Certified PACS Associate (CPAS) Exam — Questions and Answers
Question 1: How often should compliance procedures be reviewed and updated?
- Regularly, and whenever regulations change or new risks are identified (Correct answer)
- Only when an audit is scheduled
- Every ten years regardless of changes
- Once at initial certification and never again
Correct answer: Regularly, and whenever regulations change or new risks are identified
Compliance procedures should be reviewed regularly and updated whenever regulations change, new risks emerge, or organizational changes occur.
Question 2: What is the first step in the risk management process?
- Risk acceptance — deciding to live with all risks
- Risk avoidance — canceling all activities
- Risk transfer — purchasing insurance immediately
- Risk identification — recognizing potential threats and vulnerabilities (Correct answer)
Correct answer: Risk identification — recognizing potential threats and vulnerabilities
Risk identification is the critical first step in risk management, involving systematic recognition and documentation of potential threats and vulnerabilities.
Question 3: What is the primary purpose of industry regulations in this field?
- To protect the public and ensure consistent professional standards (Correct answer)
- To generate revenue for regulatory bodies
- To create barriers to entry for new professionals
- To limit competition in the marketplace
Correct answer: To protect the public and ensure consistent professional standards
Industry regulations are primarily designed to protect the public by ensuring professionals meet consistent standards of competence and conduct.
Question 4: What distinguishes quality assurance from quality control?
- QA is more expensive; QC is free
- QA is proactive and process-focused; QC is reactive and product-focused (Correct answer)
- QA is performed by managers; QC is performed by workers
- There is no practical difference between them
Correct answer: QA is proactive and process-focused; QC is reactive and product-focused
Quality assurance is a proactive approach focused on preventing defects through process improvement, while quality control is reactive, focused on identifying defects in products.
Question 5: Why is it important to document and standardize best practices?
- To satisfy insurance requirements only
- To reduce the number of employees needed
- To ensure consistency, enable training, and facilitate continuous improvement (Correct answer)
- To limit creativity and prevent any changes
Correct answer: To ensure consistency, enable training, and facilitate continuous improvement
Documenting and standardizing best practices ensures consistency across operations, enables effective training, and provides a baseline for continuous improvement.
Question 6: What does a risk matrix assess?
- The probability and impact of identified risks (Correct answer)
- The timeline for risk resolution
- Only the financial cost of risks
- The number of employees affected
Correct answer: The probability and impact of identified risks
A risk matrix evaluates risks based on two dimensions: the probability (likelihood) of occurrence and the potential impact (severity) if the risk materializes.
Question 7: What is the first action a PACS administrator should take when PACS becomes completely unavailable due to a major system failure?
- Activate the documented downtime procedure and notify clinical staff so patient care can continue (Correct answer)
- Immediately reboot all PACS servers simultaneously
- Contact the diagnostic workstation monitor manufacturer
- Delete and reinstall the PACS application software
Correct answer: Activate the documented downtime procedure and notify clinical staff so patient care can continue
The immediate priority during an outage is activating downtime protocols so clinical staff can maintain patient care workflows (e.g., printed images, portable devices) while the technical fault is diagnosed.
Question 8: The IHE Scheduled Workflow (SWF) integration profile defines the interaction between which of the following systems?
- HIS, RIS, Modality, and PACS (Correct answer)
- PACS and EHR for image sharing
- Modality and cloud archive only
- PACS and teleradiology vendors only
Correct answer: HIS, RIS, Modality, and PACS
IHE SWF coordinates the end-to-end radiology workflow among HIS, RIS, imaging modalities, and PACS, standardizing how orders, images, and results flow.
Question 9: When a diagnostic workstation displays images with incorrect window/level values, what is the most likely cause?
- Incorrect DICOM presentation state or workstation display calibration settings (Correct answer)
- Low printer ink on the laser printer
- Faulty network cable between the modality and PACS
- An expired user account password
Correct answer: Incorrect DICOM presentation state or workstation display calibration settings
Window/level rendering issues are almost always caused by misconfigured DICOM presentation states or workstation calibration settings, not hardware or network problems.
Question 10: In PACS networking, what does QoS (Quality of Service) primarily accomplish?
- Encrypts DICOM data in transit
- Manages PACS user authentication
- Prioritizes medical imaging traffic over lower-priority data (Correct answer)
- Compresses images automatically
Correct answer: Prioritizes medical imaging traffic over lower-priority data
QoS policies prioritize DICOM and PACS traffic on the network so imaging data is not delayed by lower-priority activity such as email or web browsing.
Question 11: What role do key performance indicators play in strategic implementation?
- They provide measurable benchmarks to track progress toward strategic objectives (Correct answer)
- They are used only for employee salary decisions
- They replace the need for strategic planning entirely
- They are optional reporting tools with no strategic value
Correct answer: They provide measurable benchmarks to track progress toward strategic objectives
KPIs serve as measurable benchmarks that enable organizations to track progress toward strategic objectives and make data-driven adjustments to implementation plans.
Question 12: What role does PACS play in imaging informatics?
- They handle hospital food services.
- They store and manage medical imaging data (Correct answer)
- They encrypt all hospital communication.
- They generate billing codes.
Correct answer: They store and manage medical imaging data
PACS (Picture Archiving and Communication System) is a medical imaging technology that provides economical storage and convenient access to images from multiple modalities like CT, MRI, and X-ray. Its primary role in imaging informatics is to store, retrieve, distribute, and manage digital medical images. This system replaces traditional hard-copy films, streamlining image management within healthcare facilities.
Question 13: What role does continuing education play in maintaining certification?
- It is purely optional with no impact on certification
- It only applies to entry-level professionals
- It ensures professionals stay current with evolving standards and practices (Correct answer)
- It is required only for international practice
Correct answer: It ensures professionals stay current with evolving standards and practices
Continuing education is essential to maintaining certification as it ensures professionals remain current with industry developments and evolving standards.
