nerdexam
ExamsCAS-003Questions#210
CompTIA

CAS-003 · Question #210

CAS-003 Question #210: Real Exam Question with Answer & Explanation

The correct answer is C: Create an IP camera network and deploy a proxy to authenticate users prior to accessing. Since the IP cameras cannot authenticate users at the camera level, authentication must be enforced by an intermediary. Deploying a reverse proxy in front of the camera network allows the proxy to authenticate users before forwarding their requests to the cameras. This means unau

Question

Ann, a Physical Security Manager, is ready to replace all 50 analog surveillance cameras with IP cameras with built-in web management. Ann has several security guard desks on different networks that must be able to view the cameras without unauthorized people viewing the video as well. The selected IP camera vendor does not have the ability to authenticate users at the camera level. Which of the following should Ann suggest to BEST secure this environment?

Options

  • ACreate an IP camera network and deploy NIPS to prevent unauthorized access.
  • BCreate an IP camera network and only allow SSL access to the cameras.
  • CCreate an IP camera network and deploy a proxy to authenticate users prior to accessing
  • DCreate an IP camera network and restrict access to cameras from a single management

Explanation

Since the IP cameras cannot authenticate users at the camera level, authentication must be enforced by an intermediary. Deploying a reverse proxy in front of the camera network allows the proxy to authenticate users before forwarding their requests to the cameras. This means unauthorized users are blocked at the proxy layer and never reach the cameras directly. Option A (NIPS) detects/prevents intrusions after the fact but cannot enforce user authentication. Option B (SSL-only access) encrypts traffic but does not authenticate who is viewing the stream. Option D (single management workstation) is operationally impractical given that multiple security guard desks on different networks need access, and it doesn't solve the authentication problem.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice