ICS Surveillance & Monitoring Systems 2

Question 1

Which protocol is most commonly used by IP-based surveillance cameras in ICS environments for video streaming?

Accepted Answer

RTSP (Real Time Streaming Protocol)

Answer

RTSP is the standard protocol used by IP cameras to stream video feeds over networks in ICS surveillance deployments.

Question 2

An ICS security team wants to detect unauthorized physical access to a substation. Which monitoring approach provides the BEST audit trail?

Accepted Answer

Deploying badge-reader logs integrated with SIEM

Answer

Badge-reader logs integrated with a SIEM provide timestamped, identity-linked records suitable for forensic audit trails.

Question 3

What is the primary security risk of connecting an IP surveillance camera directly to an ICS control network without segmentation?

Accepted Answer

Cameras can serve as pivot points for attackers to reach control systems

Answer

Unsegmented cameras expand the attack surface, allowing a compromised camera to be used as a pivot point to attack PLCs and controllers.

Question 4

In ICS environments, what does 'alarm fatigue' in monitoring systems refer to?

Accepted Answer

Operators becoming desensitized to alerts due to excessive false positives

Answer

Alarm fatigue occurs when an overwhelming number of alerts—especially false positives—causes operators to ignore or miss critical alarms.

Question 5

Which NERC CIP standard specifically addresses physical security perimeter monitoring requirements for bulk electric systems?

Accepted Answer

NERC CIP-006

Answer

NERC CIP-006 defines requirements for physical security of cyber systems, including monitoring of physical security perimeters.

(ICS) Industrial Control Systems Security Certification Practice Test