Question 14: A DICOM Modality Worklist (MWL) server reduces errors by:
- Compressing images prior to transmission
- Allowing technologists to retrieve pre-populated patient demographics at the scanner (Correct answer)
- Automatically anonymizing patient data before archival
- Managing PACS user authentication
Correct answer: Allowing technologists to retrieve pre-populated patient demographics at the scanner
MWL pushes scheduled exam data to modalities so technologists do not need to manually type patient information, reducing transcription errors and misidentification.
Question 15: What is a key benefit of using standardized imaging workflows?
- Manual approval delays.
- Slower data transfer.
- Improved consistency and reduced errors (Correct answer)
- Increased system downtime.
Correct answer: Improved consistency and reduced errors
Standardized imaging workflows establish consistent procedures for every step of the imaging process, from patient registration to image interpretation. This consistency minimizes variations, significantly reduces the likelihood of human error, and ensures that all patients receive the same high quality of care. It also simplifies staff training and quality control measures.
Question 16: Which of the following enhances interoperability between imaging and hospital systems?
- DICOM and HL7 standards (Correct answer)
- JPEG imaging protocols.
- Email-based image transmission.
- Private database structures.
Correct answer: DICOM and HL7 standards
DICOM (Digital Imaging and Communications in Medicine) and HL7 (Health Level Seven) standards are crucial for enhancing interoperability between imaging and hospital information systems. DICOM specifically governs the communication and management of medical images and related data, while HL7 focuses on the exchange of clinical and administrative information, such as patient demographics and orders. Together, these standards enable seamless and standardized data flow across different healthcare systems, ensuring comprehensive patient records and efficient workflows.
Question 17: Which authentication approach provides the highest security for PACS workstation login in a US healthcare environment?
- Multi-factor authentication (MFA) combining a password with a second verification factor (Correct answer)
- No login requirement on the internal hospital network
- Password-only single-factor authentication
- Shared group username and password posted near the workstation
Correct answer: Multi-factor authentication (MFA) combining a password with a second verification factor
MFA requires users to verify identity with both something they know (password) and something they have or are (token/biometric), greatly reducing unauthorized access risk and supporting HIPAA compliance.
Question 18: What does SWOT analysis evaluate?
- Strengths, Weaknesses, Opportunities, and Threats (Correct answer)
- Systems, Workflows, Operations, and Technology
- Sales, Workers, Outputs, and Timelines
- Standards, Warranties, Objectives, and Targets
Correct answer: Strengths, Weaknesses, Opportunities, and Threats
SWOT analysis is a strategic planning framework that evaluates internal Strengths and Weaknesses and external Opportunities and Threats.
Question 19: Which component ensures routing of imaging studies in workflow systems?
- EMR dashboard.
- RIS server.
- Workflow engine (Correct answer)
- Patient gateway.
Correct answer: Workflow engine
The workflow engine is the component that ensures the efficient routing of imaging studies within a PACS and RIS workflow system. It automates and manages the sequence of tasks, rules, and data flow from image acquisition to interpretation and reporting. By orchestrating the movement of studies and related information, the workflow engine optimizes efficiency, reduces manual errors, and ensures that studies reach the appropriate radiologists and clinicians promptly.
Question 20: What should be the first action when a new regulation is enacted that affects your practice?
- Wait for enforcement before making changes
- Assume existing procedures already comply
- Delegate review to the newest team member
- Review the regulation, assess its impact, and develop an implementation plan (Correct answer)
Correct answer: Review the regulation, assess its impact, and develop an implementation plan
When new regulations are enacted, professionals should promptly review them, assess their impact on current practices, and develop a structured implementation plan.
Question 21: What is the purpose of a risk register?
- To document, track, and manage all identified risks throughout a project or operation (Correct answer)
- To eliminate all risks before starting work
- To satisfy audit requirements only
- To assign blame when problems occur
Correct answer: To document, track, and manage all identified risks throughout a project or operation
A risk register is a living document that records all identified risks, their assessments, response plans, and status updates throughout the lifecycle of a project or operation.
Question 22: Which of the following helps ensure secure access to imaging systems?
- Disabling login screens
- Using shared accounts
- Reducing password strength
- Implementing user authentication (Correct answer)
Correct answer: Implementing user authentication
User authentication is a fundamental security measure that verifies the identity of a user attempting to access an imaging system. This typically involves requiring a unique username and password, or other credentials, to ensure that only authorized personnel can view, modify, or transmit sensitive patient data. It prevents unauthorized access and helps maintain data integrity and confidentiality.
Question 23: What does DICOM stand for in medical imaging?
- Diagnostic Image Computing Method
- Data Integration for Clinical Management
- Digital Image Conversion of Medicine
- Digital Imaging and Communications in Medicine (Correct answer)
Correct answer: Digital Imaging and Communications in Medicine
DICOM stands for Digital Imaging and Communications in Medicine. It is an international standard for handling, storing, printing, and transmitting information in medical imaging. This standard defines the format for medical images and related data, ensuring interoperability between different medical imaging devices and systems.
Question 24: What component connects imaging modalities with PACS?
- USB cable.
- Cloud drive.
- DICOM interface (Correct answer)
- HL7 interface.
Correct answer: DICOM interface
The DICOM (Digital Imaging and Communications in Medicine) interface is the essential component that connects imaging modalities, such as CT scanners and MRI machines, with a PACS. DICOM is the universal standard for handling, storing, printing, and transmitting information in medical imaging. This interface ensures that images and associated patient data can be seamlessly transferred, viewed, and archived within the PACS, maintaining data integrity and interoperability.
Question 25: What is the role of benchmarking in establishing best practices?
- Comparing performance against top performers to identify improvement opportunities (Correct answer)
- Eliminating all practices that differ from the industry average
- Matching exactly what competitors are doing
- Setting the lowest acceptable standard for performance
Correct answer: Comparing performance against top performers to identify improvement opportunities
Benchmarking involves comparing your performance against top performers or industry leaders to identify gaps and opportunities for improvement.
Question 26: Which DICOM service is used by a PACS to query a remote archive for available studies?
- C-MOVE
- C-ECHO
- C-STORE
- C-FIND (Correct answer)
Correct answer: C-FIND
C-FIND is the DICOM query service that allows a SCU (Service Class User) to search a remote SCP (Service Class Provider) for matching studies, series, or instances.
Question 27: What is the purpose of a feedback mechanism in professional communication?
- To generate metrics for annual reports
- To ensure messages are received, understood, and to identify areas for improvement (Correct answer)
- To document complaints for legal purposes only
- To evaluate employee performance
Correct answer: To ensure messages are received, understood, and to identify areas for improvement
Feedback mechanisms verify that communication is effective by confirming messages are received and understood, while also identifying opportunities to improve communication processes.
Question 28: Why is data encryption important in medical imaging systems?
- To improve image resolution
- To reduce file size
- To protect sensitive information (Correct answer)
- To prevent updates
Correct answer: To protect sensitive information
Medical imaging systems handle highly sensitive patient health information (PHI), including images and associated demographic data. Data encryption scrambles this information, making it unreadable to unauthorized individuals, thereby protecting patient privacy and ensuring compliance with regulations like HIPAA. It is a critical security measure against data breaches and unauthorized access.
Question 29: Why are periodic PACS database integrity checks an important component of routine system maintenance?
- To detect and repair index corruption, orphaned image references, and broken table relationships (Correct answer)
- To enhance image color saturation on diagnostic displays
- To speed up end-user workstation login times
- To physically increase the storage array capacity
Correct answer: To detect and repair index corruption, orphaned image references, and broken table relationships
Database integrity checks identify corrupted indexes, orphaned records, and referential integrity errors that can cause image retrieval failures or silent data loss if left unaddressed.
Question 30: What is HIPAA's relevance to PACS?
- It ensures data security and patient privacy (Correct answer)
- It promotes hardware recycling
- It prohibits image exports
- It regulates hospital cafeteria services
Correct answer: It ensures data security and patient privacy
HIPAA (Health Insurance Portability and Accountability Act) is a US law that sets standards for the protection of sensitive patient health information (PHI). In PACS, HIPAA mandates strict rules for securing medical images and associated data, ensuring patient privacy and controlling access to this information. Compliance is essential to avoid legal penalties and maintain patient trust in the confidentiality of their medical records.
Question 31: What distinguishes inherent risk from residual risk?
- Inherent risk is financial; residual risk is operational
- There is no meaningful difference between them
- Inherent risk exists before controls; residual risk remains after controls are applied (Correct answer)
- Inherent risk is internal; residual risk is external
Correct answer: Inherent risk exists before controls; residual risk remains after controls are applied
Inherent risk is the level of risk present before any controls are implemented, while residual risk is the level that remains after controls and mitigations are applied.
Question 32: Why is regular risk reassessment important?
- Because initial assessments are always wrong
- Because regulators require it exactly once per year
- Because it provides work for risk management teams
- Because the risk landscape changes as conditions, activities, and environments evolve (Correct answer)
Correct answer: Because the risk landscape changes as conditions, activities, and environments evolve
Regular risk reassessment is essential because risks are dynamic — new threats emerge, existing risks change in severity, and the effectiveness of controls may vary over time.
Question 33: What is the Plan-Do-Check-Act (PDCA) cycle used for?
- Employee performance reviews exclusively
- One-time project planning only
- Continuous improvement of processes and practices (Correct answer)
- Annual budget allocation
Correct answer: Continuous improvement of processes and practices
The PDCA cycle is a systematic approach to continuous improvement where processes are planned, implemented, evaluated, and refined in an ongoing cycle.
Question 34: What is the role of audit logs in a PACS environment?
- To control printer usage
- To monitor user access and system activities (Correct answer)
- To log maintenance checks
- To store image files
Correct answer: To monitor user access and system activities
Audit logs record detailed information about who accessed the PACS system, when they accessed it, what actions they performed (e.g., viewing an image, modifying a record), and from where. These logs are crucial for security, compliance (e.g., HIPAA), and troubleshooting, as they provide an immutable record of system usage. They help detect unauthorized activity or data breaches and ensure accountability.
Question 35: Which 10 Gbps networking standard is most commonly deployed in PACS data center backbone connections?
- 10GbE (10GBASE-T or 10GBASE-SR) (Correct answer)
- Fast Ethernet (100BASE-TX)
- Gigabit Ethernet (1000BASE-T)
- Token Ring (16 Mbps)
Correct answer: 10GbE (10GBASE-T or 10GBASE-SR)
10GbE provides the high-bandwidth backbone needed to support simultaneous large image transfers from multiple modalities in a busy imaging department.
Question 36: A hospital wants clinicians at an affiliated clinic to view PACS images through their EHR without installing separate viewer software. Which approach BEST supports this goal?
- Installing a thick DICOM viewer on every clinic workstation
- Burning studies to CD for courier delivery
- Configuring a VPN with direct PACS database access
- Implementing a web-based zero-footprint viewer using WADO-RS or DICOMweb (Correct answer)
Correct answer: Implementing a web-based zero-footprint viewer using WADO-RS or DICOMweb
A zero-footprint web viewer using DICOMweb standards (WADO-RS, STOW-RS, QIDO-RS) delivers images through any browser without client software installation.
Question 37: What does RPO (Recovery Point Objective) determine in a PACS backup and recovery strategy?
- The minimum number of backup copies required by regulation
- The physical geographic location required for offsite backup media
- The maximum amount of data measured in time that can be lost before clinical impact becomes unacceptable (Correct answer)
- The maximum speed at which the PACS must be restored after failure
Correct answer: The maximum amount of data measured in time that can be lost before clinical impact becomes unacceptable
RPO defines the acceptable data loss window; if RPO is 4 hours, backups must run at least every 4 hours so no more than 4 hours of imaging studies can be lost in a disaster.
Question 38: What is the main purpose of imaging informatics in a PACS system?
- To enhance radiology image storage and transmission (Correct answer)
- To support patient billing processes.
- To replace traditional hospital databases.
- To capture high-resolution images only.
