Certified PACS Associate (CPAS) Exam — Questions and Answers

Question 1: A PACS administrator notices that newly registered patients in the HIS are not appearing on the RIS worklist. The MOST likely cause is:

The PACS archive disk is full
DICOM DIMSE services are offline
HL7 ADT feed from HIS to RIS is broken (Correct answer)
WADO-RS endpoint is misconfigured

Correct answer: HL7 ADT feed from HIS to RIS is broken

Patient registration data flows from HIS to RIS via HL7 ADT (Admit/Discharge/Transfer) messages; a broken ADT feed means new patients cannot be scheduled in RIS.

Question 2: Why is regular risk reassessment important?

Because it provides work for risk management teams
Because initial assessments are always wrong
Because the risk landscape changes as conditions, activities, and environments evolve (Correct answer)
Because regulators require it exactly once per year

Correct answer: Because the risk landscape changes as conditions, activities, and environments evolve

Regular risk reassessment is essential because risks are dynamic — new threats emerge, existing risks change in severity, and the effectiveness of controls may vary over time.

Question 3: What does "system integration" mean in a technology context?

Connecting different technology systems to work together and share data seamlessly (Correct answer)
Replacing all existing systems with a single new system
Using the same password for all systems
Installing systems in the same physical location

Correct answer: Connecting different technology systems to work together and share data seamlessly

System integration involves connecting different technology systems, applications, or platforms so they can work together, share data, and provide a cohesive user experience.

Question 4: Why are periodic PACS database integrity checks an important component of routine system maintenance?

To enhance image color saturation on diagnostic displays
To detect and repair index corruption, orphaned image references, and broken table relationships (Correct answer)
To physically increase the storage array capacity
To speed up end-user workstation login times

Correct answer: To detect and repair index corruption, orphaned image references, and broken table relationships

Database integrity checks identify corrupted indexes, orphaned records, and referential integrity errors that can cause image retrieval failures or silent data loss if left unaddressed.

Question 5: What is the main purpose of imaging informatics in a PACS system?

To replace traditional hospital databases.
To capture high-resolution images only.
To support patient billing processes.
To enhance radiology image storage and transmission (Correct answer)

Correct answer: To enhance radiology image storage and transmission

The main purpose of imaging informatics within a PACS system is to enhance the efficient storage, retrieval, transmission, and display of radiology images and associated data. It involves the application of computer science and information technology to manage the vast amounts of digital imaging data generated in healthcare. This optimization improves workflow, facilitates faster access for clinicians, and supports better diagnostic and treatment decisions.

Question 6: What should be done when strategic implementation encounters unexpected obstacles?

Abandon the strategy entirely and start over
Blame the planning team and reassign responsibilities
Continue without changes regardless of obstacles
Assess the situation, adjust the plan as needed, and communicate changes to stakeholders (Correct answer)

Correct answer: Assess the situation, adjust the plan as needed, and communicate changes to stakeholders

When obstacles arise during implementation, the appropriate response is to assess the situation, make necessary adjustments to the plan, and communicate changes to all affected stakeholders.

Question 7: What distinguishes a certified professional from a non-certified practitioner?

A specific educational degree only
Longer years of experience only
Higher salary requirements only
Demonstrated knowledge through standardized assessment and adherence to professional standards (Correct answer)

Correct answer: Demonstrated knowledge through standardized assessment and adherence to professional standards

Certification validates that a professional has met established standards of knowledge and competence through standardized assessment.

Question 8: What should a communication plan include at minimum?

Social media posting schedule only
Only the list of email addresses
A single announcement template
Stakeholder list, message content, channels, frequency, and responsible parties (Correct answer)

Correct answer: Stakeholder list, message content, channels, frequency, and responsible parties

A comprehensive communication plan identifies stakeholders, defines message content, specifies communication channels, sets frequency, and assigns responsible parties.

Question 9: Which foundational principle is most critical to professional practice in this field?

Maximizing revenue above all other considerations
Evidence-based decision making and continuous improvement (Correct answer)
Prioritizing speed over accuracy in all situations
Following only traditional methods without adaptation

Correct answer: Evidence-based decision making and continuous improvement

Evidence-based decision making ensures that professional practices are grounded in proven methodologies and current best practices.

Question 10: When communicating with diverse stakeholders, what approach is recommended?

Adapt communication style and detail level to each stakeholder group (Correct answer)
Provide only positive information
Minimize communication frequency to avoid overload
Use the same template for all stakeholders

Correct answer: Adapt communication style and detail level to each stakeholder group

Different stakeholders have different needs, interests, and levels of expertise, requiring adapted communication approaches for each group.

Question 11: What is the role of audit logs in a PACS environment?

To monitor user access and system activities (Correct answer)
To store image files
To log maintenance checks
To control printer usage

Correct answer: To monitor user access and system activities

Audit logs record detailed information about who accessed the PACS system, when they accessed it, what actions they performed (e.g., viewing an image, modifying a record), and from where. These logs are crucial for security, compliance (e.g., HIPAA), and troubleshooting, as they provide an immutable record of system usage. They help detect unauthorized activity or data breaches and ensure accountability.

Question 12: What does a 'C-STORE failure' error in PACS typically indicate?

The destination DICOM device rejected or failed to store the transmitted image (Correct answer)
A completed PACS database backup
A successful image transfer was completed
A successful DICOM query-retrieve operation

Correct answer: The destination DICOM device rejected or failed to store the transmitted image

C-STORE is the DICOM command for transmitting and saving an image; a failure response means the destination could not accept it, often due to storage limits, connectivity, or AE Title mismatch.

Question 13: In DICOM networking, what is the purpose of a Service Class Provider (SCP)?

It responds to service requests from a Service Class User (Correct answer)
It compresses images before transmission
It validates HL7 messages for PACS ingestion
It initiates a DICOM association to request a service

Correct answer: It responds to service requests from a Service Class User

The SCP is the server-side role that receives and fulfills DICOM service requests, such as storing images (C-STORE SCP) or responding to queries (C-FIND SCP).

