CHISSP Healthcare IT Network Security & Access Control 2

Question 1

A healthcare network administrator needs to monitor traffic between a biomedical device network and the clinical LAN. Which tool is MOST appropriate?

Accepted Answer

Network-based IDS (NIDS) with a span/mirror port on the inter-segment switch

Answer

Intrusion Detection System (IDS) placed inline between segments

Answer

Host-based antivirus on each medical device

Answer

A proxy server handling all inter-segment HTTP traffic

Question 2

Which of the following is a key security concern unique to legacy medical devices that cannot be patched or updated?

Accepted Answer

They often run outdated operating systems with unmitigated vulnerabilities

Answer

They require more bandwidth than modern devices

Answer

They do not support HL7 FHIR communication standards

Answer

They are incompatible with DHCP-assigned addressing

Question 3

What is the recommended compensating control for a medical device running an unsupported operating system that cannot be updated?

Accepted Answer

Isolate the device in a dedicated VLAN with strict firewall rules and enhanced monitoring

Answer

Decommission the device immediately

Answer

Disable all networking on the device

Answer

Encrypt all data stored on the device's hard drive

Question 4

A hospital's Active Directory environment has a privileged account used by multiple IT administrators. Which practice violates least-privilege principles?

Accepted Answer

Using a shared 'Domain Admin' account for routine administrative tasks

Answer

Requiring MFA for all administrator accounts

Answer

Implementing just-in-time (JIT) access for privileged operations

Answer

Auditing all privileged account activity

Question 5

Which technology allows a healthcare organization to verify the integrity of network devices and endpoints before granting them access to clinical resources?

Accepted Answer

Network Access Control (NAC)

Answer

Content Delivery Network (CDN)

Answer

Dynamic Host Configuration Protocol (DHCP) reservations

Answer

Network Address Translation (NAT)

Question 6

In healthcare IT security, what does 'defense in depth' primarily refer to?

Accepted Answer

Layering multiple independent security controls so a failure in one does not compromise the entire system

Answer

Using the deepest available encryption key lengths

Answer

Deploying a single comprehensive security platform to avoid complexity

Answer

Prioritizing perimeter security above all other controls

Question 7

A nurse's workstation automatically logs out after 3 minutes of inactivity. Which security principle does this automatic timeout BEST enforce?

Accepted Answer

Session management and unauthorized access prevention

Answer

Data integrity

Answer

Non-repudiation

Answer

Audit logging and accountability