CTP Digital Privacy and Security 5

Question 1

A telehealth practice discovers that a former employee's access credentials were never deactivated after termination. This is a failure of which HIPAA safeguard category?

Accepted Answer

Administrative safeguards

Answer

Establishing and following workforce clearance procedures, including timely access termination, is an administrative safeguard requirement under HIPAA.

Question 2

Which of the following BEST describes 'data at rest' in a telehealth environment?

Accepted Answer

ePHI stored on servers, databases, or backup media when not actively in use

Answer

Data at rest refers to ePHI stored on any medium — servers, hard drives, or backups — that is not currently being transmitted.

Question 3

A telehealth provider conducts sessions from a home office where family members may overhear conversations. The MOST appropriate mitigation is:

Accepted Answer

Using a private, dedicated space with a door and conducting sessions with headphones

Answer

A private, closed space with headphones limits incidental disclosures to household members, satisfying HIPAA's reasonable safeguards requirement.

Question 4

What is the key difference between a HIPAA 'privacy' violation and a HIPAA 'security' violation?

Accepted Answer

Privacy relates to improper use or disclosure of PHI; security relates specifically to failures protecting ePHI

Answer

The Privacy Rule governs all PHI (any format), while the Security Rule specifically applies to electronic PHI (ePHI) and its technical, administrative, and physical protections.

Question 5

A patient in a telehealth session uses an unsecured public Wi-Fi network. Which risk does this PRIMARILY introduce?

Accepted Answer

Potential interception of session data by third parties on the same network

Answer

Public Wi-Fi networks lack encryption controls, making session data vulnerable to interception by other users on the same network.

(CTP) Certified Telehealth Practitioner Practice Test

(CTP) Certified Telehealth Practitioner Practice Test

CTP Digital Privacy and Security 5