Question 1: What does the HL7 standard primarily define in healthcare IT?

• Medical image format specifications
• Messaging standards for exchanging clinical and administrative data between systems (Correct answer)
• Network security protocols for hospitals
• Electronic health record database schemas

Correct answer: Messaging standards for exchanging clinical and administrative data between systems

HL7 defines standards for the exchange, integration, sharing, and retrieval of electronic health information between healthcare systems.

HL7 v2.x uses pipe-delimited message format. HL7 FHIR is the modern REST-based standard. Modern medical devices transmit data to EHR systems via HL7 interfaces, requiring BMET knowledge for troubleshooting.

Question 2: What is the purpose of a VLAN in a hospital network?

• To increase internet bandwidth
• To logically segment network traffic for security and performance (Correct answer)
• To provide wireless coverage
• To encrypt all network data

Correct answer: To logically segment network traffic for security and performance

A VLAN logically segments a physical network into separate broadcast domains, improving security by isolating medical device traffic.

A dedicated biomedical device VLAN improves security, performance, and regulatory compliance. Common issues include VLAN misconfiguration after network port moves and DHCP scope exhaustion on the medical device VLAN.

Question 3: What communication standard is used to transmit and store medical images such as X-rays, CT scans, and MRIs?

• HL7
• DICOM (Correct answer)
• FHIR
• SNMP

Correct answer: DICOM

DICOM is the universal standard for transmitting, storing, and displaying medical images across different equipment and PACS systems.

DICOM defines both a file format and a network communication protocol. Common troubleshooting involves DICOM communication failures between modalities and PACS, usually caused by incorrect AE Title configuration or firewall blocking.

Question 4: Which network protocol is commonly used to monitor the status of network-connected medical devices?

• FTP
• SNMP (Correct answer)
• SMTP
• SSH

Correct answer: SNMP

SNMP is used to monitor and manage network devices by querying device status information and receiving alerts.

SNMP operates in a manager-agent model. SNMP v3 adds encryption and authentication. Community strings function as passwords and must be changed from defaults for security.

Question 5: What is the primary security concern when medical devices run outdated or unpatched operating systems?

• Slower boot times
• Known vulnerabilities that can be exploited by malware or attackers (Correct answer)
• Incompatibility with newer printers
• Higher power consumption

Correct answer: Known vulnerabilities that can be exploited by malware or attackers

Unpatched devices contain known security vulnerabilities that can be exploited by malware or attackers to compromise patient data or disrupt device operation.

Compensating controls include network segmentation, host-based firewalls, application whitelisting, and disabling unnecessary services. MDS2 documents from manufacturers guide security management.

Question 6: What does HIPAA require regarding the transmission of electronic Protected Health Information (ePHI) over a network?

• ePHI must only be sent via fax
• ePHI must be encrypted during transmission using appropriate safeguards (Correct answer)
• ePHI must be stored on local drives only
• ePHI can be sent in plaintext if the network is internal

Correct answer: ePHI must be encrypted during transmission using appropriate safeguards

HIPAA's Security Rule requires that ePHI transmitted over networks be protected through encryption and other technical safeguards.

Biomedical technicians must ensure medical devices that transmit patient data use encrypted connections. Common issues include devices using outdated encryption (TLS 1.0) or transmitting data in cleartext.

Question 7: What is a PACS system used for in a hospital?

• Patient admission and scheduling
• Storing, retrieving, and distributing medical images electronically (Correct answer)
• Pharmacy automation and dispensing
• Power distribution monitoring

Correct answer: Storing, retrieving, and distributing medical images electronically

PACS stores, retrieves, distributes, and displays medical images from modalities such as X-ray, CT, MRI, and ultrasound.

Biomedical technicians support PACS by maintaining imaging modality DICOM configurations, troubleshooting image transfer failures, and ensuring diagnostic workstation displays meet AAPM TG-18 quality standards.

Question 8: Which wireless standard is most commonly used for medical device connectivity in hospitals today?

• Bluetooth Classic
• Wi-Fi (IEEE 802.11) (Correct answer)
• Zigbee
• NFC

Correct answer: Wi-Fi (IEEE 802.11)

Wi-Fi is the dominant wireless standard for medical device connectivity in hospitals, providing sufficient bandwidth, range, and infrastructure support.

Signal strength requirements are typically -65dBm or better for reliable medical device operation. Wireless surveys using spectrum analyzers help identify coverage gaps and interference sources.

Question 9: What is the function of a network firewall between the medical device network and the hospital's general network?

• To speed up data transfer
• To control and filter network traffic based on security rules (Correct answer)
• To provide wireless access points
• To assign IP addresses to devices

Correct answer: To control and filter network traffic based on security rules

A firewall controls and filters network traffic between segments based on security rules, protecting medical devices from unauthorized access.

Biomedical technicians must work with IT security teams to define appropriate firewall rules when deploying new network-connected medical devices. Common issues include overly restrictive rules blocking legitimate traffic.

