CHPS Certified in Healthcare Privacy and Security MCQ 5

Question 1

Under the HIPAA Privacy Rule, an individual's authorization for use or disclosure of PHI is NOT required for which of the following purposes?

Accepted Answer

Public health activities authorized by law

Answer

The Privacy Rule permits covered entities to disclose PHI without authorization for public health activities, such as reporting communicable diseases to public health authorities.

Question 2

A risk register entry shows a threat with high likelihood and high impact. According to standard risk management, the BEST initial response strategy is to:

Accepted Answer

Mitigate the risk by implementing controls

Answer

High-likelihood, high-impact risks should first be mitigated through security controls to reduce either the likelihood or the impact to an acceptable level.

Question 3

Which HIPAA-required document informs patients about how their PHI may be used and their privacy rights, and must be provided at first service delivery?

Accepted Answer

Notice of Privacy Practices (NPP)

Answer

The Notice of Privacy Practices must describe how PHI may be used and disclosed, individual rights, and covered entity duties, and must be provided to patients at first point of service.

Question 4

A healthcare organization uses a firewall, intrusion detection system, and antivirus software as layers of protection. This approach is known as:

Accepted Answer

Defense in depth

Answer

Defense in depth uses multiple, overlapping security controls so that if one layer fails, additional layers continue to protect ePHI from compromise.

Question 5

Under HIPAA, which of the following statements about the Right of Access is TRUE?

Accepted Answer

Covered entities may charge a reasonable cost-based fee for copies

Answer

Covered entities may charge a reasonable, cost-based fee for providing copies of PHI, covering labor, supplies, and postage, but may not profit from access requests.

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS - Certified in Healthcare Privacy and Security Practice Test

CHPS Certified in Healthcare Privacy and Security MCQ 5