-based credential

Correct answer: Physiological biometric

Iris recognition is a physiological biometric because it measures a stable, physical characteristic of the human body.

Question 56: In perimeter intrusion detection, a buried geophone cable detects which type of threat?

Changes in soil moisture indicating tunnel digging
Electromagnetic interference from nearby equipment
RF signals from unauthorized communication devices
Ground vibrations caused by footsteps or vehicle movement (Correct answer)

Correct answer: Ground vibrations caused by footsteps or vehicle movement

Geophone (seismic) cables buried along a perimeter detect low-frequency ground vibrations generated by walking, running, or vehicle traffic, enabling early perimeter breach detection.

Question 57: What is the primary advantage of an NVR over a DVR for modern surveillance installations?

NVRs are less expensive than DVRs
NVRs only support analog cameras
NVRs do not require hard drives
NVRs process video data from IP cameras directly over the network (Correct answer)

Correct answer: NVRs process video data from IP cameras directly over the network

An NVR receives already-encoded digital video streams from IP cameras over the network, eliminating the need for analog encoding hardware.

Question 58: In a 'two-party consent' (all-party consent) state, recording a phone call legally requires:

Consent from the person initiating the call only
Consent from all parties to the conversation (Correct answer)
A court order regardless of consent
Written consent filed with the state attorney general

Correct answer: Consent from all parties to the conversation

All-party (two-party) consent states require every participant in a conversation to consent before the conversation may be legally recorded.

Question 59: In video analytics used for intrusion detection, what is a 'virtual tripwire'?

A software-defined line in a camera's field of view that triggers an alert when crossed (Correct answer)
A redundant recording channel that activates on motion
An encrypted communication channel between cameras
A physical laser barrier connected to a camera

Correct answer: A software-defined line in a camera's field of view that triggers an alert when crossed

A virtual tripwire is a user-defined line drawn within a camera's field of view; the analytics engine triggers an alert when an object crosses the line in a specified direction.

Question 60: Why is it necessary to check the camera’s field of view?

To ensure the camera covers the correct area without obstruction. (Correct answer)
To increase the recording capacity of the DVR.
To reduce the number of cameras needed.
To improve the camera’s visual quality.

Correct answer: To ensure the camera covers the correct area without obstruction.

Checking a camera's field of view is crucial to confirm that it captures the intended monitoring area effectively. This step helps identify and eliminate any obstructions, adjust angles, and ensure comprehensive coverage, preventing critical areas from being missed.

Question 61: What does RAID stand for in the context of NVR storage?

Recording Archive and Index Database
Real-time Automated Image Delivery
Remote Access and Integrated Data
Redundant Array of Independent Disks (Correct answer)

Correct answer: Redundant Array of Independent Disks

RAID (Redundant Array of Independent Disks) combines multiple drives to provide data redundancy, performance, or both.

Question 62: What is the primary purpose of a 'supervised' intrusion detection circuit?

To log all entry and exit events
To monitor operator login activity
To supervise guard patrol routes
To continuously verify circuit integrity and detect tampering or wiring faults (Correct answer)

Correct answer: To continuously verify circuit integrity and detect tampering or wiring faults

Supervised circuits use end-of-line resistors or active polling to detect open or short circuit conditions, indicating tampering, cut wires, or equipment failure.

Question 63: What is the purpose of a 'legal hold' in a surveillance storage context?

A storage encryption mode
A feature that prevents remote access to recordings
A directive to preserve specific video records beyond normal retention for litigation (Correct answer)
A lock placed on NVR hardware during servicing

Correct answer: A directive to preserve specific video records beyond normal retention for litigation

A legal hold suspends normal overwrite or deletion of specific footage to ensure it is available for potential litigation or investigation.

Question 64: RAID 5 requires a minimum of how many drives?

2
3 (Correct answer)
4
6

Correct answer: 3

RAID 5 requires at least 3 drives to distribute parity data across all drives while maintaining read/write performance.

