CHISSP Healthcare IT Network Security & Access Control 3

Question 1

A healthcare organization implements a Zero Trust Architecture (ZTA) for its clinical network. What is the foundational principle of this approach?

Accepted Answer

Never trust, always verify — authenticate and authorize every request regardless of network location

Answer

Trust all users on the internal network by default

Answer

Block all external access and rely on perimeter firewalls

Answer

Trust devices that have passed initial onboarding permanently

Question 2

Which protocol is specifically designed to provide centralized authentication, authorization, and accounting for network access in healthcare environments?

Accepted Answer

RADIUS (Remote Authentication Dial-In User Service)

Answer

SNMP (Simple Network Management Protocol)

Answer

SMTP (Simple Mail Transfer Protocol)

Answer

LDAP (Lightweight Directory Access Protocol)

Question 3

A CHISSP professional is reviewing firewall rules for a hospital network. Which rule represents a critical security misconfiguration?

Accepted Answer

Allow any-to-any traffic with logging enabled

Answer

Allow outbound HTTPS (TCP 443) from clinical workstations to the internet

Answer

Allow inbound HL7 traffic on port 2575 from a trusted business partner only

Answer

Deny all inbound traffic from the internet to internal medical device networks

Question 4

What is the primary security benefit of implementing certificate-based authentication for healthcare system integrations using HL7 or FHIR APIs?

Accepted Answer

It provides strong mutual authentication, ensuring both parties are who they claim to be

Answer

It reduces the bandwidth required for data exchange

Answer

It eliminates the need for encryption of data in transit

Answer

It simplifies integration by removing the need for authorization tokens

Question 5

A hospital's security team wants to detect lateral movement by an attacker who has already compromised an internal workstation. Which tool is MOST effective for this purpose?

Accepted Answer

Security Information and Event Management (SIEM) system with behavioral analytics

Answer

Perimeter firewall with stateful inspection

Answer

Antivirus software on all endpoints

Answer

Data Loss Prevention (DLP) solution at the network edge

Question 6

Which of the following BEST describes the purpose of network time protocol (NTP) security in a healthcare IT environment?

Accepted Answer

To synchronize clocks across systems, ensuring accurate and correlated security audit logs

Answer

To encrypt all time-based authentication tokens used in EHR systems

Answer

To prevent unauthorized access to network switches and routers

Answer

To schedule automatic backups of patient data at consistent intervals

Question 7

A healthcare organization must ensure that a terminated employee's access to all clinical systems is revoked immediately upon termination. Which process BEST achieves this?

Accepted Answer

Integrating HR system termination workflows with automated identity lifecycle management to immediately disable all accounts

Answer

Requiring the terminated employee to surrender their badge and password verbally

Answer

Having each department head manually remove system access within 24 hours

Answer

Changing the terminated employee's password to a random value and informing the IT team