CST CST Network Security & Cybersecurity for Surveillance 2

Question 1

A VPN is used in surveillance systems primarily to:

Accepted Answer

Provide encrypted remote access to the surveillance network

Answer

A VPN creates an encrypted tunnel allowing technicians or administrators to securely access the surveillance network remotely.

Question 2

Which encryption standard is currently recommended for securing Wi-Fi connections used by wireless surveillance cameras in the US?

Accepted Answer

WPA2-AES or WPA3

Answer

WPA2 with AES or WPA3 provides strong encryption for wireless surveillance cameras, while WEP and original WPA are considered insecure.

Question 3

What is the purpose of enabling HTTPS instead of HTTP on an IP camera's web interface?

Accepted Answer

To encrypt login credentials and configuration data in transit

Answer

HTTPS encrypts communication between the browser and the camera's web interface, protecting credentials from being intercepted.

Question 4

A CST technician discovers that an NVR is running firmware that is 3 years out of date. What is the MOST important reason to update it?

Accepted Answer

To patch known security vulnerabilities

Answer

Outdated firmware may contain known, publicly disclosed vulnerabilities that attackers can exploit to compromise the device.

Question 5

What does a firewall rule denying outbound connections from an NVR to unknown external IP addresses help prevent?

Accepted Answer

Unauthorized data exfiltration or botnet communication

Answer

Restricting outbound traffic from NVRs prevents compromised devices from sending data externally or participating in botnet activity.

(CST) Certified Surveillance Technician Practice Test