CHP Equipment Operation & Maintenance 3

Question 1

A nurse's personal smartphone is used to photograph wound progress for the patient record. Under HIPAA, this practice requires:

Accepted Answer

A formal BYOD policy that addresses ePHI handling, encryption, and remote wipe capability

Answer

BYOD (Bring Your Own Device) programs must include formal policies covering ePHI safeguards such as encryption, containerization, and remote wipe to comply with the HIPAA Security Rule.

Question 2

Which feature of a mobile device management (MDM) platform most directly supports HIPAA's requirement for ePHI protection on portable devices?

Accepted Answer

Remote wipe capability in case of loss or theft

Answer

Remote wipe allows an organization to erase ePHI from a lost or stolen device, directly addressing the Security Rule's device and media controls requirement.

Question 3

A tablet used for electronic prescribing is left unattended at a nursing station for 20 minutes. Which automatic control would BEST mitigate unauthorized ePHI access?

Accepted Answer

Automatic logoff after a period of inactivity

Answer

Automatic logoff (§164.312(a)(2)(iii)) is an addressable implementation specification that prevents unauthorized access when a workstation or device is left unattended.

Question 4

An organization discovers that a vendor-managed infusion pump transmits patient data over an unencrypted Wi-Fi channel. The FIRST step should be:

Accepted Answer

Conduct a risk analysis to assess the likelihood and impact of a breach

Answer

A risk analysis is the foundational required step under §164.308(a)(1) to evaluate the probability and impact of potential ePHI exposure before deciding on remediation.

Question 5

A practice manager finds an old fax machine that occasionally received PHI now needs decommissioning. Which action is MOST important?

Accepted Answer

Clearing stored fax memory and any internal print logs before disposal

Answer

Fax machines with memory must have stored transmissions and internal logs cleared before disposal to prevent unauthorized access to stored PHI, per Device and Media Controls.

(CHP) Certified HIPAA Professional Practice Test

(CHP) Certified HIPAA Professional Practice Test

CHP Equipment Operation & Maintenance 3