Certified Surveillance Technician (CST) — Questions and Answers

Question 1: In the context of workplace surveillance, a written acceptable use policy (AUP) serves primarily to:

Eliminate all employee privacy rights permanently
Substitute for legal compliance with state wiretapping laws
Provide clear notice that reduces employees' expectation of privacy on company systems and satisfies notification requirements (Correct answer)
Allow employers to record personal calls made on personal devices

Correct answer: Provide clear notice that reduces employees' expectation of privacy on company systems and satisfies notification requirements

An AUP provides employees with notice of monitoring practices, which courts often recognize as reducing the employee's reasonable expectation of privacy on company systems and satisfying legal notification requirements.

Question 2: What is the advantage of using HTTPS instead of HTTP for VMS web client access?

Reduced bandwidth consumption
Compatibility with more camera brands
Encrypted communication that protects credentials and video data in transit (Correct answer)
Faster video streaming throughput

Correct answer: Encrypted communication that protects credentials and video data in transit

HTTPS encrypts the data channel using TLS, preventing interception of login credentials and video streams by unauthorized parties during transmission.

Question 3: An NVR shows 'HDD Not Detected' after a fan failure event. What is the most likely explanation?

Overheating from the failed fan caused the HDD to shut down or fail (Correct answer)
The NVR's firmware corrupted the partition table
A camera's IP address conflicted with the NVR
The video codec changed automatically

Correct answer: Overheating from the failed fan caused the HDD to shut down or fail

Fan failure leads to thermal overload, which can cause hard drives to power down or suffer permanent damage from excessive heat.

Question 4: What is the purpose of 'anti-passback' in an access control system?

Encrypting card data transmitted over the Wiegand bus
Limiting the number of cards that can be enrolled per reader
Preventing a card from being used to exit before it has been used to enter (Correct answer)
Blocking access to all doors after a security alarm is triggered

Correct answer: Preventing a card from being used to exit before it has been used to enter

Anti-passback prevents a credential from being used to re-enter (or exit) a zone unless the corresponding entry (or exit) event was first recorded, stopping card sharing.

Question 5: What is the primary advantage of an NVR over a DVR for modern surveillance installations?

NVRs process video data from IP cameras directly over the network (Correct answer)
NVRs do not require hard drives
NVRs are less expensive than DVRs
NVRs only support analog cameras

Correct answer: NVRs process video data from IP cameras directly over the network

An NVR receives already-encoded digital video streams from IP cameras over the network, eliminating the need for analog encoding hardware.

Question 6: Under NFPA 731, who is qualified to perform the final acceptance test of an intrusion alarm system?

Only the local police department liaison
A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent (Correct answer)
Any licensed electrician
The building owner or their representative only

Correct answer: A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent

NFPA 731 requires acceptance testing to be performed by personnel qualified in alarm systems, typically demonstrated through certifications such as the ESA National Training School (NTS) or equivalent credentials.

Question 7: A security consultant recommends 'volumetric detection' for a high-value storage room. Which sensor type best fulfills this requirement?

Microwave or PIR sensors covering the interior space (Correct answer)
Door contacts on all entry points
Vibration sensors on the walls and ceiling
Glass break detectors on all windows

Correct answer: Microwave or PIR sensors covering the interior space

Volumetric detectors such as microwave or PIR sensors cover the three-dimensional interior space of a room, detecting any intruder who enters the volume regardless of how they gained access.

Question 8: How does motion detection in surveillance systems work?

By detecting light intensity.
By measuring sound levels.
By detecting changes in temperature.
By analyzing changes in the camera's field of view. (Correct answer)

Correct answer: By analyzing changes in the camera's field of view.

Motion detection in surveillance systems works by continuously analyzing the video feed for changes in pixel data within the camera's field of view. When the system detects a significant difference between consecutive frames, indicating movement, it triggers an alert or begins recording, effectively identifying activity.

Question 9: In the context of intrusion detection & monitoring, what role does continuous professional development play for CST practitioners?

It serves primarily as a networking opportunity with no practical benefit
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is required only during the first year of certification
It is optional and only needed for career advancement

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in intrusion detection & monitoring because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 10: A technician installs a photoelectric beam detector along a 500-foot fence line. At installation, what initial adjustment is most critical for reliable operation?

Programming the panel zone to a 24-hour response type
Setting the pulse frequency to match the receiver
Adjusting the detection range potentiometer to maximum
Precisely aligning the transmitter beam with the center of the receiver lens (Correct answer)

Correct answer: Precisely aligning the transmitter beam with the center of the receiver lens

Precise optical alignment of the transmitter beam with the receiver lens is critical; misalignment reduces signal margin, increasing susceptibility to false alarms and missed detections over long distances.

Question 11: A VMS administrator wants to prevent operators from exporting video without supervisory approval. Which permission setting achieves this?

Configuring cameras to record in loop mode only
Removing the export privilege from the operator role and granting it only to supervisor roles (Correct answer)
Setting all cameras to private masking mode
Disabling the playback module entirely

Correct answer: Removing the export privilege from the operator role and granting it only to supervisor roles

Role-based access control allows administrators to remove the export permission from standard operator roles, requiring supervisor-level credentials to export any recorded footage.

Question 12: Which encryption standard is most commonly recommended for protecting stored video files on a VMS server?

SHA-1
AES-256 (Correct answer)
MD5
Base64

Correct answer: AES-256

AES-256 (Advanced Encryption Standard with 256-bit keys) is the industry-standard symmetric encryption algorithm recommended for protecting stored video data at rest.

