Cybersecurity & Digital Surveillance Flashcards
7 cards from real CSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Cybersecurity & Digital Surveillance flashcards as text
What type of attack involves an adversary intercepting and potentially altering communication between two parties without their knowledge?
Answer: Man-in-the-Middle (MitM)
A Man-in-the-Middle attack occurs when an attacker secretly intercepts and relays messages between two parties who believe they are communicating directly.
In digital surveillance systems, what is the primary purpose of network segmentation?
Answer: To isolate surveillance networks from general corporate traffic
Network segmentation isolates surveillance systems on dedicated network segments, limiting exposure to breaches and unauthorized access from other network zones.
Which protocol is most commonly used to encrypt web-based access to IP camera management interfaces?
Answer: HTTPS/TLS
HTTPS using TLS encryption protects web-based camera management interfaces by encrypting data in transit between the browser and the device.
A surveillance camera is discovered still using its factory-set default password. This represents which category of vulnerability?
Answer: Default credential vulnerability
Default credential vulnerabilities occur when devices retain manufacturer-set usernames and passwords that are publicly known and never changed by the operator.
What is the function of a VLAN (Virtual Local Area Network) in protecting a surveillance system?
Answer: It logically separates surveillance traffic from other network traffic
VLANs logically segment network traffic so that surveillance devices operate on an isolated broadcast domain, reducing the risk of cross-network attacks.
Which cybersecurity framework is most commonly referenced when assessing the security posture of critical infrastructure surveillance systems in the US?
Answer: NIST Cybersecurity Framework
The NIST Cybersecurity Framework provides a voluntary set of standards and guidelines widely used for managing cybersecurity risk in critical infrastructure, including surveillance systems.
In the context of IP-based surveillance, what does 'firmware hardening' primarily involve?
Answer: Disabling unnecessary services and updating firmware to remove known vulnerabilities
Firmware hardening involves updating device firmware to patched versions and disabling unused ports, protocols, and services to minimize the attack surface.