CST CST Network Security & Cybersecurity for Surveillance 1 — Questions and Answers
Question 1: Which protocol is recommended for encrypting video streams transmitted over an IP surveillance network?
- FTP
- RTSP over TLS (RTSPS) (Correct answer)
- Telnet
- HTTP
Correct answer: RTSP over TLS (RTSPS)
RTSPS (RTSP over TLS) encrypts the video stream to prevent interception on IP surveillance networks.
Question 2: What is the primary purpose of placing surveillance cameras and NVRs on a separate VLAN?
- To increase video resolution
- To reduce power consumption
- To isolate surveillance traffic and limit unauthorized access (Correct answer)
- To enable remote viewing without credentials
Correct answer: To isolate surveillance traffic and limit unauthorized access
A dedicated VLAN isolates surveillance devices from the general network, reducing the attack surface and preventing unauthorized access.
Question 3: Which of the following is the BEST practice when setting up default credentials on new IP cameras?
- Leave factory defaults for easy recovery
- Change default usernames and passwords immediately (Correct answer)
- Use the same password across all cameras for convenience
- Disable all authentication to speed up access
Correct answer: Change default usernames and passwords immediately
Default credentials are publicly known and must be changed immediately to prevent unauthorized access to surveillance devices.
Question 4: What does a network intrusion detection system (NIDS) do in a surveillance environment?
- Records video footage to backup drives
- Monitors network traffic for suspicious or malicious activity (Correct answer)
- Controls PTZ camera movement
- Compresses video for storage
Correct answer: Monitors network traffic for suspicious or malicious activity
A NIDS monitors network packets in real time and alerts administrators to potential intrusions or anomalous behavior.
Question 5: Which port should be closed or filtered on surveillance network devices if Telnet is not required?
- Port 80
- Port 443
- Port 23 (Correct answer)
- Port 554
Correct answer: Port 23
Telnet operates on port 23 and transmits data in plain text, making it a security risk that should be disabled if not needed.
Question 6: What security measure ensures that only authorized devices can connect to a surveillance network switch port?
- DHCP reservation
- Port security / 802.1X authentication (Correct answer)
- NAT translation
- SNMP community strings
Correct answer: Port security / 802.1X authentication
802.1X port-based network access control authenticates devices before allowing them onto the network switch port.
CST CST Network Security & Cybersecurity for Surveillance 1
Which protocol is recommended for encrypting video streams transmitted over an IP surveillance network?