CHP Equipment Operation & Maintenance 2

Question 1

Before disposing of a photocopier that processed PHI, a covered entity must:

Accepted Answer

Sanitize or destroy the internal hard drive to prevent PHI exposure

Answer

Modern photocopiers store images on internal hard drives, which must be sanitized or physically destroyed before disposal to prevent unauthorized PHI disclosure.

Question 2

Which HIPAA Security Rule standard directly requires covered entities to control physical access to workstations that access ePHI?

Accepted Answer

Workstation Security (§164.310(c))

Answer

The Workstation Security standard (§164.310(c)) specifically requires physical safeguards for workstations that access ePHI, including positioning, screen locks, and restricted access.

Question 3

A third-party technician needs to repair a server containing ePHI. What must be in place before granting access?

Accepted Answer

A Business Associate Agreement (BAA) with the vendor

Answer

Any vendor whose work may expose them to ePHI must have a BAA with the covered entity before being granted access, as required by the HIPAA Privacy and Security Rules.

Question 4

An organization is retiring old laptops used by clinical staff. Which media sanitization method is most appropriate for laptops with sensitive ePHI?

Accepted Answer

Cryptographic erasure or physical destruction of storage media

Answer

NIST SP 800-88 guidelines recommend cryptographic erasure or physical destruction to ensure ePHI is unrecoverable from retired media.

Question 5

Under HIPAA, which entity is responsible for ensuring that medical equipment used under a maintenance contract adequately protects ePHI?

Accepted Answer

The covered entity, through proper BAAs and oversight of business associates

Answer

Covered entities remain responsible for ePHI protection and must ensure maintenance contractors are bound by BAAs and comply with applicable HIPAA Security Rule safeguards.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Equipment Operation & Maintenance 2