CMAA Electronic Health Records and Health Information Technology 2

Question 1

Which type of access control ensures healthcare workers can only view EHR information relevant to their specific job duties?

Accepted Answer

Role-based access control (RBAC)

Answer

Role-based access control (RBAC) restricts EHR access based on a user's defined role, ensuring staff can only view information necessary for their job responsibilities.

Question 2

What is an 'audit trail' in an EHR system?

Accepted Answer

A chronological log of all user activities and changes made within the system

Answer

An audit trail is a chronological, tamper-evident record of user logins, data access, and all changes made within an EHR, used to monitor compliance and detect unauthorized access.

Question 3

Which of the following best describes a PHI breach in an EHR context?

Accepted Answer

Unauthorized access, use, or disclosure of patient health information

Answer

A PHI breach occurs when protected health information is accessed, used, or disclosed in a manner not permitted under HIPAA, potentially compromising patient privacy.

Question 4

What should a medical administrative assistant do first upon suspecting an EHR security breach?

Accepted Answer

Immediately report it to the appropriate supervisor or IT security team

Answer

Suspected security breaches must be reported immediately to a supervisor or IT security team so that the incident can be properly investigated and contained per HIPAA breach notification rules.

Question 5

What is 'two-factor authentication' (2FA) in EHR security?

Accepted Answer

Using two separate forms of identification to verify a user's identity before granting access

Answer

Two-factor authentication requires users to provide two distinct types of credentials (e.g., a password plus a code sent to a mobile device), significantly reducing unauthorized access risk.

CMAA - Certified Medical Administrative Assistant Practice Test

CMAA - Certified Medical Administrative Assistant Practice Test

CMAA Electronic Health Records and Health Information Technology 2