Question 14: What is HIPAA's relevance to PACS?

It ensures data security and patient privacy (Correct answer)
It regulates hospital cafeteria services
It promotes hardware recycling
It prohibits image exports

Correct answer: It ensures data security and patient privacy

HIPAA (Health Insurance Portability and Accountability Act) is a US law that sets standards for the protection of sensitive patient health information (PHI). In PACS, HIPAA mandates strict rules for securing medical images and associated data, ensuring patient privacy and controlling access to this information. Compliance is essential to avoid legal penalties and maintain patient trust in the confidentiality of their medical records.

Question 15: Why is data security important when using professional technology tools?

Only to comply with specific regulations
To protect sensitive information from unauthorized access, breaches, and loss (Correct answer)
To reduce the cost of technology infrastructure
To make systems run faster

Correct answer: To protect sensitive information from unauthorized access, breaches, and loss

Data security protects sensitive professional, client, and organizational information from unauthorized access, breaches, theft, and loss, maintaining trust and compliance.

Question 16: Which approach best describes the integration of theory and practice in this profession?

Using theory only during examinations
Applying theoretical knowledge to solve real-world problems while adapting to specific contexts (Correct answer)
Ignoring theory and relying solely on experience
Following theory exactly without any modification

Correct answer: Applying theoretical knowledge to solve real-world problems while adapting to specific contexts

Effective professional practice involves applying theoretical foundations to real-world situations while adapting approaches to specific contexts and needs.

Question 17: What does DICOM stand for in medical imaging?

Digital Image Conversion of Medicine
Data Integration for Clinical Management
Diagnostic Image Computing Method
Digital Imaging and Communications in Medicine (Correct answer)

Correct answer: Digital Imaging and Communications in Medicine

DICOM stands for Digital Imaging and Communications in Medicine. It is an international standard for handling, storing, printing, and transmitting information in medical imaging. This standard defines the format for medical images and related data, ensuring interoperability between different medical imaging devices and systems.

Question 18: What is the most common cause of slow image retrieval at a PACS diagnostic workstation?

Too many USB peripheral devices connected to the workstation
Network congestion or insufficient bandwidth between the workstation and PACS server (Correct answer)
An outdated keyboard or mouse driver
Workstation screen resolution set too high

Correct answer: Network congestion or insufficient bandwidth between the workstation and PACS server

PACS image files are large, and network bottlenecks are the leading cause of slow retrieval; bandwidth limitations and congestion should be the first area investigated.

Question 19: What is a key performance indicator (KPI) in quality management?

A theoretical ideal that can never be measured
A measurable value that demonstrates how effectively objectives are being achieved (Correct answer)
A subjective opinion from management
A financial budget line item

Correct answer: A measurable value that demonstrates how effectively objectives are being achieved

KPIs are quantifiable measurements that demonstrate how effectively an organization or process is achieving its key quality objectives.

Question 20: Which protocol is used to retrieve DICOM objects from a PACS using a RESTful HTTP-based approach?

SFTP (Secure File Transfer Protocol)
WADO-RS (Web Access to DICOM Objects via RESTful Services) (Correct answer)
HL7 MLLP (Minimal Lower Layer Protocol)
DIMSE (DICOM Message Service Element)

Correct answer: WADO-RS (Web Access to DICOM Objects via RESTful Services)

WADO-RS is the RESTful DICOMweb service that allows HTTP GET requests to retrieve DICOM instances, series, or studies from a compliant PACS server.

Question 21: What is a key benefit of using standardized imaging workflows?

Increased system downtime.
Improved consistency and reduced errors (Correct answer)
Slower data transfer.
Manual approval delays.

Correct answer: Improved consistency and reduced errors

Standardized imaging workflows establish consistent procedures for every step of the imaging process, from patient registration to image interpretation. This consistency minimizes variations, significantly reduces the likelihood of human error, and ensures that all patients receive the same high quality of care. It also simplifies staff training and quality control measures.

Question 22: What does RIS typically manage in imaging informatics?

Image compression.
Digital x-ray sensor replacement.
Radiology workflows and patient information (Correct answer)
MRI machine calibration.

Correct answer: Radiology workflows and patient information

A RIS (Radiology Information System) typically manages the comprehensive workflows and patient information specific to a radiology department within imaging informatics. This includes scheduling appointments, tracking patient exams, managing radiologist worklists, generating reports, and handling billing information. The RIS integrates with PACS to provide a complete solution for managing the entire imaging process, from order entry to final report distribution.

Question 23: Which component ensures routing of imaging studies in workflow systems?

RIS server.
EMR dashboard.
Workflow engine (Correct answer)
Patient gateway.

Correct answer: Workflow engine

The workflow engine is the component that ensures the efficient routing of imaging studies within a PACS and RIS workflow system. It automates and manages the sequence of tasks, rules, and data flow from image acquisition to interpretation and reporting. By orchestrating the movement of studies and related information, the workflow engine optimizes efficiency, reduces manual errors, and ensures that studies reach the appropriate radiologists and clinicians promptly.

Question 24: What is a key purpose of using DICOM in radiology?

Standardizing patient billing codes
Securing financial transactions
Ensuring interoperability in image exchange (Correct answer)
Facilitating image compression only

Correct answer: Ensuring interoperability in image exchange

DICOM (Digital Imaging and Communications in Medicine) is the universal standard for medical image exchange. Its key purpose is to ensure that medical images and related data can be consistently created, stored, transmitted, and viewed across different devices and systems from various manufacturers. This interoperability is fundamental for seamless data flow and collaboration in radiology departments and beyond.

Question 25: Which device is crucial for ensuring continuous PACS server operation during power outages?

Surge protector.
Uninterruptible Power Supply (UPS) (Correct answer)
KVM switch.
Router.

