Network Security & Protocols Flashcards
7 cards from real DIS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network Security & Protocols flashcards as text
In the context of medical imaging networks, what does the principle of 'least privilege' mean?
Answer: Users and devices are granted only the minimum network access required to perform their function
Least privilege limits the damage from compromised accounts or devices by restricting each to only the access necessary for their specific role.
Which protocol is specifically designed to securely transfer audit log records from DICOM-compliant devices to a central log server?
Answer: SYSLOG over TLS (RFC 5425)
RFC 5425 defines transport of syslog messages over TLS, ensuring audit records are transmitted securely and cannot be tampered with in transit.
A DIS professional is configuring a wireless network for mobile imaging carts. Which wireless security standard is MOST appropriate?
Answer: WPA3-Enterprise with 802.1X and RADIUS authentication
WPA3-Enterprise with 802.1X and RADIUS provides individual user/device authentication and strong encryption, meeting healthcare security requirements.
What is a 'rogue DICOM server' attack in a medical imaging environment?
Answer: An unauthorized server that impersonates a legitimate PACS to capture or alter image data
A rogue DICOM server masquerades as a legitimate system to intercept, capture, or manipulate image data sent by imaging modalities.
Which network security control would prevent a compromised radiologist workstation from accessing the hospital's financial systems?
Answer: Network segmentation with inter-VLAN firewall rules blocking clinical to financial traffic
Network segmentation with firewall rules between VLANs stops lateral movement even if a clinical workstation is compromised.
What is the function of a DMZ (demilitarized zone) in a hospital imaging network architecture?
Answer: An isolated network segment hosting internet-facing services, separated from the internal imaging network
A DMZ hosts externally accessible services like web portals in an isolated segment, preventing direct internet access to the internal PACS network.
During a security audit, a DIS specialist finds that DICOM C-FIND queries from external referring physicians reach the PACS without authentication. What is the primary risk?
Answer: Unauthorized parties can query and discover patient study information
Unauthenticated DICOM C-FIND queries allow any network-accessible party to retrieve patient study metadata, violating HIPAA privacy requirements.