Correct answer: To enhance radiology image storage and transmission
The main purpose of imaging informatics within a PACS system is to enhance the efficient storage, retrieval, transmission, and display of radiology images and associated data. It involves the application of computer science and information technology to manage the vast amounts of digital imaging data generated in healthcare. This optimization improves workflow, facilitates faster access for clinicians, and supports better diagnostic and treatment decisions.
Question 39: What ensures diagnostic imaging workflow efficiency?
- Manual data entry.
- Limited staff access.
- Disconnected systems.
- Integrated and automated workflows (Correct answer)
Correct answer: Integrated and automated workflows
Integrated and automated workflows streamline the entire diagnostic imaging process, from order entry to image acquisition, interpretation, and reporting. By connecting various systems (e.g., EMR, RIS, PACS) and automating tasks, they reduce manual errors and eliminate redundant steps. This efficiency speeds up the delivery of patient care and optimizes resource utilization in imaging departments.
Question 40: What is the primary role of a PACS cache server in a multi-site hospital network?
- Encrypts all images before transmission to remote sites
- Manages DICOM routing rules across all modalities centrally
- Generates compliance audit logs for regulatory reporting
- Stores frequently accessed recent images locally to reduce retrieval time from the central archive (Correct answer)
Correct answer: Stores frequently accessed recent images locally to reduce retrieval time from the central archive
A PACS cache server at each site holds recently accessed studies locally, so radiologists retrieve images quickly without pulling every study from the central archive over the WAN.
Question 41: Which approach best describes the integration of theory and practice in this profession?
- Ignoring theory and relying solely on experience
- Following theory exactly without any modification
- Using theory only during examinations
- Applying theoretical knowledge to solve real-world problems while adapting to specific contexts (Correct answer)
Correct answer: Applying theoretical knowledge to solve real-world problems while adapting to specific contexts
Effective professional practice involves applying theoretical foundations to real-world situations while adapting approaches to specific contexts and needs.
Question 42: Why is regular software updating important in PACS security?
- To apply security patches and reduce vulnerabilities (Correct answer)
- To delete outdated data
- To increase system complexity
- To change the user interface
Correct answer: To apply security patches and reduce vulnerabilities
Regular software updates often include critical security patches that address newly discovered vulnerabilities and bugs in the system. By applying these updates promptly, healthcare organizations can protect their PACS from potential cyberattacks, data breaches, and unauthorized access. This proactive approach is essential for maintaining the integrity, confidentiality, and availability of patient data.
Question 43: How does role-based access improve data security?
- It disables backups
- It hides data permanently
- It restricts access based on job role (Correct answer)
- It gives everyone equal access
Correct answer: It restricts access based on job role
Role-based access control (RBAC) assigns specific permissions and access levels to users based on their job functions or roles within an organization. This means that individuals only have access to the data and systems necessary to perform their duties, minimizing the risk of unauthorized access to sensitive information. It enhances security by enforcing the principle of least privilege, ensuring data is only seen by those who need it.
Question 44: What should a communication plan include at minimum?
- Stakeholder list, message content, channels, frequency, and responsible parties (Correct answer)
- Only the list of email addresses
- A single announcement template
- Social media posting schedule only
Correct answer: Stakeholder list, message content, channels, frequency, and responsible parties
A comprehensive communication plan identifies stakeholders, defines message content, specifies communication channels, sets frequency, and assigns responsible parties.
Question 45: Why is continuous improvement important in quality management?
- Because standards evolve, competitors improve, and customer expectations change (Correct answer)
- Because regulators demand changes every year
- Because existing processes are always fundamentally flawed
- Because employees need new tasks to stay busy
Correct answer: Because standards evolve, competitors improve, and customer expectations change
Continuous improvement is essential because the competitive landscape, customer expectations, and industry standards are constantly evolving, requiring ongoing adaptation.
Question 46: Which data storage method is best for long-term PACS data archiving?
- Temporary RAM storage
- External flash drives only
- Cloud or offsite storage solutions (Correct answer)
- Storing on individual workstations
Correct answer: Cloud or offsite storage solutions
Cloud or offsite storage solutions are ideal for long-term PACS data archiving due to their scalability, cost-effectiveness, and robust disaster recovery capabilities. These solutions provide secure, redundant storage away from the primary data center, protecting against local failures and ensuring data accessibility over extended periods as required by regulatory guidelines. They offer reliable and accessible storage for historical patient images, crucial for continuity of care.
Question 47: What is the most common cause of slow image retrieval at a PACS diagnostic workstation?
- Workstation screen resolution set too high
- Network congestion or insufficient bandwidth between the workstation and PACS server (Correct answer)
- Too many USB peripheral devices connected to the workstation
- An outdated keyboard or mouse driver
Correct answer: Network congestion or insufficient bandwidth between the workstation and PACS server
PACS image files are large, and network bottlenecks are the leading cause of slow retrieval; bandwidth limitations and congestion should be the first area investigated.
Question 48: In PACS performance measurement, what does 'latency' specifically refer to?
- The delay between requesting an image and its appearance on the diagnostic workstation (Correct answer)
- The number of simultaneous users supported
- The total storage capacity of the PACS archive
- The maximum rated data transfer speed of a connection
Correct answer: The delay between requesting an image and its appearance on the diagnostic workstation
Latency is the elapsed time from when a workstation requests an image to when it is fully rendered on screen, directly impacting radiologist reading efficiency.
Question 49: In hospital network security, what is the purpose of placing PACS servers in a DMZ (Demilitarized Zone)?
- To manage radiology department print queues
- To create a controlled network buffer that limits direct internet exposure to internal PACS resources (Correct answer)
- To store archived images in an offline location
- To improve image rendering speed on workstations
Correct answer: To create a controlled network buffer that limits direct internet exposure to internal PACS resources
A DMZ places public-facing PACS components in a controlled network segment, preventing direct external access to the core archive and internal hospital systems.
Question 50: What is a 'zero-day vulnerability' in the context of PACS cybersecurity?
