CTP Digital Privacy and Security 4

Question 1

Which authentication method provides the STRONGEST security for telehealth provider portal logins?

Accepted Answer

Multi-factor authentication combining a password and a one-time code

Answer

Multi-factor authentication (MFA) significantly reduces unauthorized access risk by requiring two or more independent verification factors.

Question 2

A telehealth provider allows patients to send photos of wounds via SMS text message. What is the MAIN compliance concern with this practice?

Accepted Answer

Standard SMS is not encrypted and does not meet HIPAA security requirements for ePHI

Answer

Standard SMS messages are transmitted without encryption and lack the access controls required to protect ePHI under HIPAA.

Question 3

What does 'end-to-end encryption' mean in the context of a telehealth video platform?

Accepted Answer

The video data is encrypted on the sender's device and can only be decrypted by the intended recipient

Answer

End-to-end encryption ensures that only the communicating parties can decrypt the data, preventing even the service provider from accessing the content.

Question 4

A patient requests access to their telehealth visit recordings and clinical notes. Under HIPAA, the provider must generally respond within:

Accepted Answer

30 calendar days of receiving the request

Answer

HIPAA requires covered entities to act on a patient's request for access to their PHI within 30 calendar days, with one possible 30-day extension.

Question 5

Which of the following is an example of a 'technical safeguard' required under the HIPAA Security Rule?

Accepted Answer

Implementing automatic logoff for inactive telehealth platform sessions

Answer

Automatic logoff is a technical safeguard that terminates a session after a period of inactivity to prevent unauthorized access to ePHI.

(CTP) Certified Telehealth Practitioner Practice Test

(CTP) Certified Telehealth Practitioner Practice Test

CTP Digital Privacy and Security 4