CBET Healthcare IT and Networking 2 — Questions and Answers
Question 1: What does the HL7 standard primarily define in healthcare IT?
- Medical image format specifications
- Messaging standards for exchanging clinical and administrative data between systems (Correct answer)
- Network security protocols for hospitals
- Electronic health record database schemas
Correct answer: Messaging standards for exchanging clinical and administrative data between systems
HL7 defines standards for the exchange, integration, sharing, and retrieval of electronic health information between healthcare systems.
HL7 v2.x uses pipe-delimited message format. HL7 FHIR is the modern REST-based standard. Modern medical devices transmit data to EHR systems via HL7 interfaces, requiring BMET knowledge for troubleshooting.
Question 2: What is the purpose of a VLAN in a hospital network?
- To increase internet bandwidth
- To logically segment network traffic for security and performance (Correct answer)
- To provide wireless coverage
- To encrypt all network data
Correct answer: To logically segment network traffic for security and performance
A VLAN logically segments a physical network into separate broadcast domains, improving security by isolating medical device traffic.
A dedicated biomedical device VLAN improves security, performance, and regulatory compliance. Common issues include VLAN misconfiguration after network port moves and DHCP scope exhaustion on the medical device VLAN.
Question 3: What communication standard is used to transmit and store medical images such as X-rays, CT scans, and MRIs?
- HL7
- DICOM (Correct answer)
- FHIR
- SNMP
Correct answer: DICOM
DICOM is the universal standard for transmitting, storing, and displaying medical images across different equipment and PACS systems.
DICOM defines both a file format and a network communication protocol. Common troubleshooting involves DICOM communication failures between modalities and PACS, usually caused by incorrect AE Title configuration or firewall blocking.
Question 4: Which network protocol is commonly used to monitor the status of network-connected medical devices?
- FTP
- SNMP (Correct answer)
- SMTP
- SSH
Correct answer: SNMP
SNMP is used to monitor and manage network devices by querying device status information and receiving alerts.
SNMP operates in a manager-agent model. SNMP v3 adds encryption and authentication. Community strings function as passwords and must be changed from defaults for security.
Question 5: What is the primary security concern when medical devices run outdated or unpatched operating systems?
- Slower boot times
- Known vulnerabilities that can be exploited by malware or attackers (Correct answer)
- Incompatibility with newer printers
- Higher power consumption
Correct answer: Known vulnerabilities that can be exploited by malware or attackers
Unpatched devices contain known security vulnerabilities that can be exploited by malware or attackers to compromise patient data or disrupt device operation.
Compensating controls include network segmentation, host-based firewalls, application whitelisting, and disabling unnecessary services. MDS2 documents from manufacturers guide security management.
Question 6: What does HIPAA require regarding the transmission of electronic Protected Health Information (ePHI) over a network?
- ePHI must only be sent via fax
- ePHI must be encrypted during transmission using appropriate safeguards (Correct answer)
- ePHI must be stored on local drives only
- ePHI can be sent in plaintext if the network is internal
Correct answer: ePHI must be encrypted during transmission using appropriate safeguards
HIPAA's Security Rule requires that ePHI transmitted over networks be protected through encryption and other technical safeguards.
Biomedical technicians must ensure medical devices that transmit patient data use encrypted connections. Common issues include devices using outdated encryption (TLS 1.0) or transmitting data in cleartext.
CBET Healthcare IT and Networking 2
What does the HL7 standard primarily define in healthcare IT?