- A network connection with zero measured latency
- A newly deployed system with no configuration applied
- A PACS system achieving zero minutes of unplanned downtime
- A security flaw that is actively exploited before the vendor has released a patch (Correct answer)
Correct answer: A security flaw that is actively exploited before the vendor has released a patch
A zero-day vulnerability is a software security weakness being exploited in the wild before a vendor fix exists, making it especially dangerous for healthcare systems that may patch infrequently.
Question 51: What does VLAN stand for and why is it used in PACS network design?
- Virtual LAN — isolates PACS traffic for security and performance (Correct answer)
- Volume LAN — stores large DICOM file archives
- Virtual Link — connects two remote PACS sites via WAN
- Verified LAN — validates each DICOM packet
Correct answer: Virtual LAN — isolates PACS traffic for security and performance
VLANs (Virtual Local Area Networks) logically segment network traffic so PACS imaging data is isolated from general hospital traffic, improving both security and performance.
Question 52: What administrative documentation should be updated immediately after completing any PACS configuration change?
- Employee vacation and PTO schedules
- The hospital social media posting policy
- Building HVAC maintenance records
- System configuration records and change logs reflecting what was changed, when, and by whom (Correct answer)
Correct answer: System configuration records and change logs reflecting what was changed, when, and by whom
Current configuration records ensure that any future troubleshooting, audits, or disaster recovery effort starts from an accurate baseline of how the system is actually configured.
Question 53: Which approach to compliance is considered most effective?
- Hiring a consultant once a year for a brief review
- A reactive approach that addresses issues only after violations
- A proactive approach that integrates compliance into daily operations (Correct answer)
- Focusing compliance efforts only on areas that have been cited previously
Correct answer: A proactive approach that integrates compliance into daily operations
A proactive compliance approach that integrates regulatory requirements into daily operations is most effective at preventing violations and maintaining standards.
Question 54: What distinguishes a certified professional from a non-certified practitioner?
- A specific educational degree only
- Demonstrated knowledge through standardized assessment and adherence to professional standards (Correct answer)
- Higher salary requirements only
- Longer years of experience only
Correct answer: Demonstrated knowledge through standardized assessment and adherence to professional standards
Certification validates that a professional has met established standards of knowledge and competence through standardized assessment.
Question 55: What is the primary goal of quality assurance in professional practice?
- To increase production speed regardless of outcomes
- To satisfy regulatory requirements with minimum effort
- To ensure consistent delivery of products or services that meet established standards (Correct answer)
- To reduce costs by eliminating all testing
Correct answer: To ensure consistent delivery of products or services that meet established standards
Quality assurance focuses on ensuring that products, services, and processes consistently meet or exceed established standards and stakeholder expectations.
Question 56: When integrating PACS with an EHR using FHIR, which FHIR resource is typically used to represent a diagnostic imaging study?
- Media
- Observation
- DiagnosticReport
- ImagingStudy (Correct answer)
Correct answer: ImagingStudy
The FHIR ImagingStudy resource represents a DICOM study, including series and instance references, enabling EHR systems to link to images stored in PACS.
Question 57: What is the primary reason for testing PACS UPS (Uninterruptible Power Supply) systems on a scheduled maintenance basis?
- To verify network throughput remains stable during simulated power events
- To benchmark workstation login performance
- To confirm the UPS batteries can sustain the system load long enough for an orderly shutdown during a real outage (Correct answer)
- To measure image compression efficiency during reduced power
Correct answer: To confirm the UPS batteries can sustain the system load long enough for an orderly shutdown during a real outage
UPS batteries degrade over time; periodic load testing confirms the battery still has sufficient capacity to support PACS through a controlled shutdown when power actually fails.
Question 58: Which organization is responsible for maintaining the DICOM standard?
- FDA
- WHO
- ISO
- NEMA (Correct answer)
Correct answer: NEMA
NEMA, the National Electrical Manufacturers Association, is the primary organization responsible for developing and maintaining the DICOM standard. They collaborate with the American College of Radiology (ACR) to ensure the standard evolves with technological advancements and meets the needs of the medical imaging community. This joint effort ensures DICOM's continued relevance and widespread adoption.
Question 59: Which risk response strategy involves reducing the likelihood or impact of a risk?
- Risk escalation
- Risk acceptance
- Risk mitigation (Correct answer)
- Risk transfer
Correct answer: Risk mitigation
Risk mitigation involves taking proactive steps to reduce either the probability of a risk occurring or its potential impact if it does occur.
Question 60: Which display is recommended for diagnostic image review?
- Projector screen.
- Smart TV.
- Standard office monitor.
- Medical-grade diagnostic monitor (Correct answer)
Correct answer: Medical-grade diagnostic monitor
A medical-grade diagnostic monitor is specifically recommended for diagnostic image review due to its superior image quality, high resolution, and precise calibration capabilities. These monitors meet strict industry standards (e.g., DICOM Part 14) for brightness, contrast, and grayscale accuracy, which are crucial for radiologists and clinicians to identify subtle pathologies. Unlike standard office monitors, they ensure consistent and reliable image presentation, critical for accurate diagnosis and patient safety.
Question 61: What is the primary objective of Certified PACS Associate certification?
- To validate professional competence in certified pacs associate (Correct answer)
- To fulfill a government mandate
- To provide tax benefits to employers
- To replace formal education requirements
Correct answer: To validate professional competence in certified pacs associate
The Certified PACS Associate certification validates that professionals have demonstrated competence and knowledge in their field.
Question 62: What compression ratio does JPEG 2000 lossy compression typically achieve for CT or MR images while maintaining diagnostic quality?
- 5:1 to 8:1
- 50:1 to 100:1
- 10:1 to 20:1 (Correct answer)
- 2:1
Correct answer: 10:1 to 20:1
JPEG 2000 lossy typically achieves 10:1 to 20:1 compression for CT/MR studies while retaining sufficient diagnostic quality for most clinical reads.
Question 63: Which quality management tool is used to identify the most significant factors in a dataset?