Question 13: A biometric reader is experiencing a high False Rejection Rate (FRR). The FIRST corrective action should be to:

Replace the biometric reader entirely
Switch to a PIN-only access method
Re-enroll affected users with fresh, higher-quality templates (Correct answer)
Lower the acceptance threshold to the minimum setting

Correct answer: Re-enroll affected users with fresh, higher-quality templates

High FRR is often caused by poor-quality enrollment templates; re-enrolling users with careful, high-quality scans typically resolves the issue.

Question 14: What is the primary ethical obligation of a CST professional when a conflict of interest arises during intrusion detection & monitoring activities?

Proceed while favoring the outcome that benefits the professional personally
Ignore the conflict if it does not directly affect the current task
Resolve the conflict privately without informing stakeholders
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in intrusion detection & monitoring is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 15: A surveillance technician is subpoenaed to testify about a system they installed. Their notes reveal the system was used in a warrantless covert installation inside a private home. The technician's greatest legal risk is:

Civil liability to the homeowner for invasion of privacy and potential criminal charges as an accomplice (Correct answer)
No liability because technicians are protected as third-party contractors
Liability limited to ECPA statutory damages of $500
Loss of their CST certification only

Correct answer: Civil liability to the homeowner for invasion of privacy and potential criminal charges as an accomplice

A technician who knowingly installs covert surveillance equipment in a private home without authorization can face civil liability for invasion of privacy and criminal liability as an accomplice to illegal surveillance.

Question 16: In the context of video management software, what role does continuous professional development play for CST practitioners?

It is optional and only needed for career advancement
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in video management software because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 17: A surveillance system PM plan includes 'inspect grounding and bonding connections.' Why is this task critical?

To protect equipment from electrical surges and lightning damage (Correct answer)
To test audio recording functionality
To verify Wi-Fi antenna alignment
To ensure cameras have correct color profiles

Correct answer: To protect equipment from electrical surges and lightning damage

Proper grounding and bonding protect surveillance equipment from electrical surges, static discharge, and lightning strikes that could destroy cameras and recorders.

Question 18: What does a False Acceptance Rate (FAR) measure in biometric systems?

The rate at which biometric templates expire
The percentage of valid users incorrectly denied access
The percentage of unauthorized users incorrectly granted access (Correct answer)
The time required to process a biometric scan

Correct answer: The percentage of unauthorized users incorrectly granted access

FAR measures how often an unauthorized individual is incorrectly accepted by the biometric system, representing a security failure.

Question 19: Why is it necessary to check the camera’s field of view?

To increase the recording capacity of the DVR.
To reduce the number of cameras needed.
To ensure the camera covers the correct area without obstruction. (Correct answer)
To improve the camera’s visual quality.

Correct answer: To ensure the camera covers the correct area without obstruction.

Checking a camera's field of view is crucial to confirm that it captures the intended monitoring area effectively. This step helps identify and eliminate any obstructions, adjust angles, and ensure comprehensive coverage, preventing critical areas from being missed.

Question 20: What security measure ensures that only authorized devices can connect to a surveillance network switch port?

SNMP community strings
DHCP reservation
Port security / 802.1X authentication (Correct answer)
NAT translation

Correct answer: Port security / 802.1X authentication

802.1X port-based network access control authenticates devices before allowing them onto the network switch port.

Question 21: What is the purpose of motion-triggered recording in a surveillance storage strategy?

To enable pan-tilt-zoom on fixed cameras
To improve camera image quality during motion events
To reduce storage usage by only recording when activity is detected (Correct answer)
To automatically alert police when motion is detected

Correct answer: To reduce storage usage by only recording when activity is detected

Motion-triggered recording conserves storage by only writing video to disk when motion is detected rather than recording continuously.

Question 22: When documenting activities related to intrusion detection & monitoring, which practice is considered essential for CST certification holders?

Recording only outcomes while omitting the methods and processes used
Completing documentation only when requested by auditors or supervisors
Keeping documentation in personal notes that are not accessible to other team members
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in intrusion detection & monitoring. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 23: An installer is verifying the 'walk test' of a PIR sensor. What movement pattern will produce the most reliable detection?

Walking across the detector's field of view (lateral movement) (Correct answer)
Walking directly toward the detector from the front
Standing still within the detection zone
Crawling below the lowest detection beam

Correct answer: Walking across the detector's field of view (lateral movement)

PIR detectors are most sensitive to lateral movement that crosses detection zones, maximizing the differential infrared signal as the body moves between segments of the Fresnel lens.

Question 24: A facility experiences frequent 'door held open' alarms. The MOST likely cause is:

The card reader is losing power intermittently
Users are propping the door open or not allowing it to fully latch (Correct answer)
The biometric reader has corrupted templates
The Wiegand cable run is too long

Correct answer: Users are propping the door open or not allowing it to fully latch

'Door held open' alarms trigger when a door remains open beyond the configured time, most commonly due to users physically propping or impeding the door from closing.

Question 25: What is the effect of enabling 'multicast streaming' on an IP camera in a large surveillance deployment?

Multicast disables RTSP and uses UDP-only transmission
The camera encrypts its stream using AES multicast keys
A single video stream is transmitted and shared by multiple viewers simultaneously (Correct answer)
The camera sends a separate unicast stream to every connected viewer

Correct answer: A single video stream is transmitted and shared by multiple viewers simultaneously

Multicast sends one stream that multiple clients receive simultaneously, reducing bandwidth compared to individual unicast streams for each viewer.

Question 26: In perimeter intrusion detection, a buried geophone cable detects which type of threat?

Electromagnetic interference from nearby equipment
Changes in soil moisture indicating tunnel digging
Ground vibrations caused by footsteps or vehicle movement (Correct answer)
RF signals from unauthorized communication devices

Correct answer: Ground vibrations caused by footsteps or vehicle movement

Geophone (seismic) cables buried along a perimeter detect low-frequency ground vibrations generated by walking, running, or vehicle traffic, enabling early perimeter breach detection.

