CMAA Electronic Health Records and Health Information Technology 2

Question 1

Which type of access control ensures healthcare workers can only view EHR information relevant to their specific job duties?

Accepted Answer

Role-based access control (RBAC)

Answer

Universal access policy

Answer

Open network access

Answer

Shared login protocols

Question 2

What is an 'audit trail' in an EHR system?

Accepted Answer

A chronological log of all user activities and changes made within the system

Answer

A list of all medications prescribed to a patient

Answer

A summary report of patient diagnoses by provider

Answer

A billing report submitted to insurance companies

Question 3

Which of the following best describes a PHI breach in an EHR context?

Accepted Answer

Unauthorized access, use, or disclosure of patient health information

Answer

A scheduled system maintenance outage

Answer

A patient requesting and receiving copies of their own records

Answer

A provider reviewing records of their own assigned patients

Question 4

What should a medical administrative assistant do first upon suspecting an EHR security breach?

Accepted Answer

Immediately report it to the appropriate supervisor or IT security team

Answer

Attempt to fix the issue independently before notifying anyone

Answer

Monitor the situation and wait to see if it resolves on its own

Answer

Delete the affected files to prevent further exposure

Question 5

What is 'two-factor authentication' (2FA) in EHR security?

Accepted Answer

Using two separate forms of identification to verify a user's identity before granting access

Answer

Having two different supervisors approve each login session

Answer

Requiring a user to log in twice to confirm their identity

Answer

Mandating that both a physician and nurse approve access to patient records

Question 6

Which of the following is considered best practice for EHR password management?

Accepted Answer

Creating strong, unique passwords and updating them on a regular schedule

Answer

Using the same password across all healthcare systems for convenience

Answer

Sharing login credentials with a trusted colleague when unavailable

Answer

Writing passwords on a note kept near the workstation for quick reference

Question 7

What is the primary purpose of data backup procedures in an EHR system?

Accepted Answer

To ensure patient data can be recovered in the event of system failure or data loss

Answer

To archive records that are no longer needed into permanent storage

Answer

To provide insurance companies with duplicate copies of patient information

Answer

To convert electronic records back into paper format for long-term storage