DIS Network Security & Protocols 2

Question 1

Which protocol encrypts data in transit between a DICOM imaging device and a PACS server?

Accepted Answer

TLS (Transport Layer Security)

Answer

TLS encrypts data in transit, protecting DICOM transmissions between imaging devices and PACS servers from interception.

Question 2

A radiology department notices unauthorized devices connecting to their imaging VLAN. Which network control method would BEST prevent this?

Accepted Answer

Implementing 802.1X port-based authentication

Answer

802.1X port-based authentication requires devices to authenticate before gaining network access, preventing unauthorized connections.

Question 3

What is the primary security risk of using DICOM's default port 104 without additional controls?

Accepted Answer

It operates over unencrypted connections, exposing PHI in transit

Answer

Standard DICOM port 104 does not enforce encryption, meaning patient data transmitted over it is readable if intercepted.

Question 4

Which type of attack intercepts communication between a CT scanner and PACS to alter transmitted images?

Accepted Answer

Man-in-the-Middle (MitM) attack

Answer

A MitM attack positions the attacker between two communicating systems, enabling interception and potential alteration of DICOM data.

Question 5

A hospital's imaging network uses SNMPv1 for device monitoring. What is the main security concern with this configuration?

Accepted Answer

SNMPv1 uses community strings transmitted in plaintext

Answer

SNMPv1 sends community strings (essentially passwords) in plaintext, making them easily captured by network sniffers.

(DIS) Digital Imaging Specialist Certification Practice Test