Question 27: Which RAID level provides mirroring, meaning data is written identically to two drives simultaneously?

RAID 0
RAID 5
RAID 1 (Correct answer)
RAID 6

Correct answer: RAID 1

RAID 1 mirrors data across two drives so that if one fails, the other contains an identical copy ensuring no data loss.

Question 28: Which quality assurance method is most commonly applied in card reader & biometric access to verify that CST professional standards are being met?

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Relying on client satisfaction surveys as the sole measure of quality
Annual reviews conducted exclusively by non-technical management
Informal self-assessment without external validation

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in card reader & biometric access, providing objective, measurable evidence that CST standards are consistently met.

Question 29: In the context of card reader & biometric access, what role does continuous professional development play for CST practitioners?

It serves primarily as a networking opportunity with no practical benefit
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is required only during the first year of certification
It is optional and only needed for career advancement

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in card reader & biometric access because it ensures CST practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 30: Which standard governs the testing and listing requirements for access control system units in the United States?

UL 294 (Correct answer)
ISO 27001
UL 681
NFPA 72

Correct answer: UL 294

UL 294 is the standard for Access Control System Units, covering performance, construction, and testing requirements for listed access control equipment.

Question 31: When a private employer installs video cameras in a restroom to investigate theft, the primary legal exposure is:

Breach of the Fourth Amendment because employees have a reasonable expectation of privacy
Violation of Title III because video is a form of wire interception
Invasion of privacy claims and potential criminal liability under state voyeurism statutes (Correct answer)
Violation of OSHA workplace safety regulations

Correct answer: Invasion of privacy claims and potential criminal liability under state voyeurism statutes

Restrooms are spaces where individuals have a heightened expectation of privacy, and covert video recording there exposes employers to civil and criminal liability under state privacy and voyeurism laws.

Question 32: When pulling cable through conduit during a surveillance installation, what is the maximum fill ratio recommended to prevent cable damage and overheating?

No fill limit applies to low-voltage data cables in conduit
75% fill is acceptable for low-voltage surveillance cables in any conduit
50% fill for a single cable and 60% for multiple cables in all conduit types
25% of the conduit's cross-sectional area for one cable, 40% for multiple cables (Correct answer)

Correct answer: 25% of the conduit's cross-sectional area for one cable, 40% for multiple cables

NEC guidelines recommend no more than 25% fill for a single cable and 40% fill for multiple cables to allow for heat dissipation and ease of future cable pulls.

Question 33: When a CST installs a license plate reader (LPR) system for a law enforcement client, which legal consideration is MOST important regarding data retention?

Many jurisdictions impose statutory limits on how long non-hit LPR records may be retained (Correct answer)
LPR data is classified as biometric data under all state laws
License plate information is not considered personal data under any U.S. law
LPR data may be retained indefinitely with no restrictions

Correct answer: Many jurisdictions impose statutory limits on how long non-hit LPR records may be retained

Numerous states have enacted laws limiting the retention period of LPR records for vehicles not associated with criminal activity, reflecting privacy concerns about mass location tracking.

Question 34: A surveillance system is configured for continuous recording at 1080p/15fps. What is the BEST approach to extend the retention period without adding storage hardware?

Increase the frame rate to 30fps
Switch to a more efficient codec such as H.265 (Correct answer)
Use JPEG instead of video compression
Disable all cameras during daytime hours

Correct answer: Switch to a more efficient codec such as H.265

H.265 (HEVC) provides approximately 50% better compression than H.264 at equivalent quality, effectively doubling storage efficiency.

Question 35: A security director requests cameras with license plate capture capability at a parking garage entrance. What lens specification is most critical for this application?

Short 2.8mm lens to capture both the vehicle and surrounding area
Fish-eye lens to capture the widest possible view of approaching vehicles
Long focal length lens (12mm or greater) to narrow the field of view and capture plate detail (Correct answer)
Wide dynamic range (WDR) sensor to handle varying light conditions

Correct answer: Long focal length lens (12mm or greater) to narrow the field of view and capture plate detail

License plate capture requires a narrow field of view achieved with a longer focal length lens to capture enough pixel density on the plate for character recognition.

Question 36: What is the purpose of 'camera tamper detection' in a video analytics system?

Monitoring camera battery levels
Logging firmware update history
Alerting when a camera is obstructed, moved, or spray-painted (Correct answer)
Automatically adjusting camera focus

Correct answer: Alerting when a camera is obstructed, moved, or spray-painted

Camera tamper detection identifies when a camera has been physically interfered with—such as being covered, repositioned, or defaced—and triggers an immediate alert.

Question 37: A PTZ camera's pan movement is jerky and inconsistent. After ruling out network issues, what mechanical component should be inspected?

The pan motor gears and drive belt (Correct answer)
The lens iris motor
The IR illuminator board
The RJ-45 jack

Correct answer: The pan motor gears and drive belt

Worn or damaged pan motor gears and drive belts are common causes of erratic PTZ pan movement after electrical causes are eliminated.

Question 38: The Children's Online Privacy Protection Act (COPPA) is relevant to surveillance systems that:

Record video footage of minors in public spaces
Monitor school bus routes using GPS
Collect personal information from children under 13 via connected devices or apps (Correct answer)
Install cameras within 500 feet of a school or childcare facility

Correct answer: Collect personal information from children under 13 via connected devices or apps

COPPA requires verifiable parental consent before collecting personal information from children under 13, which applies to connected surveillance devices with data collection features.

Question 39: When mounting a camera outdoors on a pole subject to high winds, what mechanical specification is most critical?

