CEHRS CEHRS Data Security and Access Control 2

Question 1

What does 'encryption at rest' protect in an EHR system?

Accepted Answer

Data stored on hard drives, servers, or portable devices from unauthorized access

Answer

Encryption at rest protects stored data — on hard drives, servers, USB drives, or laptops — by rendering it unreadable without the proper decryption key.

Question 2

Which HIPAA Security Rule safeguard category includes policies and procedures for managing workforce access to ePHI?

Accepted Answer

Administrative safeguards

Answer

Administrative safeguards include policies and procedures such as workforce training, access management, and security awareness that govern how ePHI is managed.

Question 3

What is the purpose of an automatic session timeout in an EHR system?

Accepted Answer

To log out inactive users and prevent unauthorized access to an unattended workstation

Answer

Automatic session timeout logs users out after a period of inactivity to prevent unauthorized access if a workstation is left unattended.

Question 4

Which type of malware encrypts EHR data and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Ransomware is malicious software that encrypts a victim's data and demands a ransom payment in exchange for the decryption key needed to restore access.

Question 5

Under HIPAA, how long must covered entities retain documentation of their security policies and procedures?

Accepted Answer

6 years from creation or last effective date

Answer

HIPAA requires covered entities to retain security rule documentation for 6 years from the date of its creation or the date it was last in effect, whichever is later.

(CEHRS) Certified Electronic Health Records Specialist Practice Test

(CEHRS) Certified Electronic Health Records Specialist Practice Test

CEHRS CEHRS Data Security and Access Control 2