DIS Network Security & Protocols 3

Question 1

Which firewall rule configuration would BEST protect a PACS server while allowing authorized radiology workstations to retrieve images?

Accepted Answer

Allow inbound DICOM traffic only from whitelisted radiology workstation IPs

Answer

Whitelisting specific IP addresses of authorized workstations ensures only approved devices can initiate DICOM connections to the PACS server.

Question 2

A DIS technician discovers the imaging network has an open Telnet service on a modality workstation. What is the recommended remediation?

Accepted Answer

Disable Telnet and replace with SSH for remote management

Answer

Telnet transmits data including credentials in plaintext; SSH provides encrypted, authenticated remote management as its secure replacement.

Question 3

What is the purpose of network intrusion detection system (NIDS) placement on a medical imaging network?

Accepted Answer

To monitor network traffic for suspicious patterns that may indicate an attack

Answer

A NIDS passively monitors network traffic and generates alerts when it detects patterns matching known attack signatures or anomalies.

Question 4

Which authentication method provides the STRONGEST security for remote access to a PACS administrator console?

Accepted Answer

Multi-factor authentication (MFA) combining password and hardware token

Answer

MFA requires multiple verification factors, so even if a password is compromised, unauthorized access is still prevented by the second factor.

Question 5

An imaging facility wants to ensure that only authenticated NTP servers synchronize time on DICOM devices. Which protocol version addresses this?

Accepted Answer

NTPv4 with symmetric key or autokey authentication

Answer

NTPv4 supports symmetric key and autokey authentication mechanisms that verify the identity of time servers before accepting synchronization.

(DIS) Digital Imaging Specialist Certification Practice Test