DIS Cybersecurity & Risk 3 — Questions and Answers
Question 1: A digital imaging facility experiences a power outage that corrupts image data on the PACS server. Which backup strategy provides the FASTEST full data restoration?
- Incremental backup
- Differential backup
- Full backup (Correct answer)
- Snapshot-only backup
Correct answer: Full backup
A full backup contains a complete copy of all data, enabling the fastest restoration without needing to process multiple backup sets.
Question 2: An attacker intercepts and alters DICOM image metadata during transmission without either party knowing. This attack is known as:
- Replay attack
- Man-in-the-middle (MITM) attack (Correct answer)
- SQL injection
- Zero-day exploit
Correct answer: Man-in-the-middle (MITM) attack
A MITM attack intercepts communications between two parties, allowing the attacker to eavesdrop or alter data in transit.
Question 3: Which HIPAA safeguard category requires imaging facilities to implement policies, procedures, and workforce training?
- Physical safeguards
- Technical safeguards
- Administrative safeguards (Correct answer)
- Operational safeguards
Correct answer: Administrative safeguards
HIPAA administrative safeguards encompass policies, procedures, and workforce training to manage the selection and implementation of security measures.
Question 4: What is the purpose of an audit log in a PACS (Picture Archiving and Communication System)?
- To compress image files for storage efficiency
- To record user activities for accountability and forensic review (Correct answer)
- To automatically delete outdated images
- To optimize image display on workstations
Correct answer: To record user activities for accountability and forensic review
Audit logs record user actions and system events, enabling accountability, compliance verification, and forensic investigation after incidents.
Question 5: A vulnerability scan reveals that the imaging workstation operating system has not been patched in 18 months. This represents which type of risk?
- Physical risk
- Compliance risk only
- Exploitable vulnerability risk (Correct answer)
- Acceptable residual risk
Correct answer: Exploitable vulnerability risk
Unpatched systems contain known vulnerabilities that attackers can exploit, creating significant exploitable vulnerability risk to the organization.
Question 6: Which type of firewall inspects the content of network packets at the application layer, including DICOM traffic?
- Packet-filtering firewall
- Stateful inspection firewall
- Next-generation firewall (NGFW) (Correct answer)
- Network address translation (NAT)
Correct answer: Next-generation firewall (NGFW)
Next-generation firewalls perform deep packet inspection at the application layer, capable of analyzing and filtering specific application traffic like DICOM.
Question 7: When a radiologist digitally signs an imaging report, which security property is being enforced?
- Confidentiality
- Availability
- Non-repudiation (Correct answer)
- Redundancy
Correct answer: Non-repudiation
Non-repudiation ensures that a party cannot deny having performed an action, which digital signatures enforce by binding the signer's identity to the document.
DIS Cybersecurity & Risk 3
A digital imaging facility experiences a power outage that corrupts image data on the PACS server.
Which backup strategy provides the FASTEST full data restoration?