nerdexam
Isaca

CISA · Question #524

A healthcare facility offers patients health tracking devices that can be monitored remotely by healthcare professionals. Which of the following is the BEST way to protect patient personal…

The correct answer is D. Add a digital certificate to the devices that limits communication to specific servers. Using digital certificates to authenticate devices and restrict their communication to authorized servers ensures that data is transmitted only to trusted endpoints. This control effectively prevents unauthorized data exfiltration and secures patient personal information in…

Submitted by emma.c· Apr 18, 2026Protection of Information Assets

Question

A healthcare facility offers patients health tracking devices that can be monitored remotely by healthcare professionals. Which of the following is the BEST way to protect patient personal information from unauthorized exfiltration?

Options

  • ARestrict the devices to using Internet Protocol (IP) version 6 only.
  • BImplement periodic checks of outbound firewall rules.
  • CConfigure the devices to reboot automatically every 7 days.
  • DAdd a digital certificate to the devices that limits communication to specific servers.

How the community answered

(52 responses)
  • A
    6% (3)
  • B
    8% (4)
  • C
    17% (9)
  • D
    69% (36)

Explanation

Using digital certificates to authenticate devices and restrict their communication to authorized servers ensures that data is transmitted only to trusted endpoints. This control effectively prevents unauthorized data exfiltration and secures patient personal information in healthcare IoT

Topics

#Data Exfiltration Prevention#Device Security#Digital Certificates#Information Protection

Community Discussion

No community discussion yet for this question.

Full CISA Practice