Cybersecurity & Risk Flashcards
7 cards from real DIS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Cybersecurity & Risk flashcards as text
A digital imaging facility experiences a power outage that corrupts image data on the PACS server. Which backup strategy provides the FASTEST full data restoration?
Answer: Full backup
A full backup contains a complete copy of all data, enabling the fastest restoration without needing to process multiple backup sets.
An attacker intercepts and alters DICOM image metadata during transmission without either party knowing. This attack is known as:
Answer: Man-in-the-middle (MITM) attack
A MITM attack intercepts communications between two parties, allowing the attacker to eavesdrop or alter data in transit.
Which HIPAA safeguard category requires imaging facilities to implement policies, procedures, and workforce training?
Answer: Administrative safeguards
HIPAA administrative safeguards encompass policies, procedures, and workforce training to manage the selection and implementation of security measures.
What is the purpose of an audit log in a PACS (Picture Archiving and Communication System)?
Answer: To record user activities for accountability and forensic review
Audit logs record user actions and system events, enabling accountability, compliance verification, and forensic investigation after incidents.
A vulnerability scan reveals that the imaging workstation operating system has not been patched in 18 months. This represents which type of risk?
Answer: Exploitable vulnerability risk
Unpatched systems contain known vulnerabilities that attackers can exploit, creating significant exploitable vulnerability risk to the organization.
Which type of firewall inspects the content of network packets at the application layer, including DICOM traffic?
Answer: Next-generation firewall (NGFW)
Next-generation firewalls perform deep packet inspection at the application layer, capable of analyzing and filtering specific application traffic like DICOM.
When a radiologist digitally signs an imaging report, which security property is being enforced?
Answer: Non-repudiation
Non-repudiation ensures that a party cannot deny having performed an action, which digital signatures enforce by binding the signer's identity to the document.