CHPS Healthcare IT and Security Technologies 3

Question 1

A healthcare organization's security team detects unusual after-hours access to the EHR from a nurse's account. Which NIST Incident Response phase should they initiate FIRST?

Accepted Answer

Containment

Answer

Recovery

Answer

Eradication

Answer

Detection and Analysis

Question 2

Which type of malware specifically encrypts healthcare data and demands payment for decryption keys, causing significant operational disruption to hospitals?

Accepted Answer

Ransomware

Answer

Spyware

Answer

Rootkit

Answer

Adware

Question 3

In healthcare security, what is the primary purpose of a 'penetration test'?

Accepted Answer

Simulating real-world attacks to identify exploitable vulnerabilities before malicious actors do

Answer

Testing the physical strength of server room locks

Answer

Stress-testing application performance under high load

Answer

Auditing user account permissions for compliance

Question 4

Under HIPAA Security Rule requirements, what is the primary purpose of maintaining system activity review (audit log review)?

Accepted Answer

To detect inappropriate or unauthorized access to ePHI and security incidents

Answer

To generate performance reports for the CIO

Answer

To monitor network bandwidth consumption

Answer

To verify software license compliance

Question 5

Which of the following best describes a 'zero trust' security model in the context of healthcare IT?

Accepted Answer

Requiring continuous verification of every user, device, and connection regardless of network location

Answer

Trusting all internal network traffic since it is inside the firewall perimeter

Answer

Removing all user access to clinical systems as the default state

Answer

Trusting only clinicians and denying access to administrative staff

Question 6

A healthcare organization discovers that its EHR vendor suffered a cyberattack that exposed ePHI. Under HIPAA, the FIRST step the covered entity should take is:

Accepted Answer

Confirm the scope of the incident with the vendor and obtain details to conduct its own HIPAA breach risk assessment

Answer

Immediately send breach notifications to all potentially affected patients

Answer

Terminate the BAA with the vendor immediately

Answer

Submit a complaint to OCR before conducting an internal assessment