Certified Surveillance Technician (CST) — Questions and Answers
Question 1: Which storage technology is increasingly used in surveillance NVRs because it has no moving parts and faster read speeds?
- Solid-state drive (SSD) (Correct answer)
- Floppy disk
- Magnetic tape
- Optical disc (Blu-ray)
Correct answer: Solid-state drive (SSD)
SSDs offer faster read/write speeds, lower latency, and greater shock resistance compared to traditional HDDs for surveillance applications.
Question 2: When documenting activities related to card reader & biometric access, which practice is considered essential for CST certification holders?
- Recording only outcomes while omitting the methods and processes used
- Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
- Completing documentation only when requested by auditors or supervisors
- Keeping documentation in personal notes that are not accessible to other team members
Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies
Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in card reader & biometric access. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.
Question 3: During an IP camera installation, the camera obtains an APIPA address (169.254.x.x) instead of a valid IP from the DHCP server. What is the most likely cause?
- The DHCP server did not respond and the camera self-assigned a link-local address (Correct answer)
- The camera firmware is outdated and incompatible with the current DHCP server version
- The PoE budget is insufficient, causing intermittent camera boot failures
- The switch port VLAN is incorrectly configured, and APIPA is the camera's VLAN fallback
Correct answer: The DHCP server did not respond and the camera self-assigned a link-local address
An APIPA address (169.254.x.x) is automatically assigned when a device cannot reach a DHCP server, indicating a network connectivity or DHCP configuration issue.
Question 4: What is the primary ethical obligation of a CST professional when a conflict of interest arises during intrusion detection & monitoring activities?
- Resolve the conflict privately without informing stakeholders
- Proceed while favoring the outcome that benefits the professional personally
- Ignore the conflict if it does not directly affect the current task
- Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary
The primary ethical obligation when a conflict of interest arises in intrusion detection & monitoring is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.
Question 5: Which factor most significantly degrades the performance of a passive infrared (PIR) detector?
- Detector mounted perpendicular to the expected direction of travel
- Ambient noise above 85 dB
- Low ambient light levels
- Ambient temperature approaching normal body temperature (Correct answer)
Correct answer: Ambient temperature approaching normal body temperature
PIR detectors sense differential infrared radiation between a moving body and its background; when ambient temperature approaches body temperature (~98.6°F), the contrast diminishes and detection reliability drops.
Question 6: A security consultant recommends 'volumetric detection' for a high-value storage room. Which sensor type best fulfills this requirement?
- Door contacts on all entry points
- Vibration sensors on the walls and ceiling
- Microwave or PIR sensors covering the interior space (Correct answer)
- Glass break detectors on all windows
Correct answer: Microwave or PIR sensors covering the interior space
Volumetric detectors such as microwave or PIR sensors cover the three-dimensional interior space of a room, detecting any intruder who enters the volume regardless of how they gained access.
Question 7: Which file format is commonly used for exporting surveillance footage to be played on standard media players or submitted as evidence?
- AVI or MP4 (Correct answer)
- CSV
- PSD
- RAW camera format
Correct answer: AVI or MP4
AVI and MP4 are widely supported video container formats that can be played on standard media players and accepted as evidence in legal proceedings.
Question 8: Under NFPA 731, who is qualified to perform the final acceptance test of an intrusion alarm system?
- The building owner or their representative only
- Only the local police department liaison
- A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent (Correct answer)
- Any licensed electrician
Correct answer: A qualified alarm technician, often verified by an industry certification such as ESA NTS or equivalent
NFPA 731 requires acceptance testing to be performed by personnel qualified in alarm systems, typically demonstrated through certifications such as the ESA National Training School (NTS) or equivalent credentials.
Question 9: What is the primary advantage of using a cellular communicator as a backup path for an alarm system?
