AHIC Privacy and Security 4

Question 1

Which of the following is an example of a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Badge-controlled access to server rooms

Answer

Physical safeguards control physical access to facilities and equipment where ePHI is stored, such as badge-controlled entry to server rooms.

Question 2

An organization receives a subpoena for a patient's medical records. Which HIPAA provision is most relevant?

Accepted Answer

The Privacy Rule's required disclosures for law enforcement with proper process

Answer

HIPAA permits disclosures in response to a court order or subpoena under specific conditions outlined in the Privacy Rule's law enforcement provisions.

Question 3

De-identification of PHI under HIPAA can be achieved through which two official methods?

Accepted Answer

Expert determination and the Safe Harbor method

Answer

HIPAA recognizes Expert Determination (statistical certification) and Safe Harbor (removal of 18 specific identifiers) as the two official de-identification methods.

Question 4

Which federal law grants patients the right to access their electronic health information and requires covered entities to provide it in a machine-readable format?

Accepted Answer

21st Century Cures Act

Answer

The 21st Century Cures Act strengthened information blocking rules and mandated that patients receive electronic access to their health data via standardized APIs.

Question 5

A healthcare organization's disaster recovery plan should prioritize restoring which systems first after a cyberattack?

Accepted Answer

Clinical systems that directly affect patient safety and care delivery

Answer

Clinical systems affecting patient safety must be restored first to minimize harm, reflecting the healthcare industry's patient-first recovery prioritization.

(AHIC) AMIA Health Informatics Certification Practice Test

(AHIC) AMIA Health Informatics Certification Practice Test

AHIC Privacy and Security 4