IK10 vandal-resistance rating
IP67 weatherproof rating
Wind load rating of the mount (Correct answer)
Camera weight under 2 lbs

Correct answer: Wind load rating of the mount

The wind load rating of the mount determines whether the camera will stay aligned and structurally secure under the lateral forces generated by high winds.

Question 40: When an alarm panel is in 'test mode,' what is the expected behavior of alarm signals sent to the central station?

Signals are transmitted normally and treated as real alarms
Signals are transmitted but flagged so the central station knows not to dispatch (Correct answer)
Signals are re-routed to the local fire panel
Signals are suppressed entirely and not transmitted

Correct answer: Signals are transmitted but flagged so the central station knows not to dispatch

During test mode, the panel transmits signals to the central station but includes a test identifier, so operators acknowledge receipt without dispatching emergency responders.

Question 41: During a surveillance installation, you discover that the total cable run to a distant camera will be 320 feet of Cat6. What is the likely concern?

The run exceeds the 328-foot (100m) Ethernet specification limit (Correct answer)
Copper cable cannot support PTZ camera control beyond 300 feet
PoE cannot function at distances greater than 200 feet
Cat6 cannot carry video signals beyond 100 feet

Correct answer: The run exceeds the 328-foot (100m) Ethernet specification limit

The IEEE 802.3 Ethernet standard limits copper UTP cable runs to 328 feet (100 meters), beyond which signal degradation can cause connectivity issues.

Question 42: What is the primary function of a network video recorder (NVR)?

It powers the cameras.
It controls the movement of PTZ cameras.
It serves as the camera's monitor.
It records footage from IP cameras over a network. (Correct answer)

Correct answer: It records footage from IP cameras over a network.

A Network Video Recorder (NVR) is specifically designed for IP-based surveillance systems. Unlike DVRs, NVRs process and record digital video streams directly from IP cameras over a network, offering greater flexibility, scalability, and often superior video quality.

Question 43: When integrating video analytics with an access control system, what type of event can trigger an automatic door lock?

Unauthorized person detected in a restricted zone (Correct answer)
Low storage space on the NVR
Camera firmware update completion
Network bandwidth usage threshold exceeded

Correct answer: Unauthorized person detected in a restricted zone

Integrated systems can use video analytics to detect unauthorized presence in a restricted zone and automatically signal the access control system to lock doors or trigger alarms.

Question 44: What is the purpose of synchronizing IP cameras to an NTP (Network Time Protocol) server?

Ensure accurate, consistent timestamps across all cameras for forensic integrity (Correct answer)
Coordinate PTZ camera movements across multiple units
Increase video frame rates during peak recording times
Automatically adjust camera sensitivity based on time of day

Correct answer: Ensure accurate, consistent timestamps across all cameras for forensic integrity

NTP synchronization ensures all cameras and recorders share accurate, consistent time stamps, which is critical for correlating events across multiple cameras and maintaining forensic integrity of recordings.

Question 45: Which factor most significantly degrades the performance of a passive infrared (PIR) detector?

Low ambient light levels
Detector mounted perpendicular to the expected direction of travel
Ambient noise above 85 dB
Ambient temperature approaching normal body temperature (Correct answer)

Correct answer: Ambient temperature approaching normal body temperature

PIR detectors sense differential infrared radiation between a moving body and its background; when ambient temperature approaches body temperature (~98.6°F), the contrast diminishes and detection reliability drops.

Question 46: A central monitoring station receives a 'troubles' signal from an alarm panel. What does this signal typically indicate?

A system fault condition such as low battery, AC power loss, or communication failure (Correct answer)
A duress alarm triggered by the user
An active intrusion alarm
A successful arm/disarm event

Correct answer: A system fault condition such as low battery, AC power loss, or communication failure

Trouble signals indicate supervisory fault conditions within the system—such as low battery, loss of AC power, or a zone fault—rather than an active intrusion event.

Question 47: What is the purpose of installing surveillance cameras in high-traffic areas?

To monitor employee performance.
To deter criminal activity and capture security threats. (Correct answer)
To track inventory movements.
To ensure customers are satisfied.

Correct answer: To deter criminal activity and capture security threats.

Installing surveillance cameras in high-traffic areas serves as a visible deterrent to potential criminals, reducing the likelihood of illicit activities. Should an incident occur, the cameras capture crucial evidence, aiding in identification and investigation of security threats.

Question 48: In a VMS, what does the term 'failover server' describe?

A backup server that takes over recording if the primary fails (Correct answer)
A server that handles high-bandwidth streams
A server dedicated to archiving old footage
A redundant network switch for camera connectivity

Correct answer: A backup server that takes over recording if the primary fails

A failover server is a standby recording server that automatically assumes recording responsibilities if the primary server becomes unavailable, ensuring continuity.

Question 49: Which file format is commonly used for exporting surveillance footage to be played on standard media players or submitted as evidence?

AVI or MP4 (Correct answer)
RAW camera format
PSD
CSV

Correct answer: AVI or MP4

AVI and MP4 are widely supported video container formats that can be played on standard media players and accepted as evidence in legal proceedings.

Question 50: A technician is installing a multi-camera system with analog HD cameras (HD-TVI) and is selecting a DVR. What specification must match between the cameras and DVR?

The cameras and DVR must share the same ONVIF profile level
The HD-TVI format version and resolution must be compatible between cameras and DVR (Correct answer)
All cameras must use the same focal length lens for the DVR to process video uniformly
The cameras must be configured for the same RTSP stream path format as the DVR

Correct answer: The HD-TVI format version and resolution must be compatible between cameras and DVR

HD-TVI is a proprietary analog HD format with multiple versions (1.0, 2.0, 3.0) and resolutions; the DVR must explicitly support the same TVI version and resolution as the cameras.

Question 51: Which factor has the GREATEST impact on the storage capacity required for a surveillance system?

The type of camera mount
The color of the camera housing
The resolution, frame rate, and compression codec used (Correct answer)
The length of the camera cable

Correct answer: The resolution, frame rate, and compression codec used

Higher resolution, higher frame rates, and less efficient codecs all increase the storage space consumed per hour of recorded video.

Question 52: What does RAID stand for in the context of NVR storage?

Real-time Automated Image Delivery
Recording Archive and Index Database
Redundant Array of Independent Disks (Correct answer)
Remote Access and Integrated Data

Correct answer: Redundant Array of Independent Disks

RAID (Redundant Array of Independent Disks) combines multiple drives to provide data redundancy, performance, or both.

Question 53: Which communication protocol is most commonly used between a card reader and an access control panel?

Ethernet TCP/IP
RS-232
RS-485
Wiegand (Correct answer)

Correct answer: Wiegand

Wiegand is the industry-standard protocol for transmitting card data from a reader to an access control panel.

Question 54: In access control, 'two-man rule' (also called dual-custody) requires:

Two authorized individuals to both present credentials before access is granted (Correct answer)
Backup power to activate after the primary power fails
Two separate readers mounted side-by-side at a single door
A biometric scan followed by a PIN entry from the same user

Correct answer: Two authorized individuals to both present credentials before access is granted

The two-man rule mandates that two separate authorized individuals must authenticate simultaneously before a highly sensitive area is unlocked.

Question 55: Which power standard is commonly used to provide both data and power to networked access control readers and IP cameras?

12 VDC direct supply only
PoE (Power over Ethernet) (Correct answer)
RS-485
UPS battery backup

Correct answer: PoE (Power over Ethernet)

PoE delivers electrical power alongside data over a standard Ethernet cable, simplifying installation of network-connected access devices.

Question 56: A technician is programming an alarm control panel and needs to set the entry delay. Which of the following best describes the entry delay's purpose?

Delay between two zones alarming to enable cross-zoning
Time given to an authorized user to disarm the system after entering through a designated door (Correct answer)
Time allowed for a siren to sound before police are notified
Time the panel waits before sending a signal to the central station

Correct answer: Time given to an authorized user to disarm the system after entering through a designated door

The entry delay provides a defined window—typically 30 to 60 seconds—for authorized users to enter through a designated entry point and disarm the system before an alarm is triggered.

Question 57: Which zone type on an intrusion alarm panel will trigger an immediate alarm regardless of the armed state of the system?

24-hour zone (Correct answer)
Perimeter zone
Entry/exit zone
Interior follower zone

Correct answer: 24-hour zone

A 24-hour zone remains active and will generate an alarm at all times—whether the system is armed or disarmed—typically used for panic buttons, smoke detectors, or tamper circuits.

Question 58: Which quality assurance method is most commonly applied in intrusion detection & monitoring to verify that CST professional standards are being met?

Relying on client satisfaction surveys as the sole measure of quality
Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Informal self-assessment without external validation
Annual reviews conducted exclusively by non-technical management

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in intrusion detection & monitoring, providing objective, measurable evidence that CST standards are consistently met.

Question 59: What is the most effective way to prevent unauthorized access to recorded footage?

Password protection, encryption, and access controls. (Correct answer)
Sharing footage with everyone in the company.
Storing footage on a public server.
Storing footage on external drives.

Correct answer: Password protection, encryption, and access controls.

The most effective way to prevent unauthorized access to recorded footage is through a combination of password protection, encryption, and access controls. Password protection restricts initial entry, encryption scrambles the data to make it unreadable without authorization, and access controls limit viewing and management privileges based on user roles.

Question 60: Under GDPR (applicable when a U.S. firm handles data of EU residents), video surveillance footage that captures identifiable individuals is classified as:

Personal data subject to GDPR's processing requirements and data subject rights (Correct answer)
Publicly available data exempt from all regulation
Biometric data requiring explicit consent in all circumstances
Criminal justice data exempt from standard GDPR rules

Correct answer: Personal data subject to GDPR's processing requirements and data subject rights

GDPR classifies footage of identifiable individuals as personal data, requiring a lawful basis for processing, appropriate retention limits, and observance of data subject rights such as access and erasure.

Question 61: When a biometric access system is used at a border crossing or high-security facility, which performance metric is typically prioritized over the other?

Low False Acceptance Rate (FAR) to prevent unauthorized entry (Correct answer)
Low False Rejection Rate (FRR) to speed throughput
High template size to maximize accuracy
High enrollment speed to reduce queues

Correct answer: Low False Acceptance Rate (FAR) to prevent unauthorized entry

In high-security environments, minimizing unauthorized access (low FAR) takes precedence over user convenience, even if legitimate users are occasionally rejected.

Question 62: During a fire alarm activation, most access control systems are programmed to:

Send an alert to the card reader display only
Require biometric authentication before doors will open
Unlock all controlled egress doors (fail-safe mode) to allow evacuation (Correct answer)
Lock all doors to prevent unauthorized evacuation routes

Correct answer: Unlock all controlled egress doors (fail-safe mode) to allow evacuation

Life-safety codes require access-controlled egress doors to fail-safe (unlock) upon fire alarm activation to allow unimpeded evacuation.

Question 63: A PM checklist item states 'verify recording retention compliance.' What does this mean?

Verify that all cameras record at maximum resolution
Check that the DVR is connected to the internet
Ensure recorded footage is retained for the required number of days per policy or regulation (Correct answer)
Confirm that cameras are recording in color

Correct answer: Ensure recorded footage is retained for the required number of days per policy or regulation

Retention compliance means the system is storing footage for the minimum duration required by site policy, legal mandate, or regulatory requirement.

