Epic Skills Assessment Information Security & HIPAA Compliance 3

Question 1

Which of the following is an administrative safeguard under the HIPAA Security Rule?

Accepted Answer

Conducting regular workforce security training and awareness programs

Answer

Workforce security training is an administrative safeguard, as it involves policies, procedures, and workforce management rather than physical or technical controls.

Question 2

A patient requests that their doctor not share their mental health records with their employer. Under HIPAA, the covered entity must:

Accepted Answer

Honor the restriction request for disclosures the patient pays for out of pocket

Answer

Under HIPAA, covered entities must honor a patient's request to restrict disclosure of PHI to a health plan for services paid entirely out of pocket.

Question 3

When a user logs into Epic, the system requires both a password and a one-time code sent to their mobile device. This security mechanism is called:

Accepted Answer

Multi-factor authentication (MFA)

Answer

Multi-factor authentication requires two or more verification factors (something you know + something you have), significantly reducing the risk of unauthorized access.

Question 4

De-identification of PHI under HIPAA's Safe Harbor method requires removing how many specific identifiers?

Accepted Answer

18

Answer

HIPAA's Safe Harbor de-identification method requires removing 18 specific types of identifiers (such as name, dates, ZIP codes, and device identifiers) to render data non-identifiable.

Question 5

An employee notices a colleague printing large volumes of patient records and taking them home. The MOST appropriate first action is to:

Accepted Answer

Report the suspicious activity to the privacy or compliance officer

Answer

Suspicious activity involving PHI should be reported immediately to the privacy or compliance officer, who has the authority and tools to investigate properly.

Epic Skills Assessment Practice Test

Epic Skills Assessment Practice Test

Epic Skills Assessment Information Security & HIPAA Compliance 3