AHIC Privacy and Security 5

Question 1

Which of the following describes 'data integrity' in the context of healthcare information security?

Accepted Answer

Ensuring that data is not altered or destroyed in an unauthorized manner

Answer

Data integrity means protecting information from unauthorized modification or destruction, ensuring accuracy and completeness of health records.

Question 2

A hospital uses a cloud-based EHR vendor. To comply with HIPAA, the hospital must:

Accepted Answer

Execute a Business Associate Agreement (BAA) with the cloud vendor

Answer

Any cloud vendor handling PHI on behalf of a covered entity is a business associate and must sign a BAA before PHI is processed or stored.

Question 3

Which activity would be classified as 'healthcare operations' under HIPAA, permitting use of PHI without patient authorization?

Accepted Answer

Conducting quality assessment and improvement activities

Answer

Quality assessment, auditing, training, and similar administrative activities qualify as healthcare operations, permitting PHI use without patient authorization.

Question 4

What is the primary risk associated with using unsecured personal mobile devices to access ePHI (BYOD)?

Accepted Answer

Increased risk of data breach through lost, stolen, or compromised personal devices

Answer

BYOD introduces significant breach risk because personal devices may lack organizational security controls and can be lost or stolen.

Question 5

A social engineering attack in which an attacker impersonates an IT support technician to obtain login credentials is called:

Accepted Answer

Pretexting

Answer

Pretexting involves fabricating a scenario (pretext) to manipulate an individual into revealing sensitive information or granting access.

(AHIC) AMIA Health Informatics Certification Practice Test

(AHIC) AMIA Health Informatics Certification Practice Test

AHIC Privacy and Security 5