Practice Test GeeksHIPAA - Health Insurance Portability and Accountability Act Practice Test
← All HIPAA Flashcard Decks

Technical & Physical Safeguards Flashcards

7 cards from real HIPAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Technical & Physical Safeguards flashcards as text

  1. Under HIPAA's Physical Safeguard standards, what does 'workstation use' specification require covered entities to document?

    Answer: Proper functions and physical attributes of workstations that can access ePHI

    The workstation use specification requires policies defining the proper functions, manner, and physical setting of workstations that access ePHI.

  2. Which HIPAA technical safeguard standard requires covered entities to implement controls ensuring only authorized users can access ePHI systems?

    Answer: Access Control

    The Access Control standard requires technical policies and procedures allowing only authorized persons or software programs to access ePHI.

  3. A hospital uses key cards to restrict access to server rooms containing ePHI. This is an example of which HIPAA physical safeguard?

    Answer: Facility Access Controls

    Facility Access Controls include physical measures like key cards that limit and validate access to facilities housing ePHI systems.

  4. What is the purpose of the 'automatic logoff' implementation specification under HIPAA's Access Control standard?

    Answer: To terminate an electronic session after a predetermined period of inactivity

    Automatic logoff terminates idle sessions to prevent unauthorized access when a workstation is left unattended.

  5. Under HIPAA Device and Media Controls, what must covered entities do before reusing electronic media that previously stored ePHI?

    Answer: Clear or purge the media so ePHI cannot be retrieved

    Before reuse, covered entities must clear (overwrite) or purge (degauss) media to ensure ePHI cannot be recovered.

  6. Which technical safeguard implementation specification is specifically designed to detect unauthorized alterations of ePHI?

    Answer: Integrity Controls

    Integrity Controls use electronic mechanisms such as checksums or digital signatures to confirm that ePHI has not been altered or destroyed without authorization.

  7. A clinic trains staff never to leave workstations displaying patient records unattended and to position screens away from public view. Which physical safeguard does this policy fulfill?

    Answer: Workstation Use

    The Workstation Use specification requires policies covering the physical setting of workstations, including screen positioning and unattended-session procedures.