Question 1

Compliance to the Security Rule is solely the responsibility of the Security Officer.

Accepted Answer

A) True 
 B)False

Question 2

What step is part of reporting of security incidents?

Accepted Answer

A)   Report disclosure to all patients.
B)   Notation of incident is to be excluded from the patient's medical record.
C)   Notify Business Associates and Trading Partners of the breach.
D)   Change passwords to protect from further invasion.

Question 3

The ability to continue after a disaster of some kind is a requirement of Security Rule. What item is considered part of the contingency plan or business continuity plan?

Accepted Answer

A)   Regular biohazard drills
B)   Risk analysis
C)   Emergency mode operation plan
D)   Find someone to figure the payroll C

Question 4

Reasonable physical safeguards for patient care areas include:

Accepted Answer

A)   a staff escort at all times.
B)   having monitors turned away from viewing by visitors.
C)   have a sign-in and sign-out register for all visitors.
D)   provide all visitors with your policy document.

Question 5

"At home" workers such as transcriptionists are not required to follow the workstation security rules for passwords, viewing of monitors by others, or locking of computer screens.

Accepted Answer

A) True 
 B)False

Question 6

Which of the following items is a technical safeguard of the Security Rule?

Accepted Answer

A)   Workstation location
B)   Data backup plan
C)   Sufficient storage capacity
D)   Entity authentication

Question 7

Match between columns
                        Premises: An ongoing process that considers the risk to electronic information and the data itself to determine if there is adequate security for the system to keep exposure to loss or alteration of PHI to a minimum.
A study to find the problems or gaps between current practices and what the Security Rule requires.
Implementing policies and procedures to prevent, detect, and contain any intrusions of security or unauthorized access.
A process whereby cost-effective security control measures may be selected to balance the cost of security control measures against the losses expected if these measures were not in place.

Accepted Answer

The Answer of Gap analysis and Risk analysis and Risk is...

Question 8

Risk analysis in the Security Rule considers

Accepted Answer

A)   when the Security Officer includes budget items to pay for a better computer system.
B)   how hard it is for hackers to access the computer system.
C)   a balance between what is cost-effective and the potential risks of disclosure.
D)   the cost of insurance to cover possible losses.

Question 9

Whenever a device has become obsolete, the Security Office must

Accepted Answer

A)   check the item off the list of equipment to maintain in the facility.
B)   verify that the facility does not need the equipment any more before selling it.
C)   log the date of disposal and the amount of its depreciation.
D)   record when and how it is disposed and that all data was deleted from the device.

Question 10

The act of changing readable text into a vast series of "garbled" characters using complex mathematical algorithms is called

Accepted Answer

A)   decoded messages.
B)   transmission architecture.
C)   HIPAA protocol.
D)   encryption.

Question 11

The documentation for policies and procedures of the Security Rule must be kept for

Accepted Answer

A)   3 years.
B)   5 years.
C)   6 years.
D)   until the next fiscal year.

Question 12

Security of e-PHI has to do with keeping the data secure from a breach in the information system's security protocols.

Accepted Answer

A) True 
 B)False

Question 13

The Security Rule addresses four areas in order to provide sufficient physical safeguards. Which of the following is NOT one of them?

Accepted Answer

A)   Workstation security
B)   Device and media controls
C)   Facility access controls
D)   Electronic signatures
E)   Workstation location and access

Question 14

The Office of HIPAA Standards may not initiate an investigation without receiving a formal complaint.

Accepted Answer

A) True 
 B)False

Question 15

If a business visitor is also a Business Associate, that individual does not need to be escorted in the building to ensure protection of PHI.

Accepted Answer

A) True 
 B)False  False

Question 16

The Administrative Safeguards mandated by HIPAA include which of the following?

Accepted Answer

A)   Unique health plan identifiers
B)   Workforce security training
C)   Evaluation of computer security effectiveness
D)   Sanctions for unauthorized disclosures

Question 17

To protect e-PHI that is sent through the Internet, a covered entity must use encryption technology to minimize the risks. E-PHI that is "at rest" must also be encrypted to maintain security.

Accepted Answer

A) True 
 B)False

Question 18

One good requirement to ensure secure access control is to install automatic logoff at each workstation.

Accepted Answer

A) True 
 B)False

Question 19

Integrity of e-PHI requires confirmation that the data

Accepted Answer

A)   has been backed up routinely.
B)   is accurate and has not been altered, lost, or destroyed in an unauthorized manner.
C)   has accepted all changes and modifications to the medical record.
D)   has been reviewed by the Security Officer as being accurate.

