CST CST Network Security & Cybersecurity for Surveillance 3

Question 1

What is the BEST method to verify the integrity of a firmware update file before installing it on a surveillance device?

Accepted Answer

Verify the file's cryptographic hash (MD5/SHA) against the manufacturer's published value

Answer

Comparing the cryptographic hash of the downloaded file against the manufacturer's published hash confirms the file has not been tampered with.

Question 2

What is the function of a DMZ (demilitarized zone) in a surveillance network architecture?

Accepted Answer

To expose specific surveillance services to the internet while protecting the internal network

Answer

A DMZ isolates publicly accessible surveillance components (like remote viewing servers) from the internal protected network.

Question 3

Which practice helps protect against brute-force attacks on IP camera login portals?

Accepted Answer

Enabling account lockout after a set number of failed login attempts

Answer

Account lockout policies limit the number of failed login attempts, making brute-force credential attacks impractical.

Question 4

What is role-based access control (RBAC) in the context of a surveillance system?

Accepted Answer

Assigning specific permissions to users based on their job function

Answer

RBAC limits each user's access to only the features and data necessary for their role, reducing insider threat risk.

Question 5

Why should unused network ports on a surveillance switch be administratively disabled?

Accepted Answer

To prevent unauthorized devices from being plugged into the network

Answer

Disabling unused switch ports prevents an attacker or unauthorized device from gaining network access by physically connecting to an open port.

(CST) Certified Surveillance Technician Practice Test