HIPAA Technical & Physical Safeguards 2

Question 1

Under HIPAA's Physical Safeguard standards, what does 'workstation use' specification require covered entities to document?

Accepted Answer

Proper functions and physical attributes of workstations that can access ePHI

Answer

The hardware specifications of each workstation

Answer

The software installed on each workstation

Answer

The network connections used by each workstation

Question 2

Which HIPAA technical safeguard standard requires covered entities to implement controls ensuring only authorized users can access ePHI systems?

Accepted Answer

Access Control

Answer

Audit Controls

Answer

Integrity Controls

Answer

Transmission Security

Question 3

A hospital uses key cards to restrict access to server rooms containing ePHI. This is an example of which HIPAA physical safeguard?

Accepted Answer

Facility Access Controls

Answer

Workstation Security

Answer

Device and Media Controls

Answer

Contingency Operations

Question 4

What is the purpose of the 'automatic logoff' implementation specification under HIPAA's Access Control standard?

Accepted Answer

To terminate an electronic session after a predetermined period of inactivity

Answer

To enforce password complexity rules

Answer

To log all user access attempts

Answer

To encrypt data when a session ends

Question 5

Under HIPAA Device and Media Controls, what must covered entities do before reusing electronic media that previously stored ePHI?

Accepted Answer

Clear or purge the media so ePHI cannot be retrieved

Answer

Obtain patient consent for reuse

Answer

Physically destroy the media

Answer

Archive the data to a backup server

Question 6

Which technical safeguard implementation specification is specifically designed to detect unauthorized alterations of ePHI?

Accepted Answer

Integrity Controls

Answer

Encryption and Decryption

Answer

Automatic Logoff

Answer

Unique User Identification

Question 7

A clinic trains staff never to leave workstations displaying patient records unattended and to position screens away from public view. Which physical safeguard does this policy fulfill?

Accepted Answer

Workstation Use

Answer

Contingency Operations

Answer

Facility Access Controls

Answer

Accountability