Question 64: OSDP (Open Supervised Device Protocol) provides an advantage over Wiegand because it:

Supports bidirectional encrypted communication between reader and panel (Correct answer)
Operates at a lower voltage requiring less power
Requires fewer wires for installation
Is compatible with only HID credential formats

Correct answer: Supports bidirectional encrypted communication between reader and panel

OSDP supports bidirectional, encrypted communication, allowing the panel to receive status from and send commands to the reader — unlike the one-way Wiegand protocol.

Question 65: In surveillance storage planning, what does 'retention period' refer to?

The time it takes to retrieve a video clip
The length of time recorded footage is kept before being overwritten or deleted (Correct answer)
The warranty period for the DVR/NVR
The duration of a single camera's recording session

Correct answer: The length of time recorded footage is kept before being overwritten or deleted

Retention period defines how long video footage is stored before the system automatically overwrites or purges it.

Question 66: A CST installs pole cameras on public utility poles that continuously record a public street and driveway for six months. The primary legal concern is:

Violation of FCC regulations on unlicensed transmitters
Violation of local ordinances requiring signage for cameras
Trespass on utility company property without authorization
Whether prolonged surveillance aggregates into a constitutional search (Correct answer)

Correct answer: Whether prolonged surveillance aggregates into a constitutional search

Extended pole camera surveillance can raise Fourth Amendment concerns because long-term monitoring of a home's exterior may reveal intimate details beyond what brief observation would capture.

Question 67: What does the 'angle of view' specification describe for a surveillance camera lens?

The maximum zoom magnification achievable
The lens aperture size that controls light intake
The minimum distance at which the camera can focus clearly
The angular extent of the scene the lens can capture, measured in degrees (Correct answer)

Correct answer: The angular extent of the scene the lens can capture, measured in degrees

Angle of view (measured in degrees) describes the angular extent of the observable scene captured by the lens, with wider angles covering more area and narrower angles providing more detail at distance.

Question 68: What is the primary purpose of a camera housing's IP66 rating in a surveillance installation?

It specifies the maximum operating temperature of 66°C
It denotes compatibility with 6 PoE standards
It indicates the camera supports 6 megapixel resolution
It certifies protection against powerful water jets and dust ingress (Correct answer)

Correct answer: It certifies protection against powerful water jets and dust ingress

IP66 is an ingress protection rating where the first digit (6) means dust-tight and the second digit (6) means protection against powerful water jets.

Question 69: In a coaxial cable surveillance installation, what is the primary purpose of a BNC connector?

Convert analog video signals to digital format
Provide power to analog cameras via the coaxial cable
Amplify weak video signals over long cable runs
Maintain the 75-ohm impedance match required for video signal transmission (Correct answer)

Correct answer: Maintain the 75-ohm impedance match required for video signal transmission

BNC (Bayonet Neill-Concelman) connectors maintain the 75-ohm impedance of coaxial cables, ensuring proper video signal transmission without reflections or signal degradation.

Question 70: A balanced magnetic switch (BMS) is used instead of a standard door contact primarily to resist which attack method?

Physical forcing of the door
High-temperature environments that demagnetize standard contacts
RF interference that mimics a closed-contact signal
Magnetic field spoofing used to defeat standard reed switches (Correct answer)

Correct answer: Magnetic field spoofing used to defeat standard reed switches

A BMS uses a biased magnetic field that requires a specific magnetic signature to remain in the secure state, making it resistant to defeat by an external magnet placed near a standard reed switch.

Question 71: When documenting activities related to card reader & biometric access, which practice is considered essential for CST certification holders?

Recording only outcomes while omitting the methods and processes used
Completing documentation only when requested by auditors or supervisors
Keeping documentation in personal notes that are not accessible to other team members
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in card reader & biometric access. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 72: A CST professional encounters an unfamiliar situation while performing intrusion detection & monitoring duties. What is the most appropriate first action?

Apply a solution from an unrelated field without verification
Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)
Proceed based on general assumptions to avoid delays
Skip the task entirely and move to the next assignment

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in intrusion detection & monitoring, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 73: What is the function of 'multicast streaming' in a large VMS deployment?

It encrypts streams before sending to clients
It allows one camera stream to be delivered simultaneously to multiple viewing clients without multiplying server bandwidth usage (Correct answer)
It converts analog video to IP format
It compresses video to a single stream for archiving

Correct answer: It allows one camera stream to be delivered simultaneously to multiple viewing clients without multiplying server bandwidth usage

Multicast streaming sends a single video stream from the source to a multicast group address, allowing many viewing clients to receive the same stream without the server generating a separate unicast stream for each client.

Question 74: What is role-based access control (RBAC) in the context of a surveillance system?

Assigning specific permissions to users based on their job function (Correct answer)
A type of motion detection algorithm
A method of configuring camera angles remotely
A storage compression format

Correct answer: Assigning specific permissions to users based on their job function

RBAC limits each user's access to only the features and data necessary for their role, reducing insider threat risk.

Question 75: A mantrap (or airlock) is used in physical security to:

Store backup credentials offline
Monitor card reader health via OSDP supervision
Prevent electromagnetic interference from entering server rooms
Control access by allowing only one person to pass between two interlocked doors at a time (Correct answer)

Correct answer: Control access by allowing only one person to pass between two interlocked doors at a time

A mantrap uses two interlocked doors so that the first must close and verify before the second opens, preventing tailgating and piggybacking.

Question 76: In VMS access control integration, what action can be configured to occur automatically when an access control panel reports a forced door event?

The VMS switches all monitors to screensaver mode
The VMS deletes the most recent camera footage
The VMS triggers an alarm and displays live video from associated door cameras (Correct answer)
The VMS disables all PTZ camera presets

Correct answer: The VMS triggers an alarm and displays live video from associated door cameras

Integration between VMS and access control allows forced-door events to automatically trigger VMS alarms and pop up live video from cameras associated with that door on operator monitors.

