Final Part 13

Question 1

Firewalls are part of _______.

A. Physical security
B. Encryption
C. Network Security
D. Administrative security

Answer 1

Network Security

Question 2

Which of the following is NOT one of the goals of the HIPAA security rule?

A. Integrity
B. Confidentiality
C. Availability
D. Classification

Answer 2

Classification

Question 3

An employee received an email that he thought was from the information technology department. He provided personal information. He was tricked by ______.

A. Phishing
B. Ransomware

Answer 3

Phishing

Question 4

Identify the true statement about audit logs.

A. Audit logs monitor only user actions
B. Audit logs only capture actions that are outside the norm
C. Audit logs should be available to a wide range of employees to facilitate audits
D. Audit logs should be stored on a different server than the ePHI

Answer 4

Audit logs should be stored on a different server than the ePHI

Question 5

the computer notified the security officer that a user accessed the PHI of a patient who is a celebrity. This is an example of a(n) ______.

A. Integrity
B. Transmission security
C. Trigger
D. Authentication

Answer 5

Trigger

Question 6

Administrative safeguards include which of the following?

A. Audit controls
B. Emergency access procedure
C. Security awareness and training
D. Mechanism to authenticate ePHI

Answer 6

Security awareness and training

Question 7

TRUE/FALSE: “At home” workers such as transcriptionists are not required to follow the workstation security rules for passwords, viewing of monitors by others, or locking computer screens

Answer 7

False

Question 8

The act of changing readable text into a vast series of “garbled” characters using complex mathematical algorithms is called:

A. Encryption
B. Transmission architecture
C. HIPAA protocol
D. Decoded messages

Answer 8

Encryption

Question 9

The healthcare facility wants to do all it can to prevent downtime. Identify the concept that can help with this goal.

A. Redundancy
B. Facility access control
C. Emergency access procedures
D. Integrity

Answer 9

Redundancy

Question 10

Use of e-mail for transmitting PHI is:

A. Permitted without restrictions
B. Allowed only if both sender and receiver(s) agree to keep ePHI private
C. Permitted only if a security algorithm is in place
D. Excluded from possible use under the security rule

Answer 10

Permitted only if a security algorithm is in place