Question 20

Only monetary fines may be levied for violation under the HIPAA Security Rule.

Accepted Answer

A) True 
 B)False  False

Exam 4: Security Rule Explained

Compliance to the Security Rule is solely the responsibility of the Security Officer.

Correct Answer
verified

What step is part of reporting of security incidents?

Correct Answer
verified

The ability to continue after a disaster of some kind is a requirement of Security Rule. What item is considered part of the contingency plan or business continuity plan?

Correct Answer
verified
C

Reasonable physical safeguards for patient care areas include:

Correct Answer
verified

"At home" workers such as transcriptionists are not required to follow the workstation security rules for passwords, viewing of monitors by others, or locking of computer screens.

Correct Answer
verified

Which of the following items is a technical safeguard of the Security Rule?

Correct Answer
verified

Match the HIPAA term with the correct definition.

Risk analysis in the Security Rule considers

Correct Answer
verified

Whenever a device has become obsolete, the Security Office must

Correct Answer
verified

The act of changing readable text into a vast series of "garbled" characters using complex mathematical algorithms is called

Correct Answer
verified

The documentation for policies and procedures of the Security Rule must be kept for

Correct Answer
verified

Security of e-PHI has to do with keeping the data secure from a breach in the information system's security protocols.

Correct Answer
verified

The Security Rule addresses four areas in order to provide sufficient physical safeguards. Which of the following is NOT one of them?

Correct Answer
verified

The Office of HIPAA Standards may not initiate an investigation without receiving a formal complaint.

Correct Answer
verified

If a business visitor is also a Business Associate, that individual does not need to be escorted in the building to ensure protection of PHI.

Correct Answer
verified
False

The Administrative Safeguards mandated by HIPAA include which of the following?

Correct Answer
verified

To protect e-PHI that is sent through the Internet, a covered entity must use encryption technology to minimize the risks. E-PHI that is "at rest" must also be encrypted to maintain security.

Correct Answer
verified

One good requirement to ensure secure access control is to install automatic logoff at each workstation.

Correct Answer
verified

Integrity of e-PHI requires confirmation that the data

Correct Answer
verified

Only monetary fines may be levied for violation under the HIPAA Security Rule.

Correct Answer
verified
False

Exam 4: Security Rule Explained

Compliance to the Security Rule is solely the responsibility of the Security Officer.

Correct AnswerverifiedShow Answer

What step is part of reporting of security incidents?

Correct AnswerverifiedShow Answer

The ability to continue after a disaster of some kind is a requirement of Security Rule. What item is considered part of the contingency plan or business continuity plan?

Correct AnswerverifiedC

Reasonable physical safeguards for patient care areas include:

Correct AnswerverifiedShow Answer

"At home" workers such as transcriptionists are not required to follow the workstation security rules for passwords, viewing of monitors by others, or locking of computer screens.

Correct AnswerverifiedShow Answer

Which of the following items is a technical safeguard of the Security Rule?

Correct AnswerverifiedShow Answer

Match the HIPAA term with the correct definition.

Risk analysis in the Security Rule considers

Correct AnswerverifiedShow Answer

Whenever a device has become obsolete, the Security Office must

Correct AnswerverifiedShow Answer

The act of changing readable text into a vast series of "garbled" characters using complex mathematical algorithms is called

Correct AnswerverifiedShow Answer

The documentation for policies and procedures of the Security Rule must be kept for

Correct AnswerverifiedShow Answer

Security of e-PHI has to do with keeping the data secure from a breach in the information system's security protocols.

Correct AnswerverifiedShow Answer

The Security Rule addresses four areas in order to provide sufficient physical safeguards. Which of the following is NOT one of them?

Correct AnswerverifiedShow Answer

The Office of HIPAA Standards may not initiate an investigation without receiving a formal complaint.

Correct AnswerverifiedShow Answer

If a business visitor is also a Business Associate, that individual does not need to be escorted in the building to ensure protection of PHI.

Correct AnswerverifiedFalse

The Administrative Safeguards mandated by HIPAA include which of the following?

Correct AnswerverifiedShow Answer

To protect e-PHI that is sent through the Internet, a covered entity must use encryption technology to minimize the risks. E-PHI that is "at rest" must also be encrypted to maintain security.

Correct AnswerverifiedShow Answer

One good requirement to ensure secure access control is to install automatic logoff at each workstation.

Correct AnswerverifiedShow Answer

Integrity of e-PHI requires confirmation that the data

Correct AnswerverifiedShow Answer

Only monetary fines may be levied for violation under the HIPAA Security Rule.

Correct AnswerverifiedFalse

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
False

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
False