Question 77: A camera's image is sharp in the center but blurry toward the edges. This defect is called:

Barrel distortion
Field curvature or vignetting (Correct answer)
Pincushion distortion
Chromatic aberration

Correct answer: Field curvature or vignetting

Field curvature causes the focal plane to be curved rather than flat, resulting in sharp center focus but blurred edges on a flat sensor.

Question 78: What is the main reason surveillance cameras should NOT be aimed directly at light sources such as the sun or bright lamps?

It reduces the camera's IP rating
It interferes with IR illuminators
It can permanently damage the image sensor (Correct answer)
It causes the camera to overheat

Correct answer: It can permanently damage the image sensor

Direct exposure to intense light sources can cause irreversible blooming or burn-in damage to the image sensor, permanently degrading image quality.

Question 79: When creating a preventive maintenance schedule for a large multi-site surveillance system, what is the most effective organizational approach?

Stagger site visits by priority and risk level to ensure continuous coverage across all locations (Correct answer)
Perform all maintenance on a single day each year
Only maintain cameras that have reported faults
Assign maintenance tasks alphabetically by site name

Correct answer: Stagger site visits by priority and risk level to ensure continuous coverage across all locations

Staggering maintenance visits by site priority and risk ensures high-value or high-risk locations receive more frequent attention without leaving any site unmonitored.

Question 80: Which of the following is a fundamental principle of intrusion detection & monitoring as it applies to Certified Surveillance Technician?

Prioritizing speed of completion over accuracy and compliance
Systematic evaluation and adherence to established industry standards (Correct answer)
Avoiding documentation to streamline workflow efficiency
Relying solely on personal experience without reference to guidelines

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of intrusion detection & monitoring in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 81: Which of the following is a fundamental principle of preventive maintenance schedules as it applies to Certified Surveillance Technician?

Systematic evaluation and adherence to established industry standards (Correct answer)
Prioritizing speed of completion over accuracy and compliance
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of preventive maintenance schedules in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 82: What is the function of a 'request-to-exit' (REX) device in an access control system?

It triggers a lockdown when motion is detected near a door
It prevents re-entry using the same card within a set time window
It reboots the card reader after a failed read
It signals the panel to unlock the door for egress without using a credential (Correct answer)

Correct answer: It signals the panel to unlock the door for egress without using a credential

A REX device (motion sensor or push button) signals the access control panel to release the door latch for egress, allowing exit without a card swipe.

Question 83: What does DVR stand for in a surveillance system?

Data Verification Router
Dual Video Relay
Digital Video Recorder (Correct answer)
Direct Video Router

Correct answer: Digital Video Recorder

A DVR (Digital Video Recorder) captures and stores video from analog cameras by digitizing the signal internally.

Question 84: During export, a technician discovers the DVR's footage has gaps (missing minutes) in the recorded timeline. What must be documented?

Nothing—gaps are normal and do not require documentation
The total percentage of footage lost
The start and end time of each gap, possible cause, and whether the gap existed before export began (Correct answer)
Only the gap duration

Correct answer: The start and end time of each gap, possible cause, and whether the gap existed before export began

Documenting each gap's precise timing, extent, and pre-existing nature prevents the gaps from being attributed to tampering during the export process.

Question 85: Under the Video Voyeurism Prevention Act of 2004, it is a federal crime to capture images of a person's private areas without consent in a location where the person has a reasonable expectation of privacy. Which location would most clearly fall under this Act?

A changing room in a retail store (Correct answer)
An outdoor public beach
A hotel lobby
A parking lot monitored by CCTV

Correct answer: A changing room in a retail store

Changing rooms are quintessential spaces where individuals have a reasonable expectation of privacy in their bodily areas, making covert imaging there a federal offense.

Question 86: What is the risk of using 'save as' to re-save a video file during evidence handling rather than using a verified file copy method?

'Save as' is always acceptable for evidence handling
The file name may change
Re-saving can trigger re-encoding or metadata modification, altering the file and invalidating its hash (Correct answer)
The file size will increase unnecessarily

Correct answer: Re-saving can trigger re-encoding or metadata modification, altering the file and invalidating its hash

Re-saving through software may alter codec parameters, metadata, or even pixel data depending on the application, changing the cryptographic hash and compromising integrity.

Question 87: In a dual-technology card reader, what is the purpose of combining two reader technologies?

To increase read range beyond 10 feet
To allow the reader to function without an access control panel
To require two different credential types for enhanced security (Correct answer)
To reduce installation costs by sharing a single wire run

Correct answer: To require two different credential types for enhanced security

Dual-technology readers require two credential types (e.g., proximity + smart card) to be presented simultaneously, significantly raising the bar for unauthorized access.

Question 88: What is the minimum illumination specification on a camera datasheet used to determine?

The power consumption in lumens required to operate the camera
The brightest lighting condition the camera can handle without overexposure
The lowest light level at which the camera can produce a usable image (Correct answer)
The optimal lighting level for maximum resolution

Correct answer: The lowest light level at which the camera can produce a usable image

Minimum illumination (measured in lux) specifies the lowest light level at which a camera can produce a usable image, helping determine if additional lighting or IR illumination is needed.

Question 89: A technician is tasked with installing a PTZ camera on a pole mount in a parking lot. What factor must be considered first before beginning the installation?

Ensuring the pole is painted a neutral color to reduce camera visibility
Confirming the camera has built-in storage to operate independently
Verifying the pole has a pre-drilled hole for cable entry
Calculating the pole's load-bearing capacity to support camera weight and wind load (Correct answer)

Correct answer: Calculating the pole's load-bearing capacity to support camera weight and wind load

Pole-mounted cameras, especially PTZs, exert significant wind load forces, so the pole must be rated to support the combined weight and dynamic wind forces to prevent failure.

