nerdexam
ExamsCAS-001Questions#312
CompTIA

CAS-001 · Question #312

CAS-001 Question #312: Real Exam Question with Answer & Explanation

The correct answer is C: Create an IP camera network and deploy a proxy to authenticate users prior to accessing the cameras.. Answer C is correct because it compensates for the camera vendor's lack of authentication capability by inserting an authenticating proxy between users and the cameras. The proxy becomes the authentication enforcement point - users authenticate to the proxy, and only then can the

Question

Ann, a Physical Security Manager, is ready to replace all 50 analog surveillance cameras with IP cameras with built-in web management. Ann has several security guard desks on different networks that must be able to view the cameras without unauthorized people viewing the video as well. The selected IP camera vendor does not have the ability to authenticate users at the camera level. Which of the following should Ann suggest to BEST secure this environment?

Options

  • ACreate an IP camera network and deploy NIPS to prevent unauthorized access.
  • BCreate an IP camera network and only allow SSL access to the cameras.
  • CCreate an IP camera network and deploy a proxy to authenticate users prior to accessing the cameras.
  • DCreate an IP camera network and restrict access to cameras from a single management host.

Explanation

Answer C is correct because it compensates for the camera vendor's lack of authentication capability by inserting an authenticating proxy between users and the cameras. The proxy becomes the authentication enforcement point - users authenticate to the proxy, and only then can they access camera streams. This is a classic compensating control pattern. Answer A (NIPS) would detect/block intrusion attempts but does not authenticate authorized users. Answer B (SSL access) provides encryption in transit but still lacks any user authentication, meaning anyone who can reach the camera URL can view the feed. Answer D (single management host) creates a bottleneck that doesn't scale to multiple guard desks on different networks and doesn't enforce per-user authentication.

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice