DIS Cybersecurity & Risk 2

Question 1

A digital imaging lab stores patient X-rays on a server accessible via the internet. Which control BEST reduces the risk of unauthorized access?

Accepted Answer

Implementing multi-factor authentication (MFA)

Answer

MFA adds a second verification layer, significantly reducing the risk of credential-based unauthorized access to sensitive imaging data.

Question 2

Which type of malware specifically encrypts imaging files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts victim files and demands ransom payment in exchange for decryption keys, making it especially damaging to imaging archives.

Question 3

An imaging technician receives an email asking them to verify their PACS login credentials via a link. This is MOST likely an example of:

Accepted Answer

A phishing attack

Answer

Phishing attacks use deceptive emails with fraudulent links to trick users into revealing login credentials or sensitive information.

Question 4

In risk management, what does the term 'residual risk' mean?

Accepted Answer

Risk remaining after controls have been applied

Answer

Residual risk is the level of risk that remains after security controls and countermeasures have been implemented.

Question 5

Which protocol provides encrypted transmission of DICOM images over a network?

Accepted Answer

TLS/SSL

Answer

TLS/SSL encrypts data in transit, protecting DICOM image data from interception during network transmission.

(DIS) Digital Imaging Specialist Certification Practice Test