I85PREP
⌘ K
CHTP study materials
CHTP study resources

CHTP practice questions

One question at a time. Build your CHTP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Technology Strategy, Leadership and Governance

A hospital's IT strategic plan is considered aligned when it primarily does which of the following?

  1. Supports the organization's clinical and business goals Correct answer.
  2. Documents the help desk's daily ticket totals
  3. Replaces the annual operating budget process
  4. Lists every software license the hospital owns

Explanation

Strategic alignment means IT priorities and investments trace to the organization's mission, clinical quality aims, and financial objectives. A plan that inventories assets or reports operational statistics does not establish that linkage.

Question 2Technology Strategy, Leadership and Governance

What is the primary governance role of an executive IT steering committee in a healthcare organization?

  1. Performing daily database backup restorations
  2. Writing source code for all clinical applications
  3. Approving individual clinician vacation requests
  4. Prioritizing IT investments and resolving conflicts Correct answer.

Explanation

An IT steering committee provides executive oversight by aligning IT work with strategy, setting priorities, and adjudicating competing demands across departments. It does not perform hands-on technical work or routine human resources tasks.

Question 3Technology Strategy, Leadership and Governance

IT governance is best described as which of the following?

  1. Decision rights and accountability for IT Correct answer.
  2. Annual penetration testing schedule
  3. Daily operation of the service desk
  4. Purchase of hardware from one vendor

Explanation

IT governance defines who makes IT decisions, how those decisions are made, and who is accountable for outcomes. It covers strategic direction, value delivery, risk management, and performance measurement.

Question 4Technology Strategy, Leadership and Governance

A health system has limited capital and must choose among several IT initiatives. Which approach best reflects disciplined portfolio prioritization?

  1. Fund the project with the most vocal sponsor
  2. Fund projects in the order they were requested
  3. Fund every project at a reduced level equally
  4. Score projects against strategic and risk criteria Correct answer.

Explanation

Portfolio prioritization compares proposed investments using consistent criteria such as strategic fit, clinical benefit, risk reduction, cost, and resource capacity. This produces defensible trade-offs rather than allocation by request order or advocacy.

Question 5Technology Strategy, Leadership and Governance

What is the main purpose of enterprise architecture in a healthcare organization?

  1. Managing the payroll cycle for IT staff
  2. Negotiating drug prices with pharmaceutical firms
  3. Aligning business processes with technology standards Correct answer.
  4. Designing the physical layout of hospital wards

Explanation

Enterprise architecture provides a structured view of business capabilities, processes, data, and technology so change is coordinated and standards are reused. It supports integration and reduces duplication across the enterprise.

Question 6Technology Strategy, Leadership and Governance

Under the HIPAA Security Rule, which action best demonstrates governance accountability for protecting electronic protected health information?

  1. Designating a security official and documenting policies Correct answer.
  2. Reviewing security controls after a breach occurs
  3. Delegating all security decisions to the IT help desk
  4. Storing audit logs only on individual laptops

Explanation

The Security Rule requires covered entities to designate a security official responsible for policies and procedures that protect ePHI. Governance accountability is shown through assigned responsibility, documented controls, and ongoing review rather than after-the-fact reaction.

Question 7Technology Strategy, Leadership and Governance

How does business continuity planning differ from disaster recovery planning?

  1. Recovery focuses only on staff training
  2. Continuity sustains critical services during disruption Correct answer.
  3. Continuity focuses only on data backups
  4. Recovery replaces the need for risk assessment

Explanation

Business continuity addresses how the organization maintains essential clinical and business functions during and after a disruption. Disaster recovery is narrower and focuses on restoring IT systems and data after an incident.

Question 8Technology Strategy, Leadership and Governance

In IT service management, what is the primary purpose of a change advisory board?

  1. To write clinical documentation templates
  2. To manage employee performance reviews
  3. To assess and authorize changes Correct answer.
  4. To approve the annual IT budget

Explanation

A change advisory board reviews proposed changes for risk, impact, and readiness before authorizing them. This reduces unplanned outages and ensures changes are coordinated with affected clinical and business areas.

Question 9Technology Strategy, Leadership and Governance

What is the primary responsibility of a data steward in a healthcare organization?

  1. Purchasing all network switches and routers
  2. Improving data quality and usage rules Correct answer.
  3. Performing surgery scheduling for operating rooms
  4. Approving marketing campaign budgets

Explanation

Data stewards are accountable for the quality, definition, and appropriate use of data within their domain. They work with business and clinical owners to establish standards and resolve data issues.

Question 10Technology Strategy, Leadership and Governance

A hospital plans to use a cloud vendor that will handle protected health information. What governance step is most appropriate before signing?

  1. Let the vendor set its own security policy
  2. Execute a business associate agreement Correct answer.
  3. Accept standard vendor terms without review
  4. Skip due diligence because data is encrypted

Explanation

A covered entity must obtain satisfactory assurances that a business associate will safeguard PHI, typically through a business associate agreement. Governance also requires due diligence on the vendor's security controls and ongoing monitoring.

Question 11Technology Strategy, Leadership and Governance

Which item is typically classified as an IT operating expense rather than a capital expense?

  1. Major network infrastructure replacement
  2. Monthly cloud hosting fees Correct answer.
  3. A multi-year enterprise EHR license purchase
  4. A new data center building

Explanation

Operating expenses recur for ongoing services such as subscriptions, cloud hosting, and support, while capital expenses are typically large, long-lived investments that are depreciated. Classification affects budgeting and approval processes.

Question 12Technology Strategy, Leadership and Governance

A hospital wants to improve its performance in a federal interoperability program. Which governance action most directly supports this goal?

  1. Assigning executive ownership for exchange metrics Correct answer.
  2. Purchasing more desktop printers
  3. Limiting data exchange to internal departments
  4. Reducing the number of clinical staff trained

Explanation

Interoperability programs depend on measurable exchange performance, and executive ownership creates accountability for those metrics. Governance should link program requirements to specific owners, timelines, and reporting.

Question 13Technology Strategy, Leadership and Governance

What governance concern is most important when moving clinical workloads to a public cloud?

  1. The number of vendor sales representatives
  2. The color scheme of the vendor portal
  3. Data residency and access controls Correct answer.
  4. The size of the hospital cafeteria

Explanation

Cloud governance must address where data is stored, who can access it, and how controls are monitored, especially for regulated health information. These concerns drive contractual safeguards and ongoing oversight.

Question 14Technology Strategy, Leadership and Governance

A health system's digital transformation effort is stalled despite strong technology spending. Which leadership action is most likely to address the underlying governance gap?

  1. Increasing the IT help desk headcount
  2. Purchasing additional software licenses
  3. Outsourcing all strategy to a technology vendor
  4. Clarifying decision rights across leaders Correct answer.

Explanation

Stalled transformation often reflects unclear ownership, competing priorities, and weak cross-functional decision-making rather than insufficient tools. Governance clarifies who decides, who is consulted, and how trade-offs are made.

Question 15Technology Strategy, Leadership and Governance

Which measure is a common IT service management key performance indicator?

  1. Number of hospital beds in the ICU
  2. Patient satisfaction with cafeteria food
  3. Average length of stay for inpatients
  4. Percentage of incidents resolved within target Correct answer.

Explanation

IT service management metrics focus on service delivery and support performance, such as incident resolution within agreed targets. Clinical and hotel-style measures relate to other operational domains.

Question 16Technology Strategy, Leadership and Governance

What is the best way for an IT leader to keep the board informed about cybersecurity risk?

  1. Report only after a confirmed breach
  2. Send raw firewall logs without context
  3. Delegate all reporting to a vendor
  4. Use a risk dashboard with trends Correct answer.

Explanation

Board reporting should translate technical security data into business risk, trends, and recommended actions. A concise dashboard supports oversight without overwhelming directors with raw logs.

Question 17Technology Strategy, Leadership and Governance

An organization is selecting standards for exchanging clinical data across multiple EHR vendors. Which governance principle best guides the choice?

  1. Let each department choose its own format
  2. Prefer proprietary formats from the largest vendor
  3. Avoid standards until a crisis forces adoption
  4. Prefer widely adopted, open standards Correct answer.

Explanation

Using widely adopted, open standards reduces vendor lock-in and supports scalable exchange across heterogeneous systems. Governance should require standards-based interfaces and vendor conformance to those standards.

Question 18Technology Strategy, Leadership and Governance

A new clinical documentation system is being introduced, and staff resistance is high. Which action best reflects effective change leadership?

  1. Engage clinicians early and address workflow concerns Correct answer.
  2. Delay communication until go-live day
  3. Mandate use without explaining the rationale
  4. Ignore feedback to keep the project on schedule

Explanation

Effective change leadership involves stakeholders early, communicates the rationale, and adapts workflows to real clinical needs. Participation and transparent communication reduce resistance and improve adoption.

Question 19Technology Strategy, Leadership and Governance

What is the typical time horizon for an IT strategic roadmap in a healthcare organization?

  1. One week
  2. One month
  3. Fifty years
  4. Three to five years Correct answer.

Explanation

An IT strategic roadmap usually covers a multi-year horizon, often three to five years, with periodic updates. It links long-term direction to annual operating plans and project portfolios.

Question 20Technology Strategy, Leadership and Governance

Two hospitals merge and must integrate their IT environments. Which governance approach is most prudent for the first 100 days?

  1. Allow each site to keep all duplicate systems indefinitely
  2. Establish integration governance and prioritize risks Correct answer.
  3. Immediately consolidate all systems without assessment
  4. Freeze all IT spending and stop communication

Explanation

Post-merger IT integration requires clear governance, shared priorities, and risk-based sequencing to protect patient care and operations. Immediate consolidation without assessment can cause outages and clinical disruption.

Question 21Technology Strategy, Leadership and Governance

A hospital wants to test an AI tool for sepsis alerts. What governance approach is most appropriate before widespread deployment?

  1. Pilot with defined safety metrics Correct answer.
  2. Disable clinician override capabilities
  3. Deploy to all units without evaluation
  4. Rely only on vendor marketing claims

Explanation

Clinical AI should be introduced through controlled pilots with predefined safety, efficacy, and equity measures. Governance also requires clinician override, monitoring, and a plan for scaling only after evidence supports it.

Question 22Technology Strategy, Leadership and Governance

An auditor requests evidence that access to ePHI is reviewed regularly. Which governance practice best satisfies this request?

  1. Sharing administrator passwords among staff
  2. Reviewing access only when an incident occurs
  3. Keeping documented access review records Correct answer.
  4. Relying on verbal assurances from managers

Explanation

Auditable governance requires documented, periodic access reviews that show who has access and whether it remains appropriate. Verbal assurances or incident-driven reviews do not demonstrate ongoing oversight.

Question 23Technology Strategy, Leadership and Governance

What is the primary purpose of a service level agreement with an IT vendor?

  1. To specify measurable service expectations Correct answer.
  2. To set the hospital's charity care policy
  3. To determine staff salary increases
  4. To define clinical treatment protocols

Explanation

A service level agreement defines measurable expectations such as availability, response time, and support responsibilities. It provides a basis for vendor performance management and accountability.

Question 24Technology Strategy, Leadership and Governance

A hospital wants to optimize EHR order sets across departments. Which governance structure best supports clinically appropriate standardization?

  1. Assign the task only to the IT networking team
  2. Adopt the vendor's default content without review
  3. Use a multidisciplinary clinical content committee Correct answer.
  4. Let each physician build personal order sets

Explanation

Clinical content governance should involve physicians, nurses, pharmacists, and informatics staff who review evidence and workflows together. Multidisciplinary review improves safety and acceptance while reducing unnecessary variation.

Question 25Technology Strategy, Leadership and Governance

During a prolonged EHR outage, which leadership communication approach best supports clinical operations?

  1. Wait until the system is fully restored
  2. Let informal rumors guide staff actions
  3. Provide frequent, role-specific status updates Correct answer.
  4. Share only technical server logs with clinicians

Explanation

Crisis communication should be timely, accurate, and tailored to the decisions each role must make. Frequent updates and clear channels reduce confusion and support safe care during downtime.

Question 26Technology Strategy, Leadership and Governance

In an IT governance framework, which arrangement best describes centralized decision rights?

  1. Each clinical department sets separate infrastructure standards for its own applications.
  2. External vendors determine the technology roadmap for the organization.
  3. A single enterprise IT authority holds final decision rights for most IT investments and standards. Correct answer.
  4. Business units independently approve their own IT purchases without enterprise review.

Explanation

Centralized decision rights concentrate authority for major IT investments, standards, and priorities in one enterprise body. This model supports consistency and enterprise-wide alignment but must still include business input. Decentralized or vendor-led models distribute authority differently.

Question 27Technology Strategy, Leadership and Governance

What is the primary role of an IT steering committee in a healthcare organization?

  1. Approve every software defect fix before release.
  2. Prioritize IT investments and align them with organizational strategy. Correct answer.
  3. Negotiate clinician employment contracts.
  4. Manage day-to-day service desk ticket queues.

Explanation

An IT steering committee provides cross-functional oversight of IT priorities, investments, and strategic alignment. It typically resolves competing demands and monitors major initiatives rather than performing operational tasks. This distinguishes governance from daily IT service management.

Question 28Technology Strategy, Leadership and Governance

Which practice best ensures that an IT security policy remains current and enforceable?

  1. Delegating policy ownership to the hardware vendor.
  2. Publishing the policy only in a departmental shared drive.
  3. Scheduled reviews plus updates after significant changes. Correct answer.
  4. Approving the policy once at implementation and filing it permanently.

Explanation

Policies require periodic review and event-driven updates when technology, regulations, or risks change. This keeps requirements relevant and enforceable. A one-time approval or limited publication creates drift and weakens accountability.

Question 29Technology Strategy, Leadership and Governance

A hospital finds that patient birth dates are missing from 12% of its records. Which data quality dimension is most directly affected?

  1. Timeliness
  2. Completeness Correct answer.
  3. Consistency
  4. Accuracy

Explanation

Completeness measures whether required data elements are present. Missing birth dates directly reduce completeness regardless of whether the values that do exist are correct. Accuracy and consistency address different aspects of data quality.

Question 30Technology Strategy, Leadership and Governance

A health system's IT roadmap emphasizes cloud migration, but the strategic plan prioritizes opening rural clinics. Which action best restores strategic alignment?

  1. Continue the cloud migration unchanged because it is already funded.
  2. Delegate roadmap decisions to the cloud vendor.
  3. Reassess the roadmap with executives and reprioritize for rural expansion. Correct answer.
  4. Pause all IT work until the strategic plan expires.

Explanation

Strategic alignment requires IT priorities to reflect the organization's stated goals and to be revisited when those goals change. Executive reassessment allows funding and sequencing to shift toward rural expansion. Continuing an outdated roadmap preserves the misalignment.

Question 31Technology Strategy, Leadership and Governance

Which practice is most characteristic of IT portfolio management?

  1. Tracking only the capital cost of purchased hardware.
  2. Managing each project as an isolated effort with no cross-project view.
  3. Evaluating investments collectively for value, risk, and strategic fit. Correct answer.
  4. Funding every submitted IT request in the order received.

Explanation

Portfolio management examines the full set of IT investments together so leaders can balance risk, cost, value, and strategic contribution. It supports trade-off decisions across projects and programs. Isolated project management or first-come funding does not provide that enterprise view.

Question 32Technology Strategy, Leadership and Governance

What is the primary purpose of an enterprise architecture function in a hospital?

  1. Negotiate pharmaceutical purchasing contracts.
  2. Guide current-to-target system and process transitions. Correct answer.
  3. Write application source code for clinical departments.
  4. Resolve help desk incidents within service targets.

Explanation

Enterprise architecture describes the current and target states of business processes, data, applications, and technology, and it guides controlled transition between them. It provides a structured view that informs investment and integration decisions. It is not a software development or service desk function.

Question 33Technology Strategy, Leadership and Governance

When comparing two EHR add-on vendors over five years, which approach best supports a sound total cost of ownership comparison?

  1. Compare only the first-year license fees.
  2. Select the vendor with the lowest initial bid regardless of other costs.
  3. Exclude internal labor because it is not paid to the vendor.
  4. Include licensing, implementation, support, training, integration, and exit costs. Correct answer.

Explanation

Total cost of ownership includes all significant costs over the investment life, including implementation, support, training, integration, and eventual exit. Comparing only acquisition price can hide long-term costs. Internal labor and transition costs are relevant even when not paid directly to the vendor.

Question 34Technology Strategy, Leadership and Governance

The board approves a statement that the organization will accept limited risk in telehealth innovation but will tolerate no risk to electronic protected health information confidentiality. What governance artifact does this represent?

  1. A capital budget request
  2. A service level agreement
  3. A risk appetite statement Correct answer.
  4. A disaster recovery plan

Explanation

A risk appetite statement articulates the amount and types of risk the organization is willing to accept in pursuit of its objectives. It guides investment and control decisions by distinguishing acceptable innovation risk from unacceptable compliance or privacy risk. It is not an operational recovery plan or a vendor contract.

Question 35Technology Strategy, Leadership and Governance

A virtual nursing pilot reduces overtime on two units. What governance step should precede expansion to all units?

  1. Disabling clinician override functions to standardize use.
  2. Announcement of pilot results through a vendor press release.
  3. Independent validation of clinical impact, workflow fit, and equity. Correct answer.
  4. Immediate expansion to capture benefits quickly.

Explanation

Before scaling, governance should require independent evaluation of whether the pilot's results are credible and generalizable. This includes clinical safety, workflow effects, and equity across patient populations. Immediate expansion without validation risks spreading unintended consequences.

Question 36Technology Strategy, Leadership and Governance

What is a common benefit of a transparent IT chargeback model?

  1. It makes technology costs visible and encourages accountable demand management. Correct answer.
  2. It hides infrastructure costs from business units.
  3. It guarantees lower total IT spending in every year.
  4. It removes the need for an annual IT budget.

Explanation

Chargeback allocates IT costs to the units that consume services, making costs visible and encouraging more deliberate demand. Transparency can improve budget discipline and prioritization. It does not guarantee savings and does not replace the need for an IT budget.

Question 37Technology Strategy, Leadership and Governance

Which practice best supports benefits realization for a major IT investment?

  1. Defining measurable benefits, assigning owners, and reviewing outcomes after implementation. Correct answer.
  2. Relying on vendor-published benefit estimates instead of local measures.
  3. Tracking only whether the project was delivered on schedule.
  4. Closing the project office immediately after go-live.

Explanation

Benefits realization requires clearly defined outcome measures, accountable owners, and post-implementation review. These practices connect the investment to realized value rather than merely completing delivery. Vendor estimates and schedule metrics alone do not demonstrate local benefit.

Question 38Technology Strategy, Leadership and Governance

A hospital is negotiating a SaaS agreement for a critical clinical application. Which contract provision best mitigates long-term vendor lock-in?

  1. Automatic renewal with no notice period and no renegotiation.
  2. Data portability and transition assistance at defined costs. Correct answer.
  3. Unlimited price increases after the first contract year.
  4. Vendor ownership of all derived data and analytics.

Explanation

Lock-in is reduced when the organization can retrieve its data in usable formats and obtain defined transition assistance at predictable costs. These provisions preserve future options if the relationship changes. Auto-renewal and vendor data ownership increase dependency.

Question 39Technology Strategy, Leadership and Governance

Clinical and business units are competing for a limited pool of IT analysts. Which governance mechanism most effectively allocates this scarce capacity?

  1. Unilateral prioritization by the CIO without business input.
  2. Equal allocation of analysts to every department regardless of value.
  3. First-come, first-served requests submitted by email.
  4. A transparent enterprise demand intake and prioritization process. Correct answer.

Explanation

Scarce IT capacity should be allocated through a consistent demand intake process with transparent criteria and cross-functional review. This allows competing requests to be compared on value, risk, and strategic fit. Ad hoc or equal-allocation methods can reward persistence rather than priority.

Question 40Technology Strategy, Leadership and Governance

Which set of measures best provides leading indicators of cybersecurity governance effectiveness?

  1. The total number of security vendors under contract.
  2. Patch latency, privileged access review completion, and multifactor authentication coverage. Correct answer.
  3. The number of completed external audits in the past year.
  4. Phishing messages blocked by the email gateway during the last quarter.

Explanation

Leading indicators reflect control performance that can predict future risk, such as how quickly vulnerabilities are patched, whether privileged access is reviewed, and how widely multifactor authentication is enforced. These measures show whether governance is driving preventive practices. Volume counts alone provide limited insight into control effectiveness.

Question 41Systems, Infrastructure and Network Operations

Why is it common practice to place networked medical devices on a dedicated VLAN separate from general clinical workstation traffic?

  1. To remove the need for any firewall rules
  2. To contain broadcasts and limit lateral movement Correct answer.
  3. To expand the address pool available to workstations
  4. To let devices bypass authentication at boot

Explanation

Separate VLANs contain broadcast traffic and give network teams a control point for restricting which systems can reach vulnerable devices. Access between VLANs still must be governed by firewall or ACL policy; segmentation does not remove that need. Devices also remain subject to authentication and device-identity controls.

Question 42Systems, Infrastructure and Network Operations

Which backup type captures only the data that has changed since the most recent backup of any kind?

  1. A mirror backup
  2. A differential backup
  3. An incremental backup Correct answer.
  4. A full backup

Explanation

An incremental backup copies data changed since the last backup of any type, whether full or incremental. A differential backup instead captures everything changed since the last full backup. Restoring from incrementals requires the last full backup plus every incremental in sequence.

Question 43Systems, Infrastructure and Network Operations

A clinical application specifies an RTO of 4 hours and an RPO of 15 minutes. Which statement correctly reflects those requirements?

  1. The system must be backed up every 4 hours and restored within 15 minutes
  2. Up to 15 minutes of data loss; service must return within 4 hours Correct answer.
  3. The system must run continuously with no data loss and no downtime
  4. Up to 4 hours of data loss is acceptable, and service must return within 15 minutes

Explanation

Recovery time objective (RTO) is the maximum acceptable time to restore service, so 4 hours is the downtime limit. Recovery point objective (RPO) is the maximum acceptable data loss measured in time, so 15 minutes is the data-loss limit. Backup frequency is chosen to meet the RPO, not defined by it directly.

Question 44Systems, Infrastructure and Network Operations

What is the primary role of an uninterruptible power supply (UPS) for a clinical data center?

  1. To power only the HVAC system during outages
  2. To bridge until generators start and condition power Correct answer.
  3. To provide long-term power during extended utility outages
  4. To replace the need for a standby generator

Explanation

A UPS supplies battery-backed power for a short period, covering the interval before generators assume the load and smoothing brief sags and surges. Generators, not UPS batteries, carry extended outages. UPS capacity is sized for critical loads, not for HVAC alone.

Question 45Systems, Infrastructure and Network Operations

Why should servers, network devices, and clinical systems be synchronized to a common time source?

  1. To correlate log timestamps during incident investigation Correct answer.
  2. To shorten the DHCP lease renewal cycle
  3. To reduce bandwidth consumed by syslog messages
  4. To meet RAID controller clock requirements

Explanation

Consistent time across devices allows logs from firewalls, servers, and medical devices to be placed in correct sequence during incident analysis. It also supports certificate validation and scheduled tasks. Time synchronization has no effect on DHCP lease length, syslog volume, or RAID operation.

Question 46Systems, Infrastructure and Network Operations

Which addressing approach is best for a fleet of infusion pumps that must keep stable IP addresses for firewall rules and inventory?

  1. DHCP reservations tied to each device's MAC address Correct answer.
  2. Static addresses typed into each pump by a technician
  3. Addresses drawn from the guest wireless pool
  4. Self-assigned link-local addresses

Explanation

Reservations give each device a predictable address while keeping configuration centralized, reducing duplicate-address mistakes and simplifying device replacement. Firewall rules and asset records can then reference a known address. Manual static configuration on many devices is error-prone, and guest or link-local addressing is unsuitable for managed clinical devices.

Question 47Systems, Infrastructure and Network Operations

Telemetry monitors lose their connection when patients and nurses move between units. Which infrastructure cause is most likely?

  1. Coverage overlap and security profiles differ between access points Correct answer.
  2. The centralized syslog server is overloaded
  3. DHCP lease durations on the wired network are too long
  4. Monitor batteries are discharging too quickly

Explanation

Roaming failures usually stem from insufficient cell overlap, mismatched security or VLAN settings, or RF coverage gaps that force a disconnect and reauthentication. Battery life and syslog load do not cause handoff failures. Wired DHCP lease length is irrelevant to wireless roaming.

Question 48Systems, Infrastructure and Network Operations

Which traffic class should receive the highest priority in a QoS design for a hospital network?

  1. Guest internet browsing
  2. Real-time waveform telemetry and voice traffic Correct answer.
  3. Bulk imaging transfers between archive nodes
  4. Scheduled operating system updates to workstations

Explanation

Real-time telemetry waveforms and voice are latency- and jitter-sensitive, so they belong in the highest-priority queue. Bulk imaging, patching, and guest browsing can tolerate delay and should be lower classes, often with rate limits. Prioritizing bulk data would starve time-sensitive clinical traffic.

Question 49Systems, Infrastructure and Network Operations

Two systems exchange HL7 messages through an interface engine. Which firewall rule best follows least-privilege practice?

  1. Allow all traffic between the two subnets during troubleshooting
  2. Block the port and route messages by email instead
  3. Allow only the required source, destination, and port Correct answer.
  4. Allow any source to any destination on the interface port

Explanation

Least privilege means permitting only the specific hosts and service port needed for the interface, then logging and reviewing the rule. Any-to-any and broad subnet rules expose far more than the interface requires. Email is not a supported transport for production HL7 interfaces.

Question 50Systems, Infrastructure and Network Operations

Which RAID level provides redundancy by writing identical data to two disks?

  1. RAID 6
  2. RAID 1 Correct answer.
  3. RAID 0
  4. RAID 5

Explanation

RAID 1 mirrors data across paired disks so either disk can fail without data loss. RAID 0 stripes without redundancy, and RAID 5 and RAID 6 use parity rather than mirroring. Mirroring costs capacity equal to the raw disk size but gives simple, fast recovery.