HIPAA Technical & Physical Safeguards 2

Question 1

Under HIPAA's Physical Safeguard standards, what does 'workstation use' specification require covered entities to document?

Accepted Answer

Proper functions and physical attributes of workstations that can access ePHI

Answer

The workstation use specification requires policies defining the proper functions, manner, and physical setting of workstations that access ePHI.

Question 2

Which HIPAA technical safeguard standard requires covered entities to implement controls ensuring only authorized users can access ePHI systems?

Accepted Answer

Access Control

Answer

The Access Control standard requires technical policies and procedures allowing only authorized persons or software programs to access ePHI.

Question 3

A hospital uses key cards to restrict access to server rooms containing ePHI. This is an example of which HIPAA physical safeguard?

Accepted Answer

Facility Access Controls

Answer

Facility Access Controls include physical measures like key cards that limit and validate access to facilities housing ePHI systems.

Question 4

What is the purpose of the 'automatic logoff' implementation specification under HIPAA's Access Control standard?

Accepted Answer

To terminate an electronic session after a predetermined period of inactivity

Answer

Automatic logoff terminates idle sessions to prevent unauthorized access when a workstation is left unattended.

Question 5

Under HIPAA Device and Media Controls, what must covered entities do before reusing electronic media that previously stored ePHI?

Accepted Answer

Clear or purge the media so ePHI cannot be retrieved

Answer

Before reuse, covered entities must clear (overwrite) or purge (degauss) media to ensure ePHI cannot be recovered.

HIPAA - Health Insurance Portability and Accountability Act Practice Test