Why Desktop Virtualization Strengthens Access Control in Healthcare

CDPSE By islever Editorial Last updated

Short answer

C Improved data integrity and reduced effort for privacy audits

Question

Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?
  1. Limited functions and capabilities of a secured operating environment
  2. Monitored network activities for unauthorized use
  3. Improved data integrity and reduced effort for privacy audits Correct Answer
  4. Unlimited functionalities and highly secured applications

Key Takeaways

Tests the distinction between primary access control mechanisms and secondary administrative benefits when evaluating virtualization deployments.

Desktop virtualization enforces stricter access control by centralizing data and restricting endpoint capabilities to role-specific functions. While many candidates favor audit benefits, the core privacy mechanism lies in minimizing system exposure through least-privilege design.

Common mistake: Selecting C because VDI simplifies auditing, but the question explicitly targets access control implementation, making restricted OS capabilities the accurate technical choice.

Expert Analysis

Why the Answer Is Correct

Desktop virtualization (VDI) centralizes processing and storage on secure servers while thinning out the endpoint. By configuring the virtual desktop image to expose only role-specific applications and blocking unnecessary OS-level functions, organizations directly enforce least-privilege access control. This aligns with privacy-by-design principles that minimize data exposure and restrict user capabilities to only what is strictly necessary for handling patient records.

Why the Other Options Are Wrong

Option B describes network monitoring, which is a detective control unrelated to the structural access enforcement provided by VDI. Option C highlights improved data integrity and streamlined audits, which are valid secondary benefits of centralized management but do not directly address the question’s focus on implementing stronger access control. Option D contradicts security fundamentals, as unlimited functionalities would increase the attack surface and violate privacy mandates.

Community Comment Notes

While 100% of voters selected C, experienced practitioners note that exam questions often test precise terminology matching. Comment [2] correctly identifies that restricting environmental capabilities is the direct mechanism for access control, whereas C confuses operational efficiency with access governance. Aligning answers with the exact control type requested prevents costly traps.

Official Reference

https://www.iso.org/standard/27001.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always map the control type in the question stem (access, detection, prevention) to the option’s primary function. Prioritize architectural restrictions over operational efficiencies when virtualization or cloud platforms are mentioned.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 2 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 2

  1. 821bbab 👍 1
    My Answer is A. Desktop virtualization creates a secure, controlled environment by limiting user access to only specific functions and applications that are necessary for their role. This reduces the potential for unauthorized access to sensitive patient records or misuse of system resources. By restricting the capabilities of the virtual desktop environment, the organization can enforce stronger access controls, reducing the risk of privacy breaches or accidental data exposure. This is particularly important in healthcare, where the confidentiality and integrity of patient records are critical.
  2. Craigp990i 👍 1 Answered C
    C. Improved data integrity and reduced effort for privacy audits

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

What Is the Greatest Privacy Concern with a Third-Party Virtualized Workspace?

S-grade

Data Migration with Outdated Documentation: What Should Be Done Next?

S-grade

Which Should Be the First Consideration in Data Sanitization Method Selection?

S-grade

Which scenario poses the greatest privacy risk: lacking hardware disposal policy or unencrypted internal emails?

S-grade

Practice All CDPSE Questions

Access 229 questions with complete answers and detailed explanations.

View Full CDPSE Practice Test →

← Back to CDPSE Study Guide