CHISSP Healthcare IT Network Security & Access Control 2

Question 1

A healthcare network administrator needs to monitor traffic between a biomedical device network and the clinical LAN. Which tool is MOST appropriate?

Accepted Answer

Network-based IDS (NIDS) with a span/mirror port on the inter-segment switch

Answer

A NIDS with a span port passively monitors traffic between segments without impacting device performance or availability, which is critical for time-sensitive biomedical devices.

Question 2

Which of the following is a key security concern unique to legacy medical devices that cannot be patched or updated?

Accepted Answer

They often run outdated operating systems with unmitigated vulnerabilities

Answer

Many legacy medical devices run end-of-life operating systems (e.g., Windows XP) that cannot receive security patches, leaving known vulnerabilities permanently unmitigated.

Question 3

What is the recommended compensating control for a medical device running an unsupported operating system that cannot be updated?

Accepted Answer

Isolate the device in a dedicated VLAN with strict firewall rules and enhanced monitoring

Answer

Network isolation with strict ACLs and enhanced monitoring compensates for an unpatched device by limiting its exposure and increasing visibility into any anomalous activity.

Question 4

A hospital's Active Directory environment has a privileged account used by multiple IT administrators. Which practice violates least-privilege principles?

Accepted Answer

Using a shared 'Domain Admin' account for routine administrative tasks

Answer

Sharing a single Domain Admin account eliminates individual accountability, grants excessive privileges for routine tasks, and violates both least-privilege and non-repudiation principles.

Question 5

Which technology allows a healthcare organization to verify the integrity of network devices and endpoints before granting them access to clinical resources?

Accepted Answer

Network Access Control (NAC)

Answer

NAC evaluates device health — patch status, antivirus, configuration compliance — before permitting connection, preventing non-compliant endpoints from accessing sensitive clinical resources.

CHISSP - Certified Healthcare Information Systems Security Practitioner Practice Test

CHISSP - Certified Healthcare Information Systems Security Practitioner Practice Test

CHISSP Healthcare IT Network Security & Access Control 2