Question 10: What does the term 'interoperability' mean in the context of healthcare IT and medical devices?

• The ability of a device to operate on battery power
• The ability of different systems and devices to exchange and use information seamlessly (Correct answer)
• The speed at which a device processes data
• The ability to operate in multiple countries

Correct answer: The ability of different systems and devices to exchange and use information seamlessly

Interoperability refers to the ability of different healthcare systems and devices to communicate, exchange data, and use the information effectively.

Healthcare interoperability has four levels: foundational, structural, semantic, and organizational. The 21st Century Cures Act mandates interoperability and prohibits information blocking.

Question 11: Why is static IP addressing often preferred over DHCP for critical medical devices on a hospital network?

• Static IPs provide faster network speeds
• Static IPs ensure the device always has the same address, preventing communication failures if DHCP is unavailable (Correct answer)
• Static IPs use less network bandwidth
• Static IPs automatically encrypt device traffic

Correct answer: Static IPs ensure the device always has the same address, preventing communication failures if DHCP is unavailable

Static IP addresses ensure critical medical devices always have a predictable, consistent network address.

Integration interfaces (HL7, DICOM) are often configured with specific IP addresses, and a DHCP address change would break connections. DHCP reservations offer a middle ground.

Question 12: What is the IHE (Integrating the Healthcare Enterprise) initiative's primary goal?

• Manufacturing cheaper medical devices
• Improving how healthcare information systems share information using established standards (Correct answer)
• Creating a single universal EHR system
• Training healthcare IT professionals

Correct answer: Improving how healthcare information systems share information using established standards

IHE improves interoperability by defining integration profiles that describe how standards like HL7 and DICOM should be used.

IHE Connectathons are annual testing events where vendors verify their implementations work together. Requiring IHE conformance when specifying new equipment helps ensure interoperability.

Question 13: A BIOMED technician notices that medical device telemetry data is dropping packets on the hospital Wi-Fi. Which QoS mechanism should be prioritized to ensure reliable transmission?

• Best-effort delivery
• Weighted Fair Queuing (WFQ) with medical traffic class (Correct answer)
• Spanning Tree Protocol
• MAC address filtering

Correct answer: Weighted Fair Queuing (WFQ) with medical traffic class

Weighted Fair Queuing assigns higher priority to critical medical traffic classes, reducing dropped packets for telemetry.

Question 14: Under HIPAA's Security Rule, which control specifically addresses ensuring that ePHI transmitted over a network cannot be improperly modified without detection?

• Access control
• Audit controls
• Transmission integrity (Correct answer)
• Person authentication

Correct answer: Transmission integrity

Transmission integrity controls verify that ePHI is not altered or destroyed in an unauthorized manner during network transmission.

Question 15: A hospital wants to segment its biomedical device network from the administrative network. Which technology accomplishes this at Layer 2?

• NAT (Network Address Translation)
• VLAN (Virtual LAN) (Correct answer)
• DNS (Domain Name System)
• SNMP (Simple Network Management Protocol)

Correct answer: VLAN (Virtual LAN)

VLANs logically segment networks at Layer 2 (Data Link), isolating biomedical device traffic from administrative systems.

Question 16: Which encryption protocol is recommended by NIST for securing data transmitted between medical devices and hospital servers in 2024?

• SSL 3.0
• TLS 1.2 or higher (Correct answer)
• WEP
• DES

Correct answer: TLS 1.2 or higher

NIST recommends TLS 1.2 or TLS 1.3 for securing data in transit; older protocols like SSL 3.0 and WEP are deprecated.

Question 17: A biomedical device is assigned a static IP of 192.168.10.50/24. What is the broadcast address for this subnet?

• 192.168.10.0
• 192.168.10.1
• 192.168.10.255 (Correct answer)
• 192.168.10.254

Correct answer: 192.168.10.255

For a /24 subnet, the broadcast address is the last address in the range — 192.168.10.255.

Question 18: During a risk assessment of a networked infusion pump, the BIOMED technician identifies that the device uses Telnet for remote management. What is the primary security concern?

• Telnet uses too much bandwidth
• Telnet transmits data including credentials in plaintext (Correct answer)
• Telnet is incompatible with IPv6
• Telnet cannot be used on medical networks

Correct answer: Telnet transmits data including credentials in plaintext

Telnet sends all data, including usernames and passwords, as unencrypted plaintext, making it vulnerable to eavesdropping.

Question 19: A hospital's IDS generates an alert when a networked vital signs monitor begins scanning other IP addresses on the LAN. What type of attack does this behavior most likely indicate?

• Denial of Service (DoS)
• Ransomware encryption
• Lateral movement / network reconnaissance (Correct answer)
• DNS poisoning

Correct answer: Lateral movement / network reconnaissance

Port/IP scanning from a compromised device indicates an attacker performing network reconnaissance to identify additional targets for lateral movement.