EHR Disaster Recovery & Data Backup 2

Question 1

What is the primary purpose of a Recovery Time Objective (RTO) in an EHR disaster recovery plan?

Accepted Answer

To define the maximum tolerable downtime before restoration must occur

Answer

RTO defines the maximum acceptable time that an EHR system can be offline before the downtime causes unacceptable harm to patient care or business operations.

Question 2

A hospital's EHR system experiences a ransomware attack that encrypts patient data. Which backup type would be MOST effective for rapid recovery with minimal data loss?

Accepted Answer

Continuous data protection (CDP) with off-site replication

Answer

Continuous data protection captures every change in near-real-time, minimizing data loss and enabling rapid recovery to a point just before the attack.

Question 3

Under HIPAA Security Rule, covered entities must test their contingency plans at what minimum frequency?

Accepted Answer

Periodically, as specified in their own policies

Answer

HIPAA requires covered entities to implement testing and revision procedures but allows organizations to define the specific frequency based on their risk assessment.

Question 4

What does the term 'hot site' refer to in EHR disaster recovery planning?

Accepted Answer

A backup data center with current data and systems ready for immediate failover

Answer

A hot site is a fully operational backup facility with replicated data and systems that can assume operations with minimal or no delay.

Question 5

Which backup strategy stores only the data that has changed since the last FULL backup?

Accepted Answer

Differential backup

Answer

A differential backup captures all changes since the last full backup, which means each differential grows larger but restoration requires only the last full plus the last differential.

(EHR) Electronic Health Records Program Certification Practice Test

(EHR) Electronic Health Records Program Certification Practice Test

EHR Disaster Recovery & Data Backup 2