CHPS Healthcare IT and Security Technologies

Question 1

Which technology provides the strongest protection for ePHI stored on a lost or stolen laptop under HIPAA?

Accepted Answer

Full-disk encryption using FIPS 140-2 validated modules

Answer

Password-protected BIOS

Answer

Multi-factor authentication for Windows login

Answer

Remote wipe capability via MDM

Question 2

In a healthcare EHR environment, which access control model most effectively enforces the Minimum Necessary standard?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 3

What is a 'break-the-glass' procedure in the context of healthcare IT?

Accepted Answer

An audit-logged override mechanism allowing emergency access to restricted PHI when needed for patient care

Answer

An emergency protocol for physical access to server rooms during fires

Answer

A procedure for destroying PHI media in emergencies

Answer

A policy for escalating cybersecurity incidents to senior management

Question 4

Which healthcare interoperability standard defines the format for electronic exchange of clinical data including medications, allergies, and diagnoses?

Accepted Answer

HL7 FHIR

Answer

DICOM

Answer

X12 EDI

Answer

SNOMED CT

Question 5

A healthcare organization is evaluating a mobile health (mHealth) app that will access patient ePHI. Under HIPAA, which consideration is MOST critical before deployment?

Accepted Answer

Whether the app vendor has signed a BAA and the app uses appropriate encryption and access controls

Answer

Whether the app has been approved by the FDA

Answer

Whether the app is available on both iOS and Android platforms

Answer

Whether the app has at least 4 stars in the app store

Question 6

Which security control is MOST effective at detecting unauthorized internal access to ePHI by snooping employees?

Accepted Answer

User and Entity Behavior Analytics (UEBA)

Answer

Firewall with intrusion prevention system

Answer

Data Loss Prevention (DLP) system

Answer

Web application firewall (WAF)