CCS Security Principles and Practices 3

Question 1

A coding specialist working remotely accesses patient records over public Wi-Fi without a VPN. This violates which HIPAA Security Rule requirement?

Accepted Answer

Transmission security safeguards for ePHI

Answer

HIPAA transmission security standards require encryption or equivalent measures when ePHI is transmitted over open networks to prevent unauthorized interception.

Question 2

Which of the following represents a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Locked server rooms with key card access

Answer

Physical safeguards control physical access to facilities and equipment where ePHI is stored or accessed, such as locked rooms with controlled entry.

Question 3

A patient requests an amendment to their medical record because they believe it contains an error. Under HIPAA, the covered entity must:

Accepted Answer

Accept or deny the request within 60 days, with a possible 30-day extension

Answer

HIPAA gives covered entities 60 days to respond to amendment requests, with the option to extend by 30 days if they provide written notice.

Question 4

Which type of malware specifically encrypts an organization's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware encrypts victim files or systems and demands a ransom payment, often in cryptocurrency, for the decryption key.

Question 5

A coder realizes she has been documenting under a colleague's login credentials for two weeks. This situation violates which core security principle?

Accepted Answer

Non-repudiation and individual accountability

Answer

Sharing login credentials undermines non-repudiation and individual accountability, making it impossible to attribute specific actions to the correct user.

(CCS) Certified Coding Specialist Practice Test

(CCS) Certified Coding Specialist Practice Test

CCS Security Principles and Practices 3