- Pareto chart (80/20 rule) (Correct answer)
- Gantt chart
- Organizational chart
- Flow chart
Correct answer: Pareto chart (80/20 rule)
A Pareto chart applies the 80/20 principle to identify the vital few factors that account for the majority of effects, helping prioritize improvement efforts.
Question 64: What technology allows radiologists to securely access the hospital PACS from a remote location or home office over the internet?
- Unencrypted HTTP connection
- Telnet terminal session
- Plain FTP file transfer
- VPN (Virtual Private Network) (Correct answer)
Correct answer: VPN (Virtual Private Network)
A VPN creates an encrypted tunnel between the remote user and the hospital network, enabling secure PACS access that is equivalent to being physically on-site.
Question 65: If the PACS archive reports unexpectedly low free storage, what should the administrator investigate first?
- Orphaned or duplicate studies, failed deletion jobs, or runaway log file growth (Correct answer)
- Network switch firmware version
- User desktop background image files
- Workstation monitor resolution settings
Correct answer: Orphaned or duplicate studies, failed deletion jobs, or runaway log file growth
Orphaned studies, failed automated deletion tasks, and unbounded log files are the most frequent causes of unexpected storage consumption in a PACS archive.
Question 66: What is the most important element of effective professional communication?
- Using the most technical language possible
- Sending messages through multiple channels simultaneously
- Clarity and accuracy of the message tailored to the audience (Correct answer)
- Communicating as quickly as possible
Correct answer: Clarity and accuracy of the message tailored to the audience
Effective professional communication requires clarity and accuracy, with the message tailored to the audience's level of understanding and needs.
Question 67: What hardware is used to digitize analog medical images?
- CT scanner.
- Film digitizer (Correct answer)
- ECG monitor.
- X-ray machine.
Correct answer: Film digitizer
A film digitizer is the specific hardware used to convert analog medical images, typically traditional X-ray films, into digital files. This device scans the physical film and creates a digital representation that can then be stored, viewed, and managed within a PACS (Picture Archiving and Communication System). Digitization allows for easier access, sharing, and integration of older film-based studies into modern digital workflows.
Question 68: What is the significance of user training in technology implementation?
- It is only needed for senior management
- It is an unnecessary expense that delays implementation
- It maximizes the return on technology investment by ensuring effective utilization (Correct answer)
- It should be limited to a one-page instruction sheet
Correct answer: It maximizes the return on technology investment by ensuring effective utilization
User training is critical to technology implementation success because it ensures staff can effectively utilize the technology, maximizing the return on investment and minimizing errors.
Question 69: Which IHE transaction is responsible for sending a completed study notification back to the RIS after images are stored in PACS?
- RAD-13 (Modality Images Stored) (Correct answer)
- RAD-4 (Procedure Scheduled)
- RAD-7 (Modality Worklist Query)
- RAD-28 (Retrieve Images)
Correct answer: RAD-13 (Modality Images Stored)
RAD-13 (Modality Images Stored) notifies the image manager/PACS that a modality has completed storing images, triggering downstream RIS status updates.
Question 70: What is the primary function of a PACS server in medical imaging?
- Performing surgical procedures.
- Cleaning imaging equipment.
- Capturing medical images directly.
- Storing and managing medical images (Correct answer)
Correct answer: Storing and managing medical images
The primary function of a PACS (Picture Archiving and Communication System) server in medical imaging is to efficiently store, retrieve, and manage digital medical images. It acts as a central repository for images from various modalities like X-ray, CT, and MRI, replacing traditional film archives. This system allows healthcare professionals to access patient images quickly and securely from different locations, facilitating diagnosis and treatment planning.
Question 71: How does HL7 benefit electronic health record (EHR) systems?
- It prevents software updates
- It standardizes data exchange and communication (Correct answer)
- It converts data into PDF files
- It automates medication dispensing
Correct answer: It standardizes data exchange and communication
HL7 provides a common language and framework for different healthcare applications, including EHR systems, to communicate and exchange data. By standardizing the format and content of messages, HL7 enables seamless interoperability, allowing EHRs to receive and send patient information (e.g., lab results, orders, demographics) from and to other systems. This integration is vital for creating and maintaining a comprehensive patient record.
Question 72: What does RIS typically manage in imaging informatics?
- MRI machine calibration.
- Digital x-ray sensor replacement.
- Image compression.
- Radiology workflows and patient information (Correct answer)
Correct answer: Radiology workflows and patient information
A RIS (Radiology Information System) typically manages the comprehensive workflows and patient information specific to a radiology department within imaging informatics. This includes scheduling appointments, tracking patient exams, managing radiologist worklists, generating reports, and handling billing information. The RIS integrates with PACS to provide a complete solution for managing the entire imaging process, from order entry to final report distribution.
Question 73: Which interface standard is most commonly used to communicate patient demographic and order information between a Hospital Information System (HIS) and a PACS?
- DICOM
- HL7 (Correct answer)
- IHE XDS
- FHIR R4
Correct answer: HL7
HL7 (Health Level 7) messaging is the primary standard used to exchange administrative and clinical data such as ADT, ORM, and ORU messages between HIS/RIS and PACS.
Question 74: When applying core principles in practice, what should be the first consideration?
- Safety and compliance with established standards (Correct answer)
- Cost reduction opportunities
- Timeline acceleration
- Client entertainment preferences
Correct answer: Safety and compliance with established standards
Safety and compliance with established standards must always be the primary consideration when applying professional principles.
Question 75: Which DICOM transfer syntax guarantees that no pixel data is altered during compression?
- JPEG-LS Lossless (Correct answer)
- JPEG Baseline (Process 1)
- MPEG-4
- JPEG 2000 Lossy
Correct answer: JPEG-LS Lossless
JPEG-LS Lossless preserves every original pixel value exactly, making it suitable for applications where any data alteration is clinically unacceptable.
Question 76: What does TLS/SSL encryption protect during DICOM image transmission over a hospital or external network?
- Archive storage space allocation
- Data in transit from eavesdropping and tampering (Correct answer)
- Image resolution and pixel quality
- PACS software license compliance
Correct answer: Data in transit from eavesdropping and tampering
TLS/SSL encrypts data moving across the network, ensuring that DICOM images and patient information cannot be intercepted or altered by unauthorized parties.
Question 77: Which log file type should a PACS administrator consult first when diagnosing failed DICOM image routing?
- Building physical security access logs
- Hospital email server logs
- DICOM service and application logs on the sending or receiving system (Correct answer)
- Hospital billing system transaction logs
Correct answer: DICOM service and application logs on the sending or receiving system
DICOM application logs record all send/receive events, error codes, and AE Title negotiations, making them the primary diagnostic source for routing failures.
Question 78: In a PACS disaster recovery plan, what does RTO (Recovery Time Objective) define?
- The total physical storage capacity required in the backup system
- The compression ratio applied to archived backup images
- The number of technical staff required to perform a recovery
- The maximum acceptable elapsed time from failure to full PACS restoration (Correct answer)
Correct answer: The maximum acceptable elapsed time from failure to full PACS restoration
RTO specifies the maximum tolerable downtime — how quickly the PACS must be restored after a disaster to avoid unacceptable impact on clinical operations and patient safety.
Question 79: If DICOM images are not routing to the correct PACS destination, what configuration element should be checked first?
- Printer driver version
- Monitor color calibration profile
- AE Title (Application Entity Title) configuration on sending and receiving devices (Correct answer)
- Hard drive free space percentage
Correct answer: AE Title (Application Entity Title) configuration on sending and receiving devices
AE Titles are unique identifiers that DICOM devices use to address each other; an incorrect AE Title on either end is the most common cause of routing failures.
Question 80: Which user typically initiates the imaging workflow?
- Radiologic technologist.
- Lab technician.
- Nurse assistant.
- Ordering physician (Correct answer)
Correct answer: Ordering physician
The imaging workflow typically begins when an ordering physician determines the need for a diagnostic imaging study for a patient. They place the order within the Electronic Medical Record (EMR) or Radiology Information System (RIS). This initial order then triggers subsequent steps in the workflow, such as scheduling, image acquisition, and interpretation.
Question 81: When a failed PACS server must be replaced with new hardware, what is the most critical resource needed to restore full system functionality quickly?
- The server's original retail packaging and shipping materials
- Current, verified configuration backups and fully documented system settings (Correct answer)
- A list of current radiology staff email addresses
- The original vendor purchase invoice and warranty card
Correct answer: Current, verified configuration backups and fully documented system settings
Comprehensive, up-to-date configuration backups allow the replacement server to be configured identically to the failed one, enabling rapid restoration with minimal manual reconstruction.
Question 82: Which device is crucial for ensuring continuous PACS server operation during power outages?
- Surge protector.
- Router.
- KVM switch.
- Uninterruptible Power Supply (UPS) (Correct answer)
Correct answer: Uninterruptible Power Supply (UPS)
An Uninterruptible Power Supply (UPS) is crucial for ensuring continuous PACS server operation during power outages. A UPS provides immediate, temporary power when the main electricity supply fails, preventing abrupt shutdowns that could lead to data corruption or system damage. This allows critical medical imaging systems to remain operational for a short period or to perform a controlled shutdown, safeguarding invaluable patient data and maintaining workflow continuity.
Question 83: A PACS administrator notices that newly registered patients in the HIS are not appearing on the RIS worklist. The MOST likely cause is:
- HL7 ADT feed from HIS to RIS is broken (Correct answer)
- DICOM DIMSE services are offline
- The PACS archive disk is full
- WADO-RS endpoint is misconfigured
Correct answer: HL7 ADT feed from HIS to RIS is broken
Patient registration data flows from HIS to RIS via HL7 ADT (Admit/Discharge/Transfer) messages; a broken ADT feed means new patients cannot be scheduled in RIS.
Question 84: In a PACS integration workflow, an HL7 ORM message is used to:
- Acknowledge receipt of a study
- Encrypt image data during transmission
- Transfer DICOM images between modalities
- Send radiology orders from RIS to the modality worklist (Correct answer)
Correct answer: Send radiology orders from RIS to the modality worklist
The HL7 ORM (Order Message) is sent from the RIS to populate the Modality Worklist (MWL), allowing technologists to select patient exams directly on the imaging device.
Question 85: Which statement best describes HL7 messages?
- They define physical device settings
- They are encoded in JPEG format
- They track hardware performance
- They contain segments representing healthcare events (Correct answer)
Correct answer: They contain segments representing healthcare events
HL7 messages are structured text-based messages composed of various segments, each representing a specific piece of information or a healthcare event. For example, there are segments for patient demographics, orders, results, and appointments. These segments are organized to facilitate the standardized exchange of clinical and administrative data between different healthcare systems, ensuring clarity and consistency.
Question 86: When configuring a DICOM Application Entity (AE) title, which element uniquely identifies a DICOM device on the network?
- AE Title combined with hostname/IP and port number (Correct answer)
- IP address alone
- MAC address of the network adapter
- Serial number of the imaging device
Correct answer: AE Title combined with hostname/IP and port number
A DICOM node is identified by its AE Title plus the host address and port, forming a unique endpoint used in DICOM association negotiations.
Question 87: XDS (Cross-Enterprise Document Sharing) is an IHE profile designed to:
- Share clinical documents including imaging reports across healthcare enterprises (Correct answer)
- Encrypt DICOM images during modality acquisition
- Synchronize PACS hardware clocks
- Perform automated quality control on image datasets
Correct answer: Share clinical documents including imaging reports across healthcare enterprises
IHE XDS enables sharing of clinical documents, including radiology reports and image references, across different healthcare organizations using a registry/repository model.
Question 88: What is a primary threat to data integrity in PACS?
