Test Security and Data Management Flashcards
7 cards from real BCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Test Security and Data Management flashcards as text
A psychometrist working remotely must administer a digital test. Which security measure is MOST critical for protecting data integrity?
Answer: Employing a VPN and encrypted connection for all data transmission
A VPN with encryption protects data in transit from interception during remote test administration.
Which situation would require an immediate breach notification under applicable regulations?
Answer: A laptop containing unencrypted examinee PHI is stolen
Loss of unencrypted PHI on a stolen device constitutes a reportable breach requiring notification under HIPAA and related regulations.
When creating secure passwords for systems containing test data, the psychometrist should ensure the password is:
Answer: Complex, unique, and changed at regular intervals
Strong passwords that are complex, unique, and regularly rotated significantly reduce the risk of unauthorized system access.
What is the role of an audit trail in test data management?
Answer: It records who accessed or modified records, and when, to support accountability
Audit trails create a chronological log of data access and modifications, enabling detection of unauthorized activity and supporting regulatory compliance.
A psychometrist is asked to email raw test scores to a referral source. The MOST secure approach is to:
Answer: Use a secure, encrypted messaging system or password-protect the attachment
Secure messaging or password-protected attachments prevent interception of sensitive test data during electronic transmission.
Which best describes 'data minimization' as it applies to psychometric record keeping?
Answer: Gathering and retaining only the data necessary for the intended assessment purpose
Data minimization requires collecting and keeping only information that is directly needed for the assessment, reducing privacy risk.
If a psychometrist discovers that test items from a proprietary battery have been posted on a public website, the appropriate response is to:
Answer: Report the exposure immediately to the supervising psychologist and the test publisher
Exposure of proprietary test content requires immediate reporting to supervisory staff and the publisher so they can take remediation and legal action.