CPHIMS CPHIMS Healthcare Privacy and Security 5

Question 1

Which federal law, in addition to HIPAA, directly impacts privacy of substance use disorder treatment records?

Accepted Answer

42 CFR Part 2

Answer

42 CFR Part 2 provides additional, stricter confidentiality protections for records of patients treated for substance use disorders at federally assisted programs, beyond HIPAA requirements.

Question 2

A healthcare IT professional implements two-factor authentication (2FA) for EHR access. Which security principle does this PRIMARILY support?

Accepted Answer

Authentication assurance

Answer

Two-factor authentication strengthens authentication assurance by requiring users to prove identity through two independent factors, reducing the risk of unauthorized access from stolen credentials.

Question 3

The HITECH Act strengthened HIPAA by:

Accepted Answer

Extending HIPAA Security Rule obligations directly to business associates and increasing penalties

Answer

The Health Information Technology for Economic and Clinical Health (HITECH) Act extended HIPAA Security Rule requirements directly to business associates and significantly increased civil and criminal penalties for violations.

Question 4

A hospital performs a vulnerability scan and discovers an unpatched operating system on a workstation accessing the EHR. What is the BEST immediate action?

Accepted Answer

Isolate the workstation from the network and apply the security patch promptly

Answer

Isolating the vulnerable workstation prevents potential exploitation while the patch is applied, balancing security risk management with minimal operational disruption.

Question 5

Which of the following is an example of an 'addressable' implementation specification under the HIPAA Security Rule?

Accepted Answer

Automatic logoff

Answer

Automatic logoff is an addressable implementation specification, meaning covered entities must assess whether it is a reasonable and appropriate safeguard given their environment and document their decision.

CPHIMS Exam Practice Test

CPHIMS Exam Practice Test

CPHIMS CPHIMS Healthcare Privacy and Security 5