CHPS Healthcare IT and Security Technologies 3

Question 1

A healthcare organization's security team detects unusual after-hours access to the EHR from a nurse's account. Which NIST Incident Response phase should they initiate FIRST?

Accepted Answer

Containment

Answer

Upon detecting a potential incident, the immediate priority is Containment to prevent further unauthorized access while the team assesses the scope of the incident.

Question 2

Which type of malware specifically encrypts healthcare data and demands payment for decryption keys, causing significant operational disruption to hospitals?

Accepted Answer

Ransomware

Answer

Ransomware encrypts files or systems and demands ransom payment for decryption, making it particularly devastating in healthcare where data availability is critical to patient care.

Question 3

In healthcare security, what is the primary purpose of a 'penetration test'?

Accepted Answer

Simulating real-world attacks to identify exploitable vulnerabilities before malicious actors do

Answer

Penetration testing uses ethical hackers to simulate real attacks against healthcare systems, identifying exploitable vulnerabilities that automated scans may miss.

Question 4

Under HIPAA Security Rule requirements, what is the primary purpose of maintaining system activity review (audit log review)?

Accepted Answer

To detect inappropriate or unauthorized access to ePHI and security incidents

Answer

Regular audit log review enables covered entities to detect unauthorized or inappropriate access to ePHI, which is central to the Security Management Process requirements.

Question 5

Which of the following best describes a 'zero trust' security model in the context of healthcare IT?

Accepted Answer

Requiring continuous verification of every user, device, and connection regardless of network location

Answer

Zero trust operates on the principle of 'never trust, always verify' — every access request is authenticated and authorized regardless of network origin.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare IT and Security Technologies 3