CHPS Healthcare IT and Security Technologies

Question 1

Which technology provides the strongest protection for ePHI stored on a lost or stolen laptop under HIPAA?

Accepted Answer

Full-disk encryption using FIPS 140-2 validated modules

Answer

Full-disk encryption using FIPS 140-2 validated cryptographic modules renders data unreadable on a stolen device and qualifies for HIPAA's encryption safe harbor.

Question 2

In a healthcare EHR environment, which access control model most effectively enforces the Minimum Necessary standard?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC restricts ePHI access based on defined job roles, naturally enforcing the Minimum Necessary standard by limiting access to what each role requires.

Question 3

What is a 'break-the-glass' procedure in the context of healthcare IT?

Accepted Answer

An audit-logged override mechanism allowing emergency access to restricted PHI when needed for patient care

Answer

Break-the-glass is an emergency access override that allows authorized users to access restricted PHI in urgent clinical situations, with all access fully audit-logged.

Question 4

Which healthcare interoperability standard defines the format for electronic exchange of clinical data including medications, allergies, and diagnoses?

Accepted Answer

HL7 FHIR

Answer

HL7 FHIR (Fast Healthcare Interoperability Resources) is the current standard for healthcare data exchange, enabling structured clinical data sharing between systems.

Question 5

A healthcare organization is evaluating a mobile health (mHealth) app that will access patient ePHI. Under HIPAA, which consideration is MOST critical before deployment?

Accepted Answer

Whether the app vendor has signed a BAA and the app uses appropriate encryption and access controls

Answer

Before deploying any mHealth app that accesses ePHI, the vendor must execute a BAA and the app must implement appropriate safeguards including encryption and access controls.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Healthcare IT and Security Technologies