- It provides communication even when telephone lines are cut or disabled (Correct answer)
- It reduces the central station monitoring fees
- It allows wireless sensor installation
- It eliminates the need for a control panel
Correct answer: It provides communication even when telephone lines are cut or disabled
Cellular communicators operate independently of landline infrastructure, ensuring alarm signals reach the central station even if an intruder cuts the telephone lines.
Question 10: A casino surveillance manager wants to identify card values on a gaming table from a camera mounted 12 feet above. Which specification is most critical?
- High pixel density (pixels per foot) at the table surface (Correct answer)
- Low-light sensitivity below 0.1 lux
- Wide field of view to see the entire table
- PTZ capability for operator control
Correct answer: High pixel density (pixels per foot) at the table surface
Resolving small card markings requires sufficient pixels per foot at the table surface, making pixel density the primary specification for this application.
Question 11: Which H.264 profile is most commonly used in IP cameras to balance compression efficiency and hardware compatibility?
- Main Profile
- High Profile (Correct answer)
- Baseline Profile
- Extended Profile
Correct answer: High Profile
High Profile provides the best compression efficiency and is widely supported by modern IP cameras and NVRs for surveillance applications.
Question 12: What is the function of a video balun in a surveillance system installation?
- It allows analog video to be transmitted over unshielded twisted pair (UTP) cable instead of coaxial (Correct answer)
- It amplifies IP camera signals to extend network distances beyond 100 meters
- It converts HDMI video signals to analog composite for legacy DVRs
- It converts single-channel video to fiber optic for long-distance transmission
Correct answer: It allows analog video to be transmitted over unshielded twisted pair (UTP) cable instead of coaxial
A video balun converts the impedance of analog CCTV video signals from 75-ohm coaxial to balanced UTP wiring, enabling transmission over existing Cat5/6 cable infrastructure.
Question 13: What should be done to ensure compliance with local surveillance laws during system installation?
- Skip legal reviews to save time.
- Only focus on technical setup.
- Ensure no one is informed about the installation.
- Ensure compliance with local regulations and obtain necessary permits. (Correct answer)
Correct answer: Ensure compliance with local regulations and obtain necessary permits.
To ensure compliance with local surveillance laws during system installation, it is imperative to ensure compliance with local regulations and obtain necessary permits. This involves researching and adhering to all relevant ordinances, building codes, and legal requirements specific to the installation location.
Question 14: A court requests surveillance video with 'authenticated timestamps.' Which method provides the strongest authentication?
- Cross-referencing DVR footage with synchronized NTP logs and providing a signed affidavit of time verification (Correct answer)
- Showing the on-screen date/time display in the video
- Verbal testimony from the technician about when the recording was made
- Submitting the original DVR hard drive without export
Correct answer: Cross-referencing DVR footage with synchronized NTP logs and providing a signed affidavit of time verification
Combining NTP log cross-reference with a signed affidavit creates a legally defensible, corroborated timestamp authentication chain.
Question 15: A business requires 30 days of continuous surveillance footage. When calculating storage, which formula is MOST appropriate?
- Resolution in pixels × frame rate × 30
- Storage capacity ÷ camera count × 30
- Bitrate (Mbps) × 3600 seconds × 24 hours × 30 days × camera count ÷ 8 (Correct answer)
- Camera count × lens focal length × 30
Correct answer: Bitrate (Mbps) × 3600 seconds × 24 hours × 30 days × camera count ÷ 8
Multiplying bitrate by seconds per hour, hours per day, days retained, and camera count (then dividing by 8 to convert bits to bytes) gives total storage in megabytes.
Question 16: During export, a technician discovers the DVR's footage has gaps (missing minutes) in the recorded timeline. What must be documented?
- Only the gap duration
- The total percentage of footage lost
- The start and end time of each gap, possible cause, and whether the gap existed before export began (Correct answer)
- Nothing—gaps are normal and do not require documentation
Correct answer: The start and end time of each gap, possible cause, and whether the gap existed before export began
Documenting each gap's precise timing, extent, and pre-existing nature prevents the gaps from being attributed to tampering during the export process.
Question 17: An NVR shows 'HDD Not Detected' after a fan failure event. What is the most likely explanation?
- A camera's IP address conflicted with the NVR
- Overheating from the failed fan caused the HDD to shut down or fail (Correct answer)
- The NVR's firmware corrupted the partition table
- The video codec changed automatically
Correct answer: Overheating from the failed fan caused the HDD to shut down or fail
Fan failure leads to thermal overload, which can cause hard drives to power down or suffer permanent damage from excessive heat.
Question 18: What is the purpose of a 'legal hold' in a surveillance storage context?
- A storage encryption mode
- A directive to preserve specific video records beyond normal retention for litigation (Correct answer)
- A lock placed on NVR hardware during servicing
- A feature that prevents remote access to recordings
Correct answer: A directive to preserve specific video records beyond normal retention for litigation
A legal hold suspends normal overwrite or deletion of specific footage to ensure it is available for potential litigation or investigation.
Question 19: Which of the following is a fundamental principle of evidence export & timestamping as it applies to Certified Surveillance Technician?
- Avoiding documentation to streamline workflow efficiency
- Systematic evaluation and adherence to established industry standards (Correct answer)
- Relying solely on personal experience without reference to guidelines
- Prioritizing speed of completion over accuracy and compliance
Correct answer: Systematic evaluation and adherence to established industry standards
A fundamental principle of evidence export & timestamping in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.
Question 20: What is the purpose of 'anti-passback' in an access control system?
- Limiting the number of cards that can be enrolled per reader
- Preventing a card from being used to exit before it has been used to enter (Correct answer)
- Blocking access to all doors after a security alarm is triggered
- Encrypting card data transmitted over the Wiegand bus
Correct answer: Preventing a card from being used to exit before it has been used to enter
Anti-passback prevents a credential from being used to re-enter (or exit) a zone unless the corresponding entry (or exit) event was first recorded, stopping card sharing.
Question 21: What type of conduit is recommended for surveillance cable runs inside a wall cavity between floors in a commercial building to meet fire code requirements?
- Liquid-tight flexible metal conduit
- EMT (Electrical Metallic Tubing) (Correct answer)
- ENT (Electrical Nonmetallic Tubing) flexible conduit
- Schedule 40 PVC conduit
Correct answer: EMT (Electrical Metallic Tubing)
EMT is a metallic conduit that meets fire-stop and building code requirements for in-wall commercial installations and also provides physical cable protection.
Question 22: In perimeter intrusion detection, a buried geophone cable detects which type of threat?
- RF signals from unauthorized communication devices
- Changes in soil moisture indicating tunnel digging
- Ground vibrations caused by footsteps or vehicle movement (Correct answer)
- Electromagnetic interference from nearby equipment
Correct answer: Ground vibrations caused by footsteps or vehicle movement
Geophone (seismic) cables buried along a perimeter detect low-frequency ground vibrations generated by walking, running, or vehicle traffic, enabling early perimeter breach detection.
Question 23: An installer is verifying the 'walk test' of a PIR sensor. What movement pattern will produce the most reliable detection?
- Walking across the detector's field of view (lateral movement) (Correct answer)
- Standing still within the detection zone
- Walking directly toward the detector from the front
- Crawling below the lowest detection beam
Correct answer: Walking across the detector's field of view (lateral movement)
PIR detectors are most sensitive to lateral movement that crosses detection zones, maximizing the differential infrared signal as the body moves between segments of the Fresnel lens.
Question 24: What is the purpose of the RTSP protocol in an IP camera system?
- Encrypting video data between camera and NVR
- Assigning IP addresses to cameras dynamically
- Streaming live video from cameras to clients (Correct answer)
- Synchronizing camera clocks over the network
Correct answer: Streaming live video from cameras to clients
RTSP (Real Time Streaming Protocol) is used to establish and control media sessions for live video streaming from IP cameras.
