A 500-bed hospital is rolling out a fleet of network-connected infusion pumps that interface with electronic health record and pharmacy systems to download drug libraries and transmit treatment logs. Because altered firmware could deliver incorrect dosages, the CISO must choose a control that best protects the integrity of the pump software while still allowing routine updates from the vendor. Which security measure BEST addresses this embedded-device risk?
Implementing cryptographic code signing on the infusion pumps ensures that the device verifies every firmware image against a trusted digital signature before installation. This prevents unauthorized or malicious code from running on the pumps and directly addresses the patient-safety threat of tampered firmware. Strong passwords alone do not protect firmware integrity, physical isolation would block required clinical connectivity, and frequent active vulnerability scanning can crash or degrade many resource-constrained medical devices.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is code signing and how does it work?
Open an interactive chat with Bash
What makes embedded systems like infusion pumps more vulnerable to attacks?
Open an interactive chat with Bash
Why is physical isolation not practical for networked medical devices?
Open an interactive chat with Bash
ISC2 CISSP
Security Architecture and Engineering
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .