CHPS Healthcare IT and Security Technologies 2

Question 1

Under the 21st Century Cures Act, covered entities and health IT developers must support patient access to health data through which technical standard?

Accepted Answer

HL7 FHIR R4 APIs

Answer

The 21st Century Cures Act requires certified health IT to support FHIR R4-based APIs enabling patients and authorized third parties to access their health data.

Question 2

What is the primary security concern with healthcare Internet of Medical Things (IoMT) devices?

Accepted Answer

They often run legacy operating systems with limited patching capabilities, creating unmanageable vulnerabilities

Answer

IoMT devices often run outdated embedded OS firmware that cannot be patched, creating persistent vulnerabilities that are difficult to remediate in a clinical environment.

Question 3

Which network segmentation strategy BEST protects a healthcare organization's clinical systems from a ransomware attack originating on the administrative network?

Accepted Answer

Segmenting clinical systems into a separate VLAN with strict firewall rules controlling inter-segment traffic

Answer

Network segmentation isolates clinical systems from administrative networks, containing ransomware spread and protecting patient-facing systems from attacks originating elsewhere.

Question 4

In healthcare cybersecurity, what does the term 'patch management' refer to?

Accepted Answer

The systematic process of identifying, acquiring, testing, and deploying software updates to fix vulnerabilities

Answer

Patch management is the structured process of keeping software current with security and functional updates to remediate known vulnerabilities before they are exploited.

Question 5

A healthcare organization is implementing Multi-Factor Authentication (MFA) for EHR access. Which combination provides the strongest authentication?

Accepted Answer

Password plus a time-based one-time passcode (TOTP) from an authenticator app

Answer

Combining something you know (password) with something you have (TOTP from an authenticator app) provides true multi-factor authentication using distinct factor categories.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare IT and Security Technologies 2