CPAS Network & Connectivity Flashcards

What technology allows radiologists to securely access the hospital PACS from a remote location or home office over the internet?

Answer: VPN (Virtual Private Network)

A VPN creates an encrypted tunnel between the remote user and the hospital network, enabling secure PACS access that is equivalent to being physically on-site.

What does TLS/SSL encryption protect during DICOM image transmission over a hospital or external network?

Answer: Data in transit from eavesdropping and tampering

TLS/SSL encrypts data moving across the network, ensuring that DICOM images and patient information cannot be intercepted or altered by unauthorized parties.

In hospital network security, what is the purpose of placing PACS servers in a DMZ (Demilitarized Zone)?

Answer: To create a controlled network buffer that limits direct internet exposure to internal PACS resources

A DMZ places public-facing PACS components in a controlled network segment, preventing direct external access to the core archive and internal hospital systems.

Which authentication approach provides the highest security for PACS workstation login in a US healthcare environment?

Answer: Multi-factor authentication (MFA) combining a password with a second verification factor

MFA requires users to verify identity with both something they know (password) and something they have or are (token/biometric), greatly reducing unauthorized access risk and supporting HIPAA compliance.

What is a 'zero-day vulnerability' in the context of PACS cybersecurity?

Answer: A security flaw that is actively exploited before the vendor has released a patch

A zero-day vulnerability is a software security weakness being exploited in the wild before a vendor fix exists, making it especially dangerous for healthcare systems that may patch infrequently.

What PACS access control principle restricts each user account to only the permissions needed for their specific clinical or administrative role?

Answer: Principle of Least Privilege

The Principle of Least Privilege limits each account's access rights to only what is required for the job, minimizing damage from compromised credentials or insider misuse.