Question 65: A site survey reveals strong backlight from windows in a lobby. Which camera feature directly addresses this challenge?

Mechanical IR cut filter
Digital noise reduction (DNR)
Optical zoom
Wide dynamic range (WDR) (Correct answer)

Correct answer: Wide dynamic range (WDR)

WDR technology simultaneously captures bright and dark areas of a scene, compensating for the intense backlight from lobby windows.

Question 66: Which factor has the GREATEST impact on the storage capacity required for a surveillance system?

The color of the camera housing
The resolution, frame rate, and compression codec used (Correct answer)
The type of camera mount
The length of the camera cable

Correct answer: The resolution, frame rate, and compression codec used

Higher resolution, higher frame rates, and less efficient codecs all increase the storage space consumed per hour of recorded video.

Question 67: In the context of ip camera & poe networking, what role does continuous professional development play for CST practitioners?

It is optional and only needed for career advancement
It serves primarily as a networking opportunity with no practical benefit
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in ip camera & poe networking because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 68: What type of cables are commonly used to connect cameras in a surveillance system?

Coaxial cables or CAT5/CAT6 cables. (Correct answer)
HDMI cables.
Fiber optic cables.
USB cables.

Correct answer: Coaxial cables or CAT5/CAT6 cables.

Coaxial cables are traditionally used for analog CCTV systems, while CAT5/CAT6 (Ethernet) cables are standard for modern IP-based surveillance systems. These cable types are chosen for their ability to transmit video signals reliably over distances, with CAT5/CAT6 also supporting Power over Ethernet (PoE).

Question 69: What is 'tailgating' in the context of access control?

A reader malfunction caused by excessive card swipes
A software glitch that grants access after hours
A biometric enrollment error that allows multiple users the same template
An unauthorized person following an authorized person through a secured door (Correct answer)

Correct answer: An unauthorized person following an authorized person through a secured door

Tailgating occurs when an unauthorized individual closely follows an authorized user through a secured entry point before the door closes.

Question 70: Which encryption standard is most commonly recommended for protecting stored video files on a VMS server?

Base64
SHA-1
AES-256 (Correct answer)
MD5

Correct answer: AES-256

AES-256 (Advanced Encryption Standard with 256-bit keys) is the industry-standard symmetric encryption algorithm recommended for protecting stored video data at rest.

Question 71: What is a hot spare drive in a RAID array used for surveillance?

A spare drive stored in a warehouse for future expansion
A drive used only for software backups
A drive that records at a higher frame rate
An extra drive kept powered and ready to automatically replace a failed drive (Correct answer)

Correct answer: An extra drive kept powered and ready to automatically replace a failed drive

A hot spare is an idle drive in the array that automatically begins rebuilding data when another drive fails, minimizing downtime.

Question 72: Under NFPA 731, who is qualified to perform the final acceptance test of an intrusion alarm system?

A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent (Correct answer)
Any licensed electrician
Only the local police department liaison
The building owner or their representative only

Correct answer: A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent

NFPA 731 requires acceptance testing to be performed by personnel qualified in alarm systems, typically demonstrated through certifications such as the ESA National Training School (NTS) or equivalent credentials.

Question 73: Under the UL 681 standard for installation of burglar and holdup alarm systems, what minimum wire gauge is typically required for detection circuit wiring?

14 AWG
16 AWG
18 AWG
22 AWG (Correct answer)

Correct answer: 22 AWG

UL 681 generally specifies a minimum of 22 AWG conductors for detection (zone) wiring in burglar alarm installations.

Question 74: Which standard governs the testing and listing requirements for access control system units in the United States?

ISO 27001
UL 681
NFPA 72
UL 294 (Correct answer)

Correct answer: UL 294

UL 294 is the standard for Access Control System Units, covering performance, construction, and testing requirements for listed access control equipment.