Question 90: When installing a card reader on an exterior wall, which environmental rating should be verified to ensure outdoor survivability?

UL 294
FCC Part 15
NEMA 1
IP65 or higher (Correct answer)

Correct answer: IP65 or higher

An IP65 rating confirms the device is dust-tight and protected against water jets, suitable for outdoor or harsh environment installation.

Question 91: A technician is troubleshooting a PTZ camera that responds to pan and tilt commands but fails to operate the zoom function. What is the most likely cause?

The camera's zoom motor or the zoom control channel in the PTZ protocol configuration is faulty (Correct answer)
The camera is operating in fixed-lens mode and zoom requires a hardware lens module upgrade
The NVR firmware does not support zoom commands for this camera's protocol version
The RS-485 control cable polarity is reversed, affecting only zoom data packets

Correct answer: The camera's zoom motor or the zoom control channel in the PTZ protocol configuration is faulty

When pan/tilt work but zoom does not, the issue is likely isolated to the zoom motor mechanism, its control wiring, or an incorrect zoom address in the PTZ controller configuration.

Question 92: A building's surveillance system automatically overwrites oldest footage after 30 days. Law enforcement requests footage from 28 days ago. What is the technician's immediate priority?

Disable all cameras to prevent any further overwriting
Immediately export and preserve the footage before the overwrite cycle deletes it, then notify law enforcement (Correct answer)
Contact the DVR manufacturer for technical guidance
Wait for a formal subpoena before taking any action

Correct answer: Immediately export and preserve the footage before the overwrite cycle deletes it, then notify law enforcement

Immediate export is critical because overwrite cycles will destroy the evidence; preservation must occur before legal process formalities if evidence is at imminent risk.

Question 93: Which of the following is a fundamental principle of card reader & biometric access as it applies to Certified Surveillance Technician?

Prioritizing speed of completion over accuracy and compliance
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of card reader & biometric access in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 94: When integrating an intrusion detection system with access control, which event pairing provides the strongest verification of unauthorized entry?

Door forced open alarm AND valid access credential used
Motion detection alarm AND door held-open alarm
Invalid PIN attempt AND valid access granted
Door forced open alarm AND motion detected in the secured area (Correct answer)

Correct answer: Door forced open alarm AND motion detected in the secured area

Correlating a door forced-open event with motion detected inside the secured zone provides strong confirmation of unauthorized physical entry without a valid credential.

Question 95: What is the primary ethical obligation of a CST professional when a conflict of interest arises during card reader & biometric access activities?

Proceed while favoring the outcome that benefits the professional personally
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Resolve the conflict privately without informing stakeholders
Ignore the conflict if it does not directly affect the current task

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in card reader & biometric access is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 96: What is the primary advantage of using a cellular communicator as a backup path for an alarm system?

It provides communication even when telephone lines are cut or disabled (Correct answer)
It allows wireless sensor installation
It eliminates the need for a control panel
It reduces the central station monitoring fees

Correct answer: It provides communication even when telephone lines are cut or disabled

Cellular communicators operate independently of landline infrastructure, ensuring alarm signals reach the central station even if an intruder cuts the telephone lines.

Question 97: Which term describes surveillance conducted by the government specifically targeting an individual based on their First Amendment activities (such as political speech or religious practice) without legitimate law enforcement purpose?

Consensual monitoring
Chilling effect surveillance (Correct answer)
Pretextual stop
Lawful intercept

Correct answer: Chilling effect surveillance

Chilling effect surveillance describes government monitoring that deters individuals from exercising constitutional rights such as free speech or religion, and is generally considered an unconstitutional abuse of surveillance authority.

Question 98: During installation of a network video recorder (NVR), what is the correct procedure when adding cameras to ensure the system clock is accurate?

Set the NVR time manually and rely on cameras to sync via ONVIF protocol automatically
Use the factory default time settings on all cameras to avoid conflicts
Manually set each camera's time independently using the camera's web interface
Synchronize all cameras and the NVR to an NTP server to ensure consistent timestamps (Correct answer)

Correct answer: Synchronize all cameras and the NVR to an NTP server to ensure consistent timestamps

Synchronizing all devices to an NTP server ensures consistent, accurate timestamps across all cameras and the NVR, which is critical for forensic video review.

Question 99: In video analytics used for intrusion detection, what is a 'virtual tripwire'?

An encrypted communication channel between cameras
A software-defined line in a camera's field of view that triggers an alert when crossed (Correct answer)
A redundant recording channel that activates on motion
A physical laser barrier connected to a camera

Correct answer: A software-defined line in a camera's field of view that triggers an alert when crossed

A virtual tripwire is a user-defined line drawn within a camera's field of view; the analytics engine triggers an alert when an object crosses the line in a specified direction.

Question 100: What is the benefit of using cloud storage as a backup for on-site surveillance recordings?

Cloud storage reduces camera installation costs
Cloud storage eliminates the need for on-site NVRs entirely
It allows cameras to operate without network connectivity
It provides off-site redundancy so footage survives on-site theft, fire, or hardware failure (Correct answer)

Correct answer: It provides off-site redundancy so footage survives on-site theft, fire, or hardware failure

Off-site cloud backup ensures footage is preserved even if the on-site NVR is stolen, destroyed, or suffers a hardware failure.

Certified Surveillance Technician (CST)

The CST certification validates proficiency in designing, installing, and maintaining electronic surveillance systems including CCTV cameras, access control, intrusion detection, network security, and digital storage solutions. It covers the full scope of skills required for professional surveillance technicians across physical security and IP-based systems.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy