Cybersecurity & Risk Flashcards

A digital imaging lab stores patient X-rays on a server accessible via the internet. Which control BEST reduces the risk of unauthorized access?

Answer: Implementing multi-factor authentication (MFA)

MFA adds a second verification layer, significantly reducing the risk of credential-based unauthorized access to sensitive imaging data.

Which type of malware specifically encrypts imaging files and demands payment for the decryption key?

Answer: Ransomware

Ransomware encrypts victim files and demands ransom payment in exchange for decryption keys, making it especially damaging to imaging archives.

An imaging technician receives an email asking them to verify their PACS login credentials via a link. This is MOST likely an example of:

Answer: A phishing attack

Phishing attacks use deceptive emails with fraudulent links to trick users into revealing login credentials or sensitive information.

In risk management, what does the term 'residual risk' mean?

Answer: Risk remaining after controls have been applied

Residual risk is the level of risk that remains after security controls and countermeasures have been implemented.

Which protocol provides encrypted transmission of DICOM images over a network?

Answer: TLS/SSL

TLS/SSL encrypts data in transit, protecting DICOM image data from interception during network transmission.

A hospital imaging department conducts a Business Impact Analysis (BIA). What is the PRIMARY purpose of this activity?

Answer: To determine the financial and operational impact of system downtime

A BIA identifies critical functions and quantifies the impact of disruptions, informing disaster recovery and business continuity planning.

Which security principle ensures that imaging system users can only access data necessary for their specific job role?

Answer: Principle of least privilege

The principle of least privilege restricts user access rights to only what is required for their specific job function, minimizing exposure.