HIPAA Technical & Physical Safeguards 4

Question 1

Under HIPAA's Facility Access Controls standard, the 'maintenance records' specification requires covered entities to document:

Accepted Answer

Repairs and modifications to physical security components of a facility

Answer

Maintenance records capture repairs and modifications to physical security components — such as locks, doors, or alarms — that protect facilities housing ePHI.

Question 2

A covered entity uses badge readers, security cameras, and security guards to protect its data center. Together, these controls satisfy which HIPAA safeguard standard?

Accepted Answer

Facility Access Controls

Answer

Facility Access Controls include physical and procedural measures — such as badge readers, cameras, and guards — that limit access to facilities housing ePHI systems.

Question 3

Which HIPAA Technical Safeguard standard requires that covered entities implement hardware, software, or procedural mechanisms to record and examine activity in systems containing ePHI?

Accepted Answer

Audit Controls

Answer

Audit Controls require mechanisms to record and examine access and other activity in systems that create, maintain, or transmit ePHI.

Question 4

A hospital disposes of old hard drives by destroying them physically. This practice is required under which HIPAA specification?

Accepted Answer

Disposal — Device and Media Controls

Answer

The Disposal specification under Device and Media Controls requires that ePHI be removed from electronic media before disposal, through destruction or other approved methods.

Question 5

An organization allows employees to access ePHI through a VPN with TLS encryption. Which technical safeguard standard does this most directly satisfy?

Accepted Answer

Transmission Security

Answer

Transmission Security requires guarding ePHI from unauthorized access during electronic transmission; encrypted VPN tunnels satisfy this standard.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Technical & Physical Safeguards 4