Correct answer: Uninterruptible Power Supply (UPS)

An Uninterruptible Power Supply (UPS) is crucial for ensuring continuous PACS server operation during power outages. A UPS provides immediate, temporary power when the main electricity supply fails, preventing abrupt shutdowns that could lead to data corruption or system damage. This allows critical medical imaging systems to remain operational for a short period or to perform a controlled shutdown, safeguarding invaluable patient data and maintaining workflow continuity.

Question 26: Why is data encryption important in medical imaging systems?

To reduce file size
To protect sensitive information (Correct answer)
To prevent updates
To improve image resolution

Correct answer: To protect sensitive information

Medical imaging systems handle highly sensitive patient health information (PHI), including images and associated demographic data. Data encryption scrambles this information, making it unreadable to unauthorized individuals, thereby protecting patient privacy and ensuring compliance with regulations like HIPAA. It is a critical security measure against data breaches and unauthorized access.

Question 27: In PACS networking, what does QoS (Quality of Service) primarily accomplish?

Manages PACS user authentication
Compresses images automatically
Encrypts DICOM data in transit
Prioritizes medical imaging traffic over lower-priority data (Correct answer)

Correct answer: Prioritizes medical imaging traffic over lower-priority data

QoS policies prioritize DICOM and PACS traffic on the network so imaging data is not delayed by lower-priority activity such as email or web browsing.

Question 28: What role do key performance indicators play in strategic implementation?

They replace the need for strategic planning entirely
They are used only for employee salary decisions
They provide measurable benchmarks to track progress toward strategic objectives (Correct answer)
They are optional reporting tools with no strategic value

Correct answer: They provide measurable benchmarks to track progress toward strategic objectives

KPIs serve as measurable benchmarks that enable organizations to track progress toward strategic objectives and make data-driven adjustments to implementation plans.

Question 29: What does VLAN stand for and why is it used in PACS network design?

Virtual LAN — isolates PACS traffic for security and performance (Correct answer)
Verified LAN — validates each DICOM packet
Virtual Link — connects two remote PACS sites via WAN
Volume LAN — stores large DICOM file archives

Correct answer: Virtual LAN — isolates PACS traffic for security and performance

VLANs (Virtual Local Area Networks) logically segment network traffic so PACS imaging data is isolated from general hospital traffic, improving both security and performance.

Question 30: How should best practices be adapted when applied to new situations?

Abandon them entirely and create new methods each time
Evaluate the specific context and modify as needed while maintaining core principles (Correct answer)
Apply them exactly as written regardless of circumstances
Use them only if specifically required by regulation

Correct answer: Evaluate the specific context and modify as needed while maintaining core principles

Best practices should be adapted to specific contexts and situations while maintaining their core principles and evidence-based foundations.

Question 31: What is HL7 commonly used for in healthcare?

Hardware linking between medical devices
HTML standard for web display
Health Level Seven International protocol for data exchange (Correct answer)
Financial audits in healthcare

Correct answer: Health Level Seven International protocol for data exchange

HL7 (Health Level Seven) is a set of international standards for the transfer of clinical and administrative data between healthcare information systems. It provides a framework for exchanging electronic health information, enabling different applications to communicate and share data seamlessly. This protocol is crucial for achieving interoperability across various hospital departments and systems.

Question 32: What is a DICOM tag used for?

To compress image files
To hide patient data
To describe image attributes and metadata (Correct answer)
To display error messages

Correct answer: To describe image attributes and metadata

A DICOM tag is a specific data element within a DICOM file that contains metadata about the image and the patient. These tags describe various attributes such as patient name, study date, image modality, acquisition parameters, and more. They are essential for organizing, searching, and correctly interpreting medical images, ensuring all necessary information is embedded with the image data.

Question 33: What distinguishes inherent risk from residual risk?

Inherent risk is financial; residual risk is operational
Inherent risk exists before controls; residual risk remains after controls are applied (Correct answer)
There is no meaningful difference between them
Inherent risk is internal; residual risk is external

Correct answer: Inherent risk exists before controls; residual risk remains after controls are applied

Inherent risk is the level of risk present before any controls are implemented, while residual risk is the level that remains after controls and mitigations are applied.

Question 34: When configuring a DICOM Application Entity (AE) title, which element uniquely identifies a DICOM device on the network?

AE Title combined with hostname/IP and port number (Correct answer)
IP address alone
MAC address of the network adapter
Serial number of the imaging device

Correct answer: AE Title combined with hostname/IP and port number

A DICOM node is identified by its AE Title plus the host address and port, forming a unique endpoint used in DICOM association negotiations.

Question 35: What is the purpose of a risk register?

To eliminate all risks before starting work
To assign blame when problems occur
To satisfy audit requirements only
To document, track, and manage all identified risks throughout a project or operation (Correct answer)

Correct answer: To document, track, and manage all identified risks throughout a project or operation

A risk register is a living document that records all identified risks, their assessments, response plans, and status updates throughout the lifecycle of a project or operation.

Question 36: The IHE Scheduled Workflow (SWF) integration profile defines the interaction between which of the following systems?

PACS and EHR for image sharing
Modality and cloud archive only
HIS, RIS, Modality, and PACS (Correct answer)
PACS and teleradiology vendors only

Correct answer: HIS, RIS, Modality, and PACS

IHE SWF coordinates the end-to-end radiology workflow among HIS, RIS, imaging modalities, and PACS, standardizing how orders, images, and results flow.

Question 37: What minimum network bandwidth is generally recommended for transmitting uncompressed CT images efficiently in a PACS environment?

1 Kbps
100 Mbps (Correct answer)
1 Mbps
10 Mbps

Correct answer: 100 Mbps

A minimum of 100 Mbps is typically recommended to handle the large file sizes of uncompressed CT studies without unacceptable delays for radiologists.

Question 38: How does role-based access improve data security?

It gives everyone equal access
It disables backups
It restricts access based on job role (Correct answer)
It hides data permanently

Correct answer: It restricts access based on job role

Role-based access control (RBAC) assigns specific permissions and access levels to users based on their job functions or roles within an organization. This means that individuals only have access to the data and systems necessary to perform their duties, minimizing the risk of unauthorized access to sensitive information. It enhances security by enforcing the principle of least privilege, ensuring data is only seen by those who need it.

Question 39: What is the purpose of a technology needs assessment?

To purchase the most expensive available solution
To identify gaps between current capabilities and desired outcomes (Correct answer)
To justify the IT department's budget
To replace all manual processes immediately

Correct answer: To identify gaps between current capabilities and desired outcomes

A technology needs assessment systematically identifies gaps between current technological capabilities and desired outcomes, guiding informed technology investment decisions.

Question 40: Which network performance metric best measures a PACS network's ability to sustain continuous image delivery for multiple simultaneous users?

Latency
Jitter
Packet TTL (Time to Live)
Throughput (effective bandwidth) (Correct answer)

Correct answer: Throughput (effective bandwidth)

Throughput measures actual sustained data delivery capacity, determining how many radiologists can simultaneously stream large image sets without performance degradation.

Question 41: Which DICOM transfer syntax guarantees that no pixel data is altered during compression?

MPEG-4
JPEG Baseline (Process 1)
JPEG-LS Lossless (Correct answer)
JPEG 2000 Lossy

Correct answer: JPEG-LS Lossless

JPEG-LS Lossless preserves every original pixel value exactly, making it suitable for applications where any data alteration is clinically unacceptable.

Question 42: What is the first phase of strategic planning?

Budget allocation and resource distribution
Environmental analysis and assessment of current position (Correct answer)
Implementation of tactical initiatives
Performance evaluation and reporting

Correct answer: Environmental analysis and assessment of current position

Strategic planning begins with analyzing the current environment, including internal strengths and weaknesses and external opportunities and threats (SWOT analysis).

Question 43: Which HL7 version is widely adopted in healthcare systems?

HL7 Web API
HL7 Version 2.x (Correct answer)
HL7 Version 4
HL7 Version 1

Correct answer: HL7 Version 2.x

HL7 Version 2.x refers to a family of messaging standards that have been widely adopted globally for exchanging clinical and administrative data between healthcare applications. Despite the development of newer versions like HL7 Version 3 and FHIR, Version 2.x remains prevalent due to its long history and extensive implementation across existing healthcare IT infrastructure. It facilitates essential communication between systems like EMRs, RIS, and HIS.

Question 44: What is the primary function of a PACS server in medical imaging?

Cleaning imaging equipment.
Capturing medical images directly.
Performing surgical procedures.
Storing and managing medical images (Correct answer)

Correct answer: Storing and managing medical images

The primary function of a PACS (Picture Archiving and Communication System) server in medical imaging is to efficiently store, retrieve, and manage digital medical images. It acts as a central repository for images from various modalities like X-ray, CT, and MRI, replacing traditional film archives. This system allows healthcare professionals to access patient images quickly and securely from different locations, facilitating diagnosis and treatment planning.

Question 45: What is the primary role of a PACS cache server in a multi-site hospital network?

Manages DICOM routing rules across all modalities centrally
Stores frequently accessed recent images locally to reduce retrieval time from the central archive (Correct answer)
Generates compliance audit logs for regulatory reporting
Encrypts all images before transmission to remote sites

Correct answer: Stores frequently accessed recent images locally to reduce retrieval time from the central archive

A PACS cache server at each site holds recently accessed studies locally, so radiologists retrieve images quickly without pulling every study from the central archive over the WAN.

Question 46: Why is stakeholder buy-in important for strategic implementation?

Because successful implementation requires support and cooperation from those affected (Correct answer)
Because it eliminates the need for project management
Because it generates positive media coverage
Because it is a legal requirement in all organizations

Correct answer: Because successful implementation requires support and cooperation from those affected

Stakeholder buy-in is critical because successful implementation depends on the active support, cooperation, and engagement of the people who will be affected by or involved in executing the strategy.

Question 47: What role does PACS play in imaging informatics?

They generate billing codes.
They store and manage medical imaging data (Correct answer)
They handle hospital food services.
They encrypt all hospital communication.

Correct answer: They store and manage medical imaging data

PACS (Picture Archiving and Communication System) is a medical imaging technology that provides economical storage and convenient access to images from multiple modalities like CT, MRI, and X-ray. Its primary role in imaging informatics is to store, retrieve, distribute, and manage digital medical images. This system replaces traditional hard-copy films, streamlining image management within healthcare facilities.

Question 48: Why is regular software updating important in PACS security?

To change the user interface
To delete outdated data
To apply security patches and reduce vulnerabilities (Correct answer)
To increase system complexity

Correct answer: To apply security patches and reduce vulnerabilities

Regular software updates often include critical security patches that address newly discovered vulnerabilities and bugs in the system. By applying these updates promptly, healthcare organizations can protect their PACS from potential cyberattacks, data breaches, and unauthorized access. This proactive approach is essential for maintaining the integrity, confidentiality, and availability of patient data.

Question 49: What should be considered before implementing new technology?

Cost, compatibility with existing systems, training needs, and security implications (Correct answer)
Whether competitors are using it
Only the purchase price of the technology
The vendor's marketing materials exclusively

Correct answer: Cost, compatibility with existing systems, training needs, and security implications

Before implementing new technology, organizations should evaluate total cost, system compatibility, staff training requirements, security implications, and alignment with strategic goals.

Question 50: In a PACS disaster recovery plan, what does RTO (Recovery Time Objective) define?

The total physical storage capacity required in the backup system
The maximum acceptable elapsed time from failure to full PACS restoration (Correct answer)
The number of technical staff required to perform a recovery
The compression ratio applied to archived backup images

Correct answer: The maximum acceptable elapsed time from failure to full PACS restoration

RTO specifies the maximum tolerable downtime — how quickly the PACS must be restored after a disaster to avoid unacceptable impact on clinical operations and patient safety.

Question 51: After restoring PACS from a major disaster recovery event, what final validation step confirms the system is clinically safe to resume production use?

Verifying image routing, display accuracy, and prior study accessibility with clinical staff before resuming full production (Correct answer)
Confirming the reading room coffee machine is operational
Confirming that all workstation screen savers are active and properly timed
Checking that laser printer paper trays are fully loaded

Correct answer: Verifying image routing, display accuracy, and prior study accessibility with clinical staff before resuming full production

Clinical validation — confirming that images route correctly, display with accurate window/level, and prior studies are fully accessible — must be completed before radiologists resume reading to ensure patient safety.

Question 52: Why is it important to document and standardize best practices?

To reduce the number of employees needed
To limit creativity and prevent any changes
To satisfy insurance requirements only
To ensure consistency, enable training, and facilitate continuous improvement (Correct answer)

Correct answer: To ensure consistency, enable training, and facilitate continuous improvement

Documenting and standardizing best practices ensures consistency across operations, enables effective training, and provides a baseline for continuous improvement.

Question 53: When a failed PACS server must be replaced with new hardware, what is the most critical resource needed to restore full system functionality quickly?

A list of current radiology staff email addresses
The original vendor purchase invoice and warranty card
The server's original retail packaging and shipping materials
Current, verified configuration backups and fully documented system settings (Correct answer)

Correct answer: Current, verified configuration backups and fully documented system settings

Comprehensive, up-to-date configuration backups allow the replacement server to be configured identically to the failed one, enabling rapid restoration with minimal manual reconstruction.

Question 54: Why is continuous improvement important in quality management?

Because regulators demand changes every year
Because existing processes are always fundamentally flawed
Because standards evolve, competitors improve, and customer expectations change (Correct answer)
Because employees need new tasks to stay busy

Correct answer: Because standards evolve, competitors improve, and customer expectations change

Continuous improvement is essential because the competitive landscape, customer expectations, and industry standards are constantly evolving, requiring ongoing adaptation.

Question 55: What is the primary reason for testing PACS UPS (Uninterruptible Power Supply) systems on a scheduled maintenance basis?

To benchmark workstation login performance
To verify network throughput remains stable during simulated power events
To confirm the UPS batteries can sustain the system load long enough for an orderly shutdown during a real outage (Correct answer)
To measure image compression efficiency during reduced power

Correct answer: To confirm the UPS batteries can sustain the system load long enough for an orderly shutdown during a real outage

UPS batteries degrade over time; periodic load testing confirms the battery still has sufficient capacity to support PACS through a controlled shutdown when power actually fails.

Question 56: What is the role of benchmarking in establishing best practices?

Comparing performance against top performers to identify improvement opportunities (Correct answer)
Setting the lowest acceptable standard for performance
Matching exactly what competitors are doing
Eliminating all practices that differ from the industry average

Correct answer: Comparing performance against top performers to identify improvement opportunities

Benchmarking involves comparing your performance against top performers or industry leaders to identify gaps and opportunities for improvement.

Question 57: Which DICOM service is used by a PACS to query a remote archive for available studies?

C-STORE
C-ECHO
C-MOVE
C-FIND (Correct answer)

Correct answer: C-FIND

C-FIND is the DICOM query service that allows a SCU (Service Class User) to search a remote SCP (Service Class Provider) for matching studies, series, or instances.

Question 58: How often should compliance procedures be reviewed and updated?

Only when an audit is scheduled
Once at initial certification and never again
Regularly, and whenever regulations change or new risks are identified (Correct answer)
Every ten years regardless of changes

Correct answer: Regularly, and whenever regulations change or new risks are identified

Compliance procedures should be reviewed regularly and updated whenever regulations change, new risks emerge, or organizational changes occur.

Question 59: Which system integrates image display with patient electronic records?

EMR system with image viewer (Correct answer)
Firewall system.
UPS backup unit.
Load balancer.

Correct answer: EMR system with image viewer

An EMR (Electronic Medical Record) system is designed to manage comprehensive patient health information. When integrated with an image viewer, it allows clinicians to access and display medical images directly alongside other patient data, providing a holistic view of the patient's health. This integration is crucial for efficient clinical decision-making and coordinated care.

Question 60: If the PACS archive reports unexpectedly low free storage, what should the administrator investigate first?

Workstation monitor resolution settings
Network switch firmware version
User desktop background image files
Orphaned or duplicate studies, failed deletion jobs, or runaway log file growth (Correct answer)

Correct answer: Orphaned or duplicate studies, failed deletion jobs, or runaway log file growth

Orphaned studies, failed automated deletion tasks, and unbounded log files are the most frequent causes of unexpected storage consumption in a PACS archive.

Question 61: What compression ratio does JPEG 2000 lossy compression typically achieve for CT or MR images while maintaining diagnostic quality?

10:1 to 20:1 (Correct answer)
5:1 to 8:1
50:1 to 100:1
2:1

Correct answer: 10:1 to 20:1

JPEG 2000 lossy typically achieves 10:1 to 20:1 compression for CT/MR studies while retaining sufficient diagnostic quality for most clinical reads.

Question 62: What does the acronym RIS stand for in the context of PACS integration?

Radiology Information System (Correct answer)
Rapid Integration Suite
Radiographic Imaging Software
Remote Image Server

Correct answer: Radiology Information System

RIS (Radiology Information System) manages scheduling, orders, results reporting, and billing in a radiology department, and is a key integration partner for PACS.

Question 63: What is the primary benefit of adopting technology in professional practice?

Improved efficiency, accuracy, and the ability to scale operations (Correct answer)
Reducing the workforce to zero
Meeting a technology trend without clear purpose
Eliminating the need for human judgment

Correct answer: Improved efficiency, accuracy, and the ability to scale operations

Technology adoption in professional practice primarily improves efficiency, enhances accuracy, and enables scalability of operations while supporting human decision-making.

Question 64: What ensures diagnostic imaging workflow efficiency?

Limited staff access.
Manual data entry.
Disconnected systems.
Integrated and automated workflows (Correct answer)

Correct answer: Integrated and automated workflows

Integrated and automated workflows streamline the entire diagnostic imaging process, from order entry to image acquisition, interpretation, and reporting. By connecting various systems (e.g., EMR, RIS, PACS) and automating tasks, they reduce manual errors and eliminate redundant steps. This efficiency speeds up the delivery of patient care and optimizes resource utilization in imaging departments.

Question 65: What is a 'zero-day vulnerability' in the context of PACS cybersecurity?

A newly deployed system with no configuration applied
A security flaw that is actively exploited before the vendor has released a patch (Correct answer)
A PACS system achieving zero minutes of unplanned downtime
A network connection with zero measured latency

Correct answer: A security flaw that is actively exploited before the vendor has released a patch

A zero-day vulnerability is a software security weakness being exploited in the wild before a vendor fix exists, making it especially dangerous for healthcare systems that may patch infrequently.

Question 66: How frequently should PACS hard drive SMART (Self-Monitoring, Analysis and Reporting Technology) status be reviewed as part of preventive maintenance?

Once per decade
Monthly or more frequently (Correct answer)
Only after a physical drive failure occurs
Once every five years

Correct answer: Monthly or more frequently

Monthly SMART status checks allow administrators to detect early warning signs of drive degradation and schedule replacements before an unplanned failure causes data loss.

Question 67: What technology allows radiologists to securely access the hospital PACS from a remote location or home office over the internet?

Plain FTP file transfer
Unencrypted HTTP connection
VPN (Virtual Private Network) (Correct answer)
Telnet terminal session

Correct answer: VPN (Virtual Private Network)

A VPN creates an encrypted tunnel between the remote user and the hospital network, enabling secure PACS access that is equivalent to being physically on-site.

Question 68: What is a root cause analysis used for?

To document problems for annual reporting
To identify the underlying cause of a problem rather than just addressing symptoms (Correct answer)
To calculate the financial cost of errors
To assign blame to individuals who made mistakes

Correct answer: To identify the underlying cause of a problem rather than just addressing symptoms

Root cause analysis is a systematic method used to identify the fundamental underlying cause of a problem, enabling solutions that prevent recurrence rather than just treating symptoms.

Question 69: Which transport layer protocol does DICOM rely on for reliable image data transmission over hospital networks?

UDP
ICMP
TCP (Correct answer)
HTTP

Correct answer: TCP

DICOM uses TCP because it provides reliable, ordered, error-checked delivery of data packets essential for intact medical image transmission.

Question 70: Which data storage method is best for long-term PACS data archiving?

Temporary RAM storage
Storing on individual workstations
Cloud or offsite storage solutions (Correct answer)
External flash drives only

Correct answer: Cloud or offsite storage solutions

Cloud or offsite storage solutions are ideal for long-term PACS data archiving due to their scalability, cost-effectiveness, and robust disaster recovery capabilities. These solutions provide secure, redundant storage away from the primary data center, protecting against local failures and ensuring data accessibility over extended periods as required by regulatory guidelines. They offer reliable and accessible storage for historical patient images, crucial for continuity of care.

Question 71: How should negative or difficult information be communicated to stakeholders?

Honestly and promptly, with proposed solutions or mitigation steps (Correct answer)
Delayed until the situation has fully resolved
Buried within positive information to minimize impact
Only when specifically asked about it

Correct answer: Honestly and promptly, with proposed solutions or mitigation steps

Negative information should be communicated honestly and promptly, accompanied by proposed solutions or mitigation plans to maintain trust and enable timely action.

Question 72: A hospital wants clinicians at an affiliated clinic to view PACS images through their EHR without installing separate viewer software. Which approach BEST supports this goal?

Installing a thick DICOM viewer on every clinic workstation
Implementing a web-based zero-footprint viewer using WADO-RS or DICOMweb (Correct answer)
Configuring a VPN with direct PACS database access
Burning studies to CD for courier delivery

Correct answer: Implementing a web-based zero-footprint viewer using WADO-RS or DICOMweb

A zero-footprint web viewer using DICOMweb standards (WADO-RS, STOW-RS, QIDO-RS) delivers images through any browser without client software installation.

Question 73: What is the primary purpose of industry regulations in this field?

To limit competition in the marketplace
To protect the public and ensure consistent professional standards (Correct answer)
To generate revenue for regulatory bodies
To create barriers to entry for new professionals

Correct answer: To protect the public and ensure consistent professional standards

Industry regulations are primarily designed to protect the public by ensuring professionals meet consistent standards of competence and conduct.

Question 74: What type of storage is commonly used for long-term archiving in PACS?

RAM modules.
External hard drives.
Tape libraries (Correct answer)
DVD players.

Correct answer: Tape libraries

Tape libraries are commonly used for long-term archiving in PACS due to their cost-effectiveness, high storage capacity, and reliability for data that doesn't require immediate, frequent access. While primary storage (like RAID) handles active images, tape libraries provide an economical solution for storing historical patient studies over many years. This ensures regulatory compliance for data retention and allows for retrieval of older images when needed, without consuming expensive online storage.

Question 75: What does RPO (Recovery Point Objective) determine in a PACS backup and recovery strategy?

The maximum amount of data measured in time that can be lost before clinical impact becomes unacceptable (Correct answer)
The minimum number of backup copies required by regulation
The physical geographic location required for offsite backup media
The maximum speed at which the PACS must be restored after failure

Correct answer: The maximum amount of data measured in time that can be lost before clinical impact becomes unacceptable

RPO defines the acceptable data loss window; if RPO is 4 hours, backups must run at least every 4 hours so no more than 4 hours of imaging studies can be lost in a disaster.

Question 76: Which interface standard is most commonly used to communicate patient demographic and order information between a Hospital Information System (HIS) and a PACS?

HL7 (Correct answer)
DICOM
FHIR R4
IHE XDS

Correct answer: HL7

HL7 (Health Level 7) messaging is the primary standard used to exchange administrative and clinical data such as ADT, ORM, and ORU messages between HIS/RIS and PACS.

Question 77: Why is compliance with DICOM and HL7 standards critical in PACS?

It prevents internet access
It accelerates software piracy
It reduces electricity consumption
It ensures compatibility and accurate data sharing (Correct answer)

Correct answer: It ensures compatibility and accurate data sharing

Compliance with DICOM and HL7 standards is critical because these standards provide a common framework for medical imaging and healthcare data exchange. DICOM ensures that images can be shared and viewed across different imaging devices and PACS, while HL7 standardizes the exchange of patient information between various clinical systems. Together, they guarantee seamless interoperability, accurate data sharing, and efficient workflows across the healthcare enterprise.

Question 78: Which of the following helps ensure secure access to imaging systems?

Implementing user authentication (Correct answer)
Reducing password strength
Disabling login screens
Using shared accounts

Correct answer: Implementing user authentication

User authentication is a fundamental security measure that verifies the identity of a user attempting to access an imaging system. This typically involves requiring a unique username and password, or other credentials, to ensure that only authorized personnel can view, modify, or transmit sensitive patient data. It prevents unauthorized access and helps maintain data integrity and confidentiality.

Question 79: What is active listening in a professional context?

Agreeing with everything the speaker says
Simply waiting for your turn to speak
Taking verbatim notes of everything said
Fully concentrating, understanding, responding, and remembering what is being said (Correct answer)

Correct answer: Fully concentrating, understanding, responding, and remembering what is being said

Active listening involves fully concentrating on the speaker, understanding the message, providing appropriate responses, and retaining the information communicated.

Question 80: Which risk response strategy involves reducing the likelihood or impact of a risk?

Risk mitigation (Correct answer)
Risk escalation
Risk transfer
Risk acceptance

Correct answer: Risk mitigation

Risk mitigation involves taking proactive steps to reduce either the probability of a risk occurring or its potential impact if it does occur.

Question 81: When applying core principles in practice, what should be the first consideration?

Cost reduction opportunities
Timeline acceleration
Client entertainment preferences
Safety and compliance with established standards (Correct answer)

Correct answer: Safety and compliance with established standards

Safety and compliance with established standards must always be the primary consideration when applying professional principles.

Question 82: What does a risk matrix assess?

The probability and impact of identified risks (Correct answer)
Only the financial cost of risks
The number of employees affected
The timeline for risk resolution

Correct answer: The probability and impact of identified risks

A risk matrix evaluates risks based on two dimensions: the probability (likelihood) of occurrence and the potential impact (severity) if the risk materializes.

Question 83: Which user typically initiates the imaging workflow?

Radiologic technologist.
Lab technician.
Nurse assistant.
Ordering physician (Correct answer)

Correct answer: Ordering physician

The imaging workflow typically begins when an ordering physician determines the need for a diagnostic imaging study for a patient. They place the order within the Electronic Medical Record (EMR) or Radiology Information System (RIS). This initial order then triggers subsequent steps in the workflow, such as scheduling, image acquisition, and interpretation.

Question 84: What role does continuing education play in maintaining certification?

It is required only for international practice
It ensures professionals stay current with evolving standards and practices (Correct answer)
It only applies to entry-level professionals
It is purely optional with no impact on certification

Correct answer: It ensures professionals stay current with evolving standards and practices

Continuing education is essential to maintaining certification as it ensures professionals remain current with industry developments and evolving standards.

Question 85: Which system component manages user access and security in PACS?

Print server.
File-sharing application.
Access control server (Correct answer)
Color calibration tool.

Correct answer: Access control server

The access control server is the system component specifically responsible for managing user access and security within a PACS. It authenticates users, verifies their credentials, and enforces permissions to ensure that only authorized personnel can view, modify, or transmit medical images and patient data. This is critical for maintaining patient confidentiality, complying with regulations like HIPAA, and protecting the integrity of sensitive healthcare information.

Question 86: What is the purpose of data redundancy in PACS systems?

To save storage space
To encrypt old records
To prevent data loss through backup copies (Correct answer)
To slow down system performance

Correct answer: To prevent data loss through backup copies

Data redundancy in PACS involves storing multiple copies of imaging data across different storage devices or locations. This strategy ensures that if one storage component fails, the data remains accessible from another copy, preventing data loss and maintaining system availability. It's a crucial component of disaster recovery and business continuity planning, safeguarding valuable patient information.

Question 87: What is the Plan-Do-Check-Act (PDCA) cycle used for?

Employee performance reviews exclusively
Continuous improvement of processes and practices (Correct answer)
Annual budget allocation
One-time project planning only

Correct answer: Continuous improvement of processes and practices

The PDCA cycle is a systematic approach to continuous improvement where processes are planned, implemented, evaluated, and refined in an ongoing cycle.

Question 88: A DICOM Modality Worklist (MWL) server reduces errors by:

Allowing technologists to retrieve pre-populated patient demographics at the scanner (Correct answer)
Compressing images prior to transmission
Automatically anonymizing patient data before archival
Managing PACS user authentication

Correct answer: Allowing technologists to retrieve pre-populated patient demographics at the scanner

MWL pushes scheduled exam data to modalities so technologists do not need to manually type patient information, reducing transcription errors and misidentification.

Question 89: A PACS modality worklist is not populating on a CT scanner despite the network connection being confirmed active. What should be investigated next?

The CT scanner's X-ray tube calibration and kVp settings
The HL7 ADT feed from the HIS/RIS and the DICOM MWL server configuration and logs (Correct answer)
The radiology department wall paint color
The hospital cafeteria operating hours

Correct answer: The HL7 ADT feed from the HIS/RIS and the DICOM MWL server configuration and logs

The DICOM Modality Worklist (MWL) is populated from HL7 ADT messages sent by the HIS/RIS; failures in the HL7 feed or MWL server configuration are the most common causes of empty worklists.

Question 90: When integrating PACS with an EHR using FHIR, which FHIR resource is typically used to represent a diagnostic imaging study?

Media
DiagnosticReport
ImagingStudy (Correct answer)
Observation

Correct answer: ImagingStudy

The FHIR ImagingStudy resource represents a DICOM study, including series and instance references, enabling EHR systems to link to images stored in PACS.

Question 91: In PACS performance measurement, what does 'latency' specifically refer to?

The number of simultaneous users supported
The maximum rated data transfer speed of a connection
The delay between requesting an image and its appearance on the diagnostic workstation (Correct answer)
The total storage capacity of the PACS archive

Correct answer: The delay between requesting an image and its appearance on the diagnostic workstation

Latency is the elapsed time from when a workstation requests an image to when it is fully rendered on screen, directly impacting radiologist reading efficiency.

Question 92: Which quality management tool is used to identify the most significant factors in a dataset?

Organizational chart
Flow chart
Pareto chart (80/20 rule) (Correct answer)
Gantt chart

Correct answer: Pareto chart (80/20 rule)

A Pareto chart applies the 80/20 principle to identify the vital few factors that account for the majority of effects, helping prioritize improvement efforts.

Question 93: What PACS access control principle restricts each user account to only the permissions needed for their specific clinical or administrative role?

Open network access policy across all departments
Principle of Least Privilege (Correct answer)
Shared administrator credentials for IT convenience
Full administrative access granted to all staff by default

Correct answer: Principle of Least Privilege

The Principle of Least Privilege limits each account's access rights to only what is required for the job, minimizing damage from compromised credentials or insider misuse.

Question 94: When should established methodologies be reconsidered?

When evidence shows better alternatives exist or when outcomes decline (Correct answer)
Only during annual reviews regardless of performance
Whenever a new employee joins the organization
Never, once established they should remain permanent

Correct answer: When evidence shows better alternatives exist or when outcomes decline

Established methodologies should be reconsidered when new evidence suggests better alternatives, when outcomes decline, or when the operating context changes significantly.

Question 95: Which IHE transaction is responsible for sending a completed study notification back to the RIS after images are stored in PACS?

RAD-13 (Modality Images Stored) (Correct answer)
RAD-7 (Modality Worklist Query)
RAD-4 (Procedure Scheduled)
RAD-28 (Retrieve Images)

Correct answer: RAD-13 (Modality Images Stored)

RAD-13 (Modality Images Stored) notifies the image manager/PACS that a modality has completed storing images, triggering downstream RIS status updates.

Question 96: Which authentication approach provides the highest security for PACS workstation login in a US healthcare environment?

Shared group username and password posted near the workstation
No login requirement on the internal hospital network
Password-only single-factor authentication
Multi-factor authentication (MFA) combining a password with a second verification factor (Correct answer)

Correct answer: Multi-factor authentication (MFA) combining a password with a second verification factor

MFA requires users to verify identity with both something they know (password) and something they have or are (token/biometric), greatly reducing unauthorized access risk and supporting HIPAA compliance.

Question 97: What does TLS/SSL encryption protect during DICOM image transmission over a hospital or external network?

PACS software license compliance
Image resolution and pixel quality
Data in transit from eavesdropping and tampering (Correct answer)
Archive storage space allocation

Correct answer: Data in transit from eavesdropping and tampering

TLS/SSL encrypts data moving across the network, ensuring that DICOM images and patient information cannot be intercepted or altered by unauthorized parties.

Question 98: During scheduled PACS maintenance, which task validates that backup procedures will actually work before a real disaster occurs?

Performing test restores from backups to verify completeness and recoverability (Correct answer)
Inventorying spare keyboards and mice
Updating workstation screen saver timeout settings
Changing the user interface color theme

Correct answer: Performing test restores from backups to verify completeness and recoverability

An untested backup is an unreliable backup; regular test restores confirm that data is complete, uncorrupted, and restorable within the organization's recovery time objectives.

Question 99: Which of the following enhances interoperability between imaging and hospital systems?

JPEG imaging protocols.
Email-based image transmission.
DICOM and HL7 standards (Correct answer)
Private database structures.

Correct answer: DICOM and HL7 standards

DICOM (Digital Imaging and Communications in Medicine) and HL7 (Health Level Seven) standards are crucial for enhancing interoperability between imaging and hospital information systems. DICOM specifically governs the communication and management of medical images and related data, while HL7 focuses on the exchange of clinical and administrative information, such as patient demographics and orders. Together, these standards enable seamless and standardized data flow across different healthcare systems, ensuring comprehensive patient records and efficient workflows.

Question 100: What is a primary threat to data integrity in PACS?

Strong Wi-Fi signals
System failures or malware attacks (Correct answer)
Printer malfunctions
Frequent backups

Correct answer: System failures or malware attacks

Data integrity in PACS (Picture Archiving and Communication System) refers to the accuracy, consistency, and reliability of medical images and patient information. System failures, such as hardware malfunctions or software bugs, can corrupt or lose data, while malware attacks like ransomware can encrypt or delete critical records. Both directly compromise the integrity of the data, potentially leading to misdiagnosis or treatment errors.

Certified PACS Associate (CPAS) Exam

The CPAS exam certifies individuals in the fundamental knowledge and skills required to work with Picture Archiving and Communication Systems (PACS) in a healthcare environment.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

pacsadmin.org — Renewal, score validity, exam format, passing score, retake policy, time limit, eligibility, test delivery, registration, exam information · verified Oct 2026