CHPS Certified in Healthcare Privacy and Security MCQ 4

Question 1

A hospital must report a breach affecting 600 individuals. In addition to notifying affected individuals, the covered entity must notify:

Accepted Answer

Prominent media outlets in the affected state and HHS

Answer

Breaches affecting more than 500 residents of a state require notification to prominent media outlets in that state and to HHS, in addition to individual notification.

Question 2

Which vulnerability scanning approach tests a system from the perspective of an unauthenticated external attacker without prior knowledge of internal architecture?

Accepted Answer

Black-box testing

Answer

Black-box testing simulates an external attacker who has no prior knowledge of the system's internal architecture, testing defenses as an outsider would encounter them.

Question 3

A healthcare organization's contingency plan includes procedures to restore ePHI from backups after a disaster. This is BEST described as which plan component?

Accepted Answer

Disaster Recovery Plan

Answer

The Disaster Recovery Plan specifically addresses procedures for restoring data and systems to operational status after a disaster, as required by the HIPAA Security Rule contingency plan standard.

Question 4

Which NIST publication provides a framework for improving critical infrastructure cybersecurity and is widely referenced in healthcare security programs?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST Cybersecurity Framework (CSF) organizes security activities into Identify, Protect, Detect, Respond, and Recover functions and is widely adopted in healthcare as a voluntary risk management framework.

Question 5

An employee emails unencrypted PHI to a personal email account 'just to work from home.' Under HIPAA, this is BEST characterized as:

Accepted Answer

A potential security incident requiring evaluation

Answer

Sending unencrypted PHI to an unauthorized external account constitutes a potential security incident that must be evaluated to determine whether a reportable breach occurred.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Certified in Healthcare Privacy and Security MCQ 4