CHPS HIPAA Security Rule Compliance 2

Question 1

Under the Technical Safeguards of the HIPAA Security Rule, which implementation specification for Access Control is designated as 'required'?

Accepted Answer

Unique user identification

Answer

Automatic logoff

Answer

Encryption and decryption

Answer

Emergency access procedure

Question 2

What is the purpose of the Audit Controls standard under the HIPAA Security Rule's Technical Safeguards?

Accepted Answer

To implement hardware, software, or procedural mechanisms that record and examine activity in information systems containing ePHI

Answer

To restrict access to ePHI based on user roles

Answer

To encrypt ePHI during transmission over open networks

Answer

To automatically terminate inactive sessions after a set period

Question 3

In the context of the HIPAA Security Rule, what does 'integrity' of ePHI mean?

Accepted Answer

ePHI has not been altered or destroyed in an unauthorized manner

Answer

ePHI is accessible to authorized users when needed

Answer

ePHI is protected from unauthorized disclosure

Answer

ePHI is backed up and recoverable after a disaster

Question 4

The HIPAA Security Rule's Transmission Security standard is designed to protect ePHI when it is:

Accepted Answer

Transmitted over electronic communications networks

Answer

Stored on portable devices such as laptops

Answer

Accessed by workforce members at workstations

Answer

Transferred between departments within the same facility

Question 5

Under the HIPAA Security Rule's Physical Safeguards, what does the Workstation Use standard require?

Accepted Answer

Policies and procedures specifying proper functions performed at workstations and the physical attributes of the surroundings of workstations with access to ePHI

Answer

Encryption of all data stored on workstations

Answer

Automatic screen locks after a period of inactivity

Answer

A formal check-in process for all users accessing workstations

Question 6

Which of the following best describes the purpose of a Business Associate Agreement (BAA) under the HIPAA Security Rule?

Accepted Answer

To contractually require business associates to implement appropriate safeguards to protect ePHI they create, receive, maintain, or transmit on behalf of a covered entity

Answer

To transfer legal liability for breaches from the covered entity to the business associate

Answer

To certify that a vendor has passed a HIPAA compliance audit

Answer

To authorize a business associate to disclose ePHI to other third parties

Question 7

The Contingency Plan standard under the HIPAA Security Rule's Administrative Safeguards requires which of the following implementation specifications as 'required' (not addressable)?

Accepted Answer

Both A and B

Answer

Data backup plan and disaster recovery plan

Answer

Emergency mode operation plan and testing and revision procedures

Answer

Applications and data criticality analysis