Question 75: A camera's horizontal field of view is 90°. If placed in a corridor 10 feet wide, approximately how far from the camera will the image cover the full corridor width?

20 feet
15 feet
10 feet
5 feet (Correct answer)

Correct answer: 5 feet

With a 90° horizontal FOV, the half-angle is 45°, so the image width equals the distance from the camera; a 10-foot-wide corridor is fully covered at 5 feet.

Question 76: A proximity card reader stops responding after a nearby lightning strike. The most likely damaged component is the:

Reader's surge protection or internal circuitry (Correct answer)
Card credential itself
Door strike mechanism
Access control software database

Correct answer: Reader's surge protection or internal circuitry

Lightning-induced surges most commonly damage the reader's electronics, particularly if surge protection devices are absent or insufficient.

Question 77: What is the purpose of motion-triggered recording in a surveillance storage strategy?

To reduce storage usage by only recording when activity is detected (Correct answer)
To automatically alert police when motion is detected
To enable pan-tilt-zoom on fixed cameras
To improve camera image quality during motion events

Correct answer: To reduce storage usage by only recording when activity is detected

Motion-triggered recording conserves storage by only writing video to disk when motion is detected rather than recording continuously.

Question 78: A card reader is mounted at a height that is inaccessible to wheelchair users. This violates requirements under which U.S. regulation?

OSHA 1910
NFPA 72
UL 294
Americans with Disabilities Act (ADA) (Correct answer)

Correct answer: Americans with Disabilities Act (ADA)

The ADA specifies maximum reach ranges for operable controls, requiring card readers to be mounted within accessible reach for wheelchair users.

Question 79: What does the term 'credential management' refer to in access control?

Physically installing card readers at entry points
The lifecycle process of issuing, tracking, modifying, and revoking access credentials (Correct answer)
Programming the door strike release time
Calibrating biometric reader sensitivity

Correct answer: The lifecycle process of issuing, tracking, modifying, and revoking access credentials

Credential management encompasses the entire lifecycle of access credentials — from issuance and assignment to modification and revocation.

Question 80: What distinguishes a 'holdup' alarm from a standard 'burglary' alarm in a commercial intrusion detection system?

Holdup alarms require police response; burglary alarms notify a guard service
Holdup alarms are always silent; burglary alarms always sound audibly
Holdup alarms use wireless sensors; burglary alarms use wired sensors
Holdup alarms are triggered covertly by occupants under duress; burglary alarms detect unauthorized entry (Correct answer)

Correct answer: Holdup alarms are triggered covertly by occupants under duress; burglary alarms detect unauthorized entry

Holdup (panic) alarms are activated covertly by employees when threatened by robbery, while burglary alarms respond automatically to unauthorized intrusion attempts.

Question 81: An IP camera manufacturer specifies a minimum illumination of 0.001 lux. What does this indicate about the camera?

The camera requires at least 0.001 lux of infrared light to operate
The camera can produce usable video in near-total darkness (Correct answer)
The camera's sensor area is 0.001 square meters
The camera requires 0.001 lux of UV light for color accuracy

Correct answer: The camera can produce usable video in near-total darkness

A minimum illumination of 0.001 lux indicates the camera can produce a usable image in near-complete darkness, typically using a large sensor or starlight technology.

Question 82: How should a maintenance technician document a camera that is functioning but has a partially obstructed field of view due to vegetation growth?

Reposition the camera without authorization
Mark it as failed and remove from service
Ignore it if the camera image is still visible
Log the obstruction, note required corrective action, and notify the site manager (Correct answer)

Correct answer: Log the obstruction, note required corrective action, and notify the site manager

Obstructions affecting coverage must be documented with recommended corrective action and communicated to the appropriate stakeholder for resolution.

Question 83: A seismic sensor installed on a safe would primarily detect which type of intrusion attempt?

