AXIS-eLearning-CyberAtAxis Get to Know Cybersecurity at Axis Practice Questions
Prepare for AXIS-eLearning-CyberAtAxis with more than an answer.
- Time limit
- 30 minutes
- Questions on the exam
- Varies (end-of-course quiz covering all 5 modules)
- Passing score
- Not publicly disclosed (completion-based with quiz) (scale N/A)
- Level
- Awareness / Introductory
- Valid for
- N/A (awareness course, no formal certification expiry)
Domains covered on the exam 5
- Why Cybersecurity20%
- The Security Foundation20%
- Axis Approach to Cybersecurity20%
- The Device Security Lifecycle20%
- Axis Security Features in Detail20%
- 1
The Axis cybersecurity approach is built on three pillars. Which component is a primary element of the Hardware pillar?
Show answer details
Correct answer: D
The three pillars of Axis cybersecurity are Hardware, Software, and Processes. The Hardware pillar includes the Axis Edge Vault platform, which utilizes cryptographic computing modules such as a Secure Element, TPM, and system-on-chip security known as TEE (Trusted Execution Environment). Signed firmware is Software; ASDM and ISMS are Processes.
- 2
A system administrator is reviewing the software security features of an Axis camera. They need a feature that specifically guarantees the device will only boot up using genuine, unaltered AXIS OS. Which feature provides this exact protection?
Show answer details
Correct answer: A
Secure Boot is the feature that ensures the device only boots up if it is running genuine, unaltered AXIS OS. It establishes an unbroken chain of trust starting from immutable hardware memory. A common pitfall is confusing this with Signed OS, which is the mechanism used to validate that a firmware update file originated from Axis before it is installed.
- 3
Within the Process pillar of the Axis security foundation, what is the primary purpose of the Axis Security Development Model (ASDM)?
Show answer details
Correct answer: D
The Axis Security Development Model (ASDM) is a framework that defines the security-related activities applied throughout the software development lifecycle. Its primary goal is to minimize security vulnerabilities in Axis products by building security in from the design phase through to release and maintenance.
- 4
The Chief Information Security Officer (CISO) at NovaHealth is reviewing the hospital's network video surveillance system. During a recent incident, an unauthorized user accessed a camera feed located in the HR department, viewing sensitive employee records displayed on a monitor. Which core principle of the CIA Triad was directly compromised in this scenario?
Show answer details
Correct answer: B
Confidentiality is the principle that ensures information is not disclosed to unauthorized individuals, entities, or processes. In this scenario, an unauthorized user viewing sensitive HR records via a camera feed represents a breach of confidentiality. Integrity refers to the accuracy and completeness of data, while availability ensures data is accessible when needed.
- 5
A financial institution discovers that video footage from a specific date was subtly altered to remove an individual from the scene before being exported for an internal investigation. Which aspect of the organization's cybersecurity posture has failed?
Show answer details
Correct answer: D
Integrity ensures that data remains accurate, complete, and unaltered by unauthorized parties. The alteration of video footage to remove a person directly violates the integrity of the data. Axis addresses this specifically with features like Signed Video to verify that footage has not been tampered with since it left the camera.
- 6
A threat intelligence analyst is compiling a report on the cyberthreat landscape for IoT and networked devices. They note that IP cameras are frequently targeted by threat actors. Which TWO of the following are primary reasons threat actors specifically target network cameras in enterprise environments? (Select TWO)
Show answer details
Correct answer: B, E
Network cameras are often targeted because they sit on the network and can be used as a beachhead or pathway for lateral movement into more critical IT systems. Additionally, their processing power can be hijacked to form botnets for DDoS attacks. They are not targeted for their storage capacity, nor is their firmware easily readable in plain text by design.
Network cameras are often targeted because they sit on the network and can be used as a beachhead or pathway for lateral movement into more critical IT systems. Additionally, their processing power can be hijacked to form botnets for DDoS attacks. They are not targeted for their storage capacity, nor is their firmware easily readable in plain text by design.