- Printer malfunctions
- System failures or malware attacks (Correct answer)
- Frequent backups
- Strong Wi-Fi signals
Correct answer: System failures or malware attacks
Data integrity in PACS (Picture Archiving and Communication System) refers to the accuracy, consistency, and reliability of medical images and patient information. System failures, such as hardware malfunctions or software bugs, can corrupt or lose data, while malware attacks like ransomware can encrypt or delete critical records. Both directly compromise the integrity of the data, potentially leading to misdiagnosis or treatment errors.
Question 89: Which foundational principle is most critical to professional practice in this field?
- Maximizing revenue above all other considerations
- Evidence-based decision making and continuous improvement (Correct answer)
- Prioritizing speed over accuracy in all situations
- Following only traditional methods without adaptation
Correct answer: Evidence-based decision making and continuous improvement
Evidence-based decision making ensures that professional practices are grounded in proven methodologies and current best practices.
Question 90: How should best practices be adapted when applied to new situations?
- Abandon them entirely and create new methods each time
- Apply them exactly as written regardless of circumstances
- Evaluate the specific context and modify as needed while maintaining core principles (Correct answer)
- Use them only if specifically required by regulation
Correct answer: Evaluate the specific context and modify as needed while maintaining core principles
Best practices should be adapted to specific contexts and situations while maintaining their core principles and evidence-based foundations.
Question 91: Why is data security important when using professional technology tools?
- Only to comply with specific regulations
- To make systems run faster
- To reduce the cost of technology infrastructure
- To protect sensitive information from unauthorized access, breaches, and loss (Correct answer)
Correct answer: To protect sensitive information from unauthorized access, breaches, and loss
Data security protects sensitive professional, client, and organizational information from unauthorized access, breaches, theft, and loss, maintaining trust and compliance.
Question 92: Which system integrates image display with patient electronic records?
- UPS backup unit.
- EMR system with image viewer (Correct answer)
- Load balancer.
- Firewall system.
Correct answer: EMR system with image viewer
An EMR (Electronic Medical Record) system is designed to manage comprehensive patient health information. When integrated with an image viewer, it allows clinicians to access and display medical images directly alongside other patient data, providing a holistic view of the patient's health. This integration is crucial for efficient clinical decision-making and coordinated care.
Question 93: What does "system integration" mean in a technology context?
- Using the same password for all systems
- Replacing all existing systems with a single new system
- Installing systems in the same physical location
- Connecting different technology systems to work together and share data seamlessly (Correct answer)
Correct answer: Connecting different technology systems to work together and share data seamlessly
System integration involves connecting different technology systems, applications, or platforms so they can work together, share data, and provide a cohesive user experience.
Question 94: What is the consequence of non-compliance with mandatory regulations?
- Reduced insurance premiums
- Automatic extension of compliance deadline
- Penalties including fines, license revocation, and potential legal action (Correct answer)
- A verbal warning with no further consequences
Correct answer: Penalties including fines, license revocation, and potential legal action
Non-compliance with mandatory regulations can result in serious consequences including financial penalties, loss of licensure, and legal proceedings.
Question 95: What defines a "best practice" in professional settings?
- A method or technique that has consistently shown superior results through evidence (Correct answer)
- Any procedure that is commonly used regardless of outcomes
- A method recommended by a single authority
- The most expensive approach available
Correct answer: A method or technique that has consistently shown superior results through evidence
Best practices are methods or techniques that have consistently demonstrated superior results through evidence, research, and widespread professional validation.
Question 96: What should be considered before implementing new technology?
- Only the purchase price of the technology
- The vendor's marketing materials exclusively
- Whether competitors are using it
- Cost, compatibility with existing systems, training needs, and security implications (Correct answer)
Correct answer: Cost, compatibility with existing systems, training needs, and security implications
Before implementing new technology, organizations should evaluate total cost, system compatibility, staff training requirements, security implications, and alignment with strategic goals.
Question 97: What type of storage is commonly used for long-term archiving in PACS?
- External hard drives.
- DVD players.
- RAM modules.
- Tape libraries (Correct answer)
Correct answer: Tape libraries
Tape libraries are commonly used for long-term archiving in PACS due to their cost-effectiveness, high storage capacity, and reliability for data that doesn't require immediate, frequent access. While primary storage (like RAID) handles active images, tape libraries provide an economical solution for storing historical patient studies over many years. This ensures regulatory compliance for data retention and allows for retrieval of older images when needed, without consuming expensive online storage.
Question 98: What is active listening in a professional context?
- Fully concentrating, understanding, responding, and remembering what is being said (Correct answer)
- Simply waiting for your turn to speak
- Taking verbatim notes of everything said
- Agreeing with everything the speaker says
Correct answer: Fully concentrating, understanding, responding, and remembering what is being said
Active listening involves fully concentrating on the speaker, understanding the message, providing appropriate responses, and retaining the information communicated.
Question 99: What is the primary benefit of adopting technology in professional practice?
- Meeting a technology trend without clear purpose
- Eliminating the need for human judgment
- Improved efficiency, accuracy, and the ability to scale operations (Correct answer)
- Reducing the workforce to zero
Correct answer: Improved efficiency, accuracy, and the ability to scale operations
Technology adoption in professional practice primarily improves efficiency, enhances accuracy, and enables scalability of operations while supporting human decision-making.
Question 100: Which protocol is used to retrieve DICOM objects from a PACS using a RESTful HTTP-based approach?
- HL7 MLLP (Minimal Lower Layer Protocol)
- SFTP (Secure File Transfer Protocol)
- DIMSE (DICOM Message Service Element)
- WADO-RS (Web Access to DICOM Objects via RESTful Services) (Correct answer)
Correct answer: WADO-RS (Web Access to DICOM Objects via RESTful Services)
WADO-RS is the RESTful DICOMweb service that allows HTTP GET requests to retrieve DICOM instances, series, or studies from a compliant PACS server.
Certified PACS Associate (CPAS) Exam
The CPAS exam certifies individuals in the fundamental knowledge and skills required to work with Picture Archiving and Communication Systems (PACS) in a healthcare environment.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- pacsadmin.org — Renewal, score validity, exam format, passing score, retake policy, time limit, eligibility, test delivery, registration, exam information · verified Oct 2026