HIPAA The HIPAA Security Rule 2

Question 1

Which of the following is an example of a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Facility access controls

Answer

Automatic logoff after inactivity

Answer

Audit logs of ePHI access

Answer

Encryption of data in transit

Question 2

What is the primary purpose of a Risk Analysis under the HIPAA Security Rule?

Accepted Answer

To identify and assess vulnerabilities to ePHI confidentiality, integrity, and availability

Answer

To create a disaster recovery plan

Answer

To train employees on HIPAA policies

Answer

To document all system users with ePHI access

Question 3

Under the HIPAA Security Rule, which standard requires covered entities to have policies for responding to a security incident?

Accepted Answer

Security Incident Procedures

Answer

Contingency Plan

Answer

Audit Controls

Answer

Workforce Security

Question 4

A hospital uses an automatic logoff feature that locks workstations after 10 minutes of inactivity. This is an example of which type of safeguard?

Accepted Answer

Technical safeguard

Answer

Physical safeguard

Answer

Administrative safeguard

Answer

Organizational safeguard

Question 5

Which of the following best describes an 'addressable' implementation specification under the Security Rule?

Accepted Answer

It must be implemented, or a documented alternative must be adopted if reasonable and appropriate

Answer

It must be implemented exactly as written with no flexibility

Answer

It is optional and can be skipped without justification

Answer

It applies only to business associates, not covered entities

Question 6

What type of safeguard includes policies and procedures for creating and maintaining retrievable exact copies of ePHI?

Accepted Answer

Administrative safeguard — Contingency Plan

Answer

Technical safeguard — Integrity

Answer

Physical safeguard — Device and Media Controls

Answer

Technical safeguard — Data Backup Plan

Question 7

Which entity is directly required to comply with the HIPAA Security Rule?

Accepted Answer

Covered entities and their business associates

Answer

Any vendor that sells software to hospitals

Answer

Patients who access their own ePHI

Answer

Health IT developers funded by CMS