HIPAA The HIPAA Security Rule 2

Question 1

Which of the following is an example of a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Facility access controls

Answer

Physical safeguards include facility access controls, workstation use policies, and device and media controls to protect physical access to ePHI.

Question 2

What is the primary purpose of a Risk Analysis under the HIPAA Security Rule?

Accepted Answer

To identify and assess vulnerabilities to ePHI confidentiality, integrity, and availability

Answer

A Risk Analysis identifies potential threats and vulnerabilities to ePHI so covered entities can implement appropriate safeguards.

Question 3

Under the HIPAA Security Rule, which standard requires covered entities to have policies for responding to a security incident?

Accepted Answer

Security Incident Procedures

Answer

The Security Incident Procedures standard requires covered entities to identify, respond to, mitigate, and document security incidents involving ePHI.

Question 4

A hospital uses an automatic logoff feature that locks workstations after 10 minutes of inactivity. This is an example of which type of safeguard?

Accepted Answer

Technical safeguard

Answer

Automatic logoff is a technical safeguard that prevents unauthorized access to ePHI on idle workstations.

Question 5

Which of the following best describes an 'addressable' implementation specification under the Security Rule?

Accepted Answer

It must be implemented, or a documented alternative must be adopted if reasonable and appropriate

Answer

Addressable specifications require covered entities to assess whether implementation is reasonable and appropriate, and to document their decision either way.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The HIPAA Security Rule 2