Surveillance & Monitoring Systems Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Surveillance & Monitoring Systems flashcards as text
Which protocol is most commonly used by IP-based surveillance cameras in ICS environments for video streaming?
Answer: RTSP (Real Time Streaming Protocol)
RTSP is the standard protocol used by IP cameras to stream video feeds over networks in ICS surveillance deployments.
An ICS security team wants to detect unauthorized physical access to a substation. Which monitoring approach provides the BEST audit trail?
Answer: Deploying badge-reader logs integrated with SIEM
Badge-reader logs integrated with a SIEM provide timestamped, identity-linked records suitable for forensic audit trails.
What is the primary security risk of connecting an IP surveillance camera directly to an ICS control network without segmentation?
Answer: Cameras can serve as pivot points for attackers to reach control systems
Unsegmented cameras expand the attack surface, allowing a compromised camera to be used as a pivot point to attack PLCs and controllers.
In ICS environments, what does 'alarm fatigue' in monitoring systems refer to?
Answer: Operators becoming desensitized to alerts due to excessive false positives
Alarm fatigue occurs when an overwhelming number of alerts—especially false positives—causes operators to ignore or miss critical alarms.
Which NERC CIP standard specifically addresses physical security perimeter monitoring requirements for bulk electric systems?
Answer: NERC CIP-006
NERC CIP-006 defines requirements for physical security of cyber systems, including monitoring of physical security perimeters.
A SCADA historian is configured to store process data at 1-second intervals. What security concern does this high-resolution data logging introduce?
Answer: Detailed operational fingerprinting that could be exploited by adversaries who gain access
High-resolution historian data can reveal precise operational patterns, setpoints, and vulnerabilities if accessed by an unauthorized party.
What is the recommended approach when a surveillance camera firmware update is available in an ICS environment?
Answer: Test the update in a staging environment before deploying to production cameras
Firmware updates should be validated in a test environment first to ensure they do not introduce compatibility issues or vulnerabilities.