Motion in the surrounding room
Electromagnetic field changes near the safe
Vibrations caused by drilling or cutting on the protected object (Correct answer)
Glass breakage in the vicinity

Correct answer: Vibrations caused by drilling or cutting on the protected object

Seismic sensors are tuned to detect low-frequency vibrations transmitted through solid objects, making them ideal for detecting physical attacks such as drilling or grinding on safes or vaults.

Question 84: In the context of workplace surveillance, a written acceptable use policy (AUP) serves primarily to:

Eliminate all employee privacy rights permanently
Allow employers to record personal calls made on personal devices
Substitute for legal compliance with state wiretapping laws
Provide clear notice that reduces employees' expectation of privacy on company systems and satisfies notification requirements (Correct answer)

Correct answer: Provide clear notice that reduces employees' expectation of privacy on company systems and satisfies notification requirements

An AUP provides employees with notice of monitoring practices, which courts often recognize as reducing the employee's reasonable expectation of privacy on company systems and satisfying legal notification requirements.

Question 85: Which storage media is generally preferred for long-term archival of exported surveillance video evidence?

USB flash drives (thumb drives)
Write-once optical media (DVD-R, BD-R) or WORM drives (Correct answer)
Rewritable DVD-RW discs
Standard magnetic hard drives

Correct answer: Write-once optical media (DVD-R, BD-R) or WORM drives

Write-once media physically prevents overwriting, providing tamper-evident storage that strengthens the case for unaltered evidence.

Question 86: What is the benefit of using cloud storage as a backup for on-site surveillance recordings?

It provides off-site redundancy so footage survives on-site theft, fire, or hardware failure (Correct answer)
Cloud storage eliminates the need for on-site NVRs entirely
It allows cameras to operate without network connectivity
Cloud storage reduces camera installation costs

Correct answer: It provides off-site redundancy so footage survives on-site theft, fire, or hardware failure

Off-site cloud backup ensures footage is preserved even if the on-site NVR is stolen, destroyed, or suffers a hardware failure.

Question 87: Which AI surveillance capability uses biometric data to identify individuals from camera footage?

Facial recognition (Correct answer)
Motion heatmapping
Crowd density estimation
License plate reading

Correct answer: Facial recognition

Facial recognition analyzes biometric facial features from video footage to identify or verify individuals against a database.

Question 88: Which VMS feature allows operators to automatically follow a moving subject across multiple fixed cameras without manual intervention?

Auto-tracking relay
PTZ autoguard
Video analytics handoff (Correct answer)
Camera sequence patrol

Correct answer: Video analytics handoff

Video analytics handoff uses motion detection and object tracking algorithms to automatically switch display focus and hand off tracking between overlapping fixed camera views.

Question 89: When an alarm panel is in 'test mode,' what is the expected behavior of alarm signals sent to the central station?

Signals are transmitted normally and treated as real alarms
Signals are suppressed entirely and not transmitted
Signals are re-routed to the local fire panel
Signals are transmitted but flagged so the central station knows not to dispatch (Correct answer)

Correct answer: Signals are transmitted but flagged so the central station knows not to dispatch

During test mode, the panel transmits signals to the central station but includes a test identifier, so operators acknowledge receipt without dispatching emergency responders.

Question 90: What is the primary ethical obligation of a CST professional when a conflict of interest arises during video management software activities?

Proceed while favoring the outcome that benefits the professional personally
Resolve the conflict privately without informing stakeholders
Ignore the conflict if it does not directly affect the current task
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in video management software is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 91: Which maintenance task helps prevent video loss caused by bit rot on surveillance hard drives?

Enabling motion-only recording
Regularly running drive health diagnostics and replacing aging drives on schedule (Correct answer)
Reducing the number of camera channels
Increasing camera resolution

Correct answer: Regularly running drive health diagnostics and replacing aging drives on schedule

Scheduled SMART diagnostics and timely drive replacement are the primary defenses against bit rot and unexpected drive failure in surveillance systems.

Question 92: When documenting activities related to cctv camera selection & placement, which practice is considered essential for CST certification holders?

Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
Recording only outcomes while omitting the methods and processes used
Completing documentation only when requested by auditors or supervisors
Keeping documentation in personal notes that are not accessible to other team members

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in cctv camera selection & placement. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 93: A CST professional encounters an unfamiliar situation while performing intrusion detection & monitoring duties. What is the most appropriate first action?

Skip the task entirely and move to the next assignment
Proceed based on general assumptions to avoid delays
Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)
Apply a solution from an unrelated field without verification

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in intrusion detection & monitoring, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 94: Which VMS feature helps investigators find a specific person or vehicle across multiple cameras by searching for similar visual attributes?

Forensic video search or appearance search (Correct answer)
Motion heat mapping
License plate indexing
Event correlation engine

Correct answer: Forensic video search or appearance search

Forensic video search (also called appearance search) uses video analytics to search recorded footage for objects matching specified visual characteristics like clothing color or vehicle type across all cameras.

Question 95: A technician is programming an alarm control panel and needs to set the entry delay. Which of the following best describes the entry delay's purpose?

Delay between two zones alarming to enable cross-zoning
Time the panel waits before sending a signal to the central station
Time given to an authorized user to disarm the system after entering through a designated door (Correct answer)
Time allowed for a siren to sound before police are notified

Correct answer: Time given to an authorized user to disarm the system after entering through a designated door

The entry delay provides a defined window—typically 30 to 60 seconds—for authorized users to enter through a designated entry point and disarm the system before an alarm is triggered.

Question 96: Under GDPR (applicable when a U.S. firm handles data of EU residents), video surveillance footage that captures identifiable individuals is classified as:

Publicly available data exempt from all regulation
Criminal justice data exempt from standard GDPR rules
Personal data subject to GDPR's processing requirements and data subject rights (Correct answer)
Biometric data requiring explicit consent in all circumstances

Correct answer: Personal data subject to GDPR's processing requirements and data subject rights

GDPR classifies footage of identifiable individuals as personal data, requiring a lawful basis for processing, appropriate retention limits, and observance of data subject rights such as access and erasure.

Question 97: In the context of intrusion detection & monitoring, what role does continuous professional development play for CST practitioners?

It is optional and only needed for career advancement
It is required only during the first year of certification
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in intrusion detection & monitoring because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 98: A technician is troubleshooting a network switch that supports 24 PoE cameras. Eight cameras on the same switch suddenly go offline together. What is the most likely cause?

The NVR lost its license for those channels
The cameras' IR cut filters failed
The switch's PoE power budget has been exceeded (Correct answer)
All eight cameras failed simultaneously

Correct answer: The switch's PoE power budget has been exceeded

When multiple PoE cameras on the same switch go offline simultaneously, the most common cause is the switch reaching its total PoE power budget limit.

Question 99: When installing a card reader on an exterior wall, which environmental rating should be verified to ensure outdoor survivability?

NEMA 1
IP65 or higher (Correct answer)
UL 294
FCC Part 15

Correct answer: IP65 or higher

An IP65 rating confirms the device is dust-tight and protected against water jets, suitable for outdoor or harsh environment installation.

Question 100: What is the purpose of 'anti-passback' in an access control system?

Limiting the number of cards that can be enrolled per reader
Encrypting card data transmitted over the Wiegand bus
Preventing a card from being used to exit before it has been used to enter (Correct answer)
Blocking access to all doors after a security alarm is triggered

Correct answer: Preventing a card from being used to exit before it has been used to enter

Anti-passback prevents a credential from being used to re-enter (or exit) a zone unless the corresponding entry (or exit) event was first recorded, stopping card sharing.

Certified Surveillance Technician (CST)

The CST certification validates proficiency in designing, installing, and maintaining electronic surveillance systems including CCTV cameras, access control, intrusion detection, network security, and digital storage solutions. It covers the full scope of skills required for professional surveillance technicians across physical security and IP-based systems.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds