A hospital is using a functional magnetic resonance imaging (fMRI) scanner, which is controlled legacy desktop connected to the network. The manufacturer of the fMRI will not support patching of the…

Question

Options

• AInstall HIDS and disable unused services.
• BEnable application whitelisting and disable SMB.
• CSegment the network and configure a controlled interface
• DApply only critical security patches for known vulnerabilities.

• A
  4% (2)
• B
  12% (6)
• C
  80% (41)
• D
  4% (2)

Explanation

TCP port 445 is used by SMB (Server Message Block), a protocol historically riddled with critical exploits (e.g., EternalBlue/WannaCry). Since the manufacturer will not support patching, the system will remain permanently vulnerable. The best strategy is to isolate the device on its own network segment and enforce strict firewall/ACL rules at the controlled interface - allowing only the specific devices and protocols needed (e.g., the fMRI workstation communicating only with authorized clinical systems on port 445) while blocking all other traffic. This limits the blast radius of any exploit. Installing HIDS (A) provides detection but cannot prevent exploitation of unpatched SMB. Disabling SMB (B) contradicts the TCP 445 accessibility requirement. Applying critical patches (D) is impossible since the manufacturer does not support patching.

No community discussion yet for this question.