CBET Healthcare IT and Networking 4 — Questions and Answers
Question 1: A BIOMED technician notices that medical device telemetry data is dropping packets on the hospital Wi-Fi. Which QoS mechanism should be prioritized to ensure reliable transmission?
- Best-effort delivery
- Weighted Fair Queuing (WFQ) with medical traffic class (Correct answer)
- Spanning Tree Protocol
- MAC address filtering
Correct answer: Weighted Fair Queuing (WFQ) with medical traffic class
Weighted Fair Queuing assigns higher priority to critical medical traffic classes, reducing dropped packets for telemetry.
Question 2: Under HIPAA's Security Rule, which control specifically addresses ensuring that ePHI transmitted over a network cannot be improperly modified without detection?
- Access control
- Audit controls
- Transmission integrity (Correct answer)
- Person authentication
Correct answer: Transmission integrity
Transmission integrity controls verify that ePHI is not altered or destroyed in an unauthorized manner during network transmission.
Question 3: A hospital wants to segment its biomedical device network from the administrative network. Which technology accomplishes this at Layer 2?
- NAT (Network Address Translation)
- VLAN (Virtual LAN) (Correct answer)
- DNS (Domain Name System)
- SNMP (Simple Network Management Protocol)
Correct answer: VLAN (Virtual LAN)
VLANs logically segment networks at Layer 2 (Data Link), isolating biomedical device traffic from administrative systems.
Question 4: Which encryption protocol is recommended by NIST for securing data transmitted between medical devices and hospital servers in 2024?
- SSL 3.0
- TLS 1.2 or higher (Correct answer)
- WEP
- DES
Correct answer: TLS 1.2 or higher
NIST recommends TLS 1.2 or TLS 1.3 for securing data in transit; older protocols like SSL 3.0 and WEP are deprecated.
Question 5: A biomedical device is assigned a static IP of 192.168.10.50/24. What is the broadcast address for this subnet?
- 192.168.10.0
- 192.168.10.1
- 192.168.10.255 (Correct answer)
- 192.168.10.254
Correct answer: 192.168.10.255
For a /24 subnet, the broadcast address is the last address in the range — 192.168.10.255.
Question 6: During a risk assessment of a networked infusion pump, the BIOMED technician identifies that the device uses Telnet for remote management. What is the primary security concern?
- Telnet uses too much bandwidth
- Telnet transmits data including credentials in plaintext (Correct answer)
- Telnet is incompatible with IPv6
- Telnet cannot be used on medical networks
Correct answer: Telnet transmits data including credentials in plaintext
Telnet sends all data, including usernames and passwords, as unencrypted plaintext, making it vulnerable to eavesdropping.
Question 7: A hospital's IDS generates an alert when a networked vital signs monitor begins scanning other IP addresses on the LAN. What type of attack does this behavior most likely indicate?
- Denial of Service (DoS)
- Ransomware encryption
- Lateral movement / network reconnaissance (Correct answer)
- DNS poisoning
Correct answer: Lateral movement / network reconnaissance
Port/IP scanning from a compromised device indicates an attacker performing network reconnaissance to identify additional targets for lateral movement.
CBET Healthcare IT and Networking 4
A BIOMED technician notices that medical device telemetry data is dropping packets on the hospital Wi-Fi.
Which QoS mechanism should be prioritized to ensure reliable transmission?