Question 25: What is the recommended camera placement strategy at a building's main entrance to simultaneously verify identity and capture tailgating?
- Single PTZ camera controlled by security personnel
- Two cameras: one at face level for ID and one overhead for counting people (Correct answer)
- Wide-angle camera mounted at 12 feet pointing toward the door
- Single overhead fisheye pointed straight down
Correct answer: Two cameras: one at face level for ID and one overhead for counting people
A face-level camera captures identifying features while an overhead camera counts bodies passing through, together detecting tailgating and recording identity.
Question 26: Which of the following is a fundamental principle of card reader & biometric access as it applies to Certified Surveillance Technician?
- Relying solely on personal experience without reference to guidelines
- Prioritizing speed of completion over accuracy and compliance
- Systematic evaluation and adherence to established industry standards (Correct answer)
- Avoiding documentation to streamline workflow efficiency
Correct answer: Systematic evaluation and adherence to established industry standards
A fundamental principle of card reader & biometric access in Certified Surveillance Technician is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.
Question 27: For a warehouse with 30-foot ceilings, which camera mounting approach provides the best aisle coverage without excessive distortion?
- Fisheye cameras at ceiling center of each bay
- Bullet cameras mounted at 20 feet angled along the aisle (Correct answer)
- Dome cameras mounted at 30 feet pointing straight down
- PTZ cameras at each corner of the warehouse
Correct answer: Bullet cameras mounted at 20 feet angled along the aisle
Mounting bullet cameras at mid-height and angling them along the aisle provides a better viewing angle of aisle activity with less geometric distortion than extreme overhead shots.
Question 28: A customer requests that the surveillance system be configured so that camera footage is only retained for 30 days. What storage calculation approach should the technician use?
- Estimate 1TB per camera per month as a universal standard for all resolutions
- Calculate bitrate × seconds per day × number of cameras × 30 days and convert to terabytes (Correct answer)
- Use the NVR's auto-calculate feature without independently verifying the result
- Multiply the camera count by 30GB as a standard estimate for any system
Correct answer: Calculate bitrate × seconds per day × number of cameras × 30 days and convert to terabytes
Storage is calculated as bitrate (Mbps) × seconds/day × cameras × retention days ÷ 8 (bits to bytes) ÷ 1,000,000 (to terabytes), which accounts for actual recording parameters.
Question 29: Which power standard is commonly used to provide both data and power to networked access control readers and IP cameras?
- 12 VDC direct supply only
- PoE (Power over Ethernet) (Correct answer)
- UPS battery backup
- RS-485
Correct answer: PoE (Power over Ethernet)
PoE delivers electrical power alongside data over a standard Ethernet cable, simplifying installation of network-connected access devices.
Question 30: Which biometric technology analyzes the pattern of veins beneath the skin surface for identification?
- Facial geometry mapping
- Vascular (vein) pattern recognition (Correct answer)
- Retinal blood vessel scanning
- Fingerprint ridge mapping
Correct answer: Vascular (vein) pattern recognition
Vascular recognition captures near-infrared images of subcutaneous vein patterns in the hand or finger, which are extremely difficult to spoof.
Question 31: A smart card stores biometric data directly on the card rather than in a central database. This approach is called:
- Centralized biometric matching
- Match-on-card (MoC) (Correct answer)
- Card-on-card enrollment
- Distributed template synchronization
Correct answer: Match-on-card (MoC)
Match-on-card (MoC) stores and processes the biometric template on the card itself, enhancing privacy since biometric data never leaves the credential.
Certified Surveillance Technician (CST)
The CST certification validates proficiency in designing, installing, and maintaining electronic surveillance systems including CCTV cameras, access control, intrusion detection, network security, and digital storage solutions. It covers the full scope of skills required for professional surveillance technicians across physical security and IP-based systems.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy