HIPAA The HIPAA Security Rule 5

Question 1

A hospital's Security Officer wants to verify that ePHI received from a partner has not been corrupted in transit. Which Security Rule standard applies?

Accepted Answer

Integrity Controls within Transmission Security

Answer

Transmission Security includes an addressable implementation specification for integrity controls to ensure ePHI is not improperly modified during transmission.

Question 2

Which of the following is NOT a standard under the Administrative Safeguards of the HIPAA Security Rule?

Accepted Answer

Workstation Use

Answer

Workstation Use is a standard under Physical Safeguards, not Administrative Safeguards.

Question 3

A covered entity contracts with a software vendor to process claims containing ePHI. What must be in place before sharing ePHI with the vendor?

Accepted Answer

A Business Associate Agreement (BAA)

Answer

Before sharing ePHI with a business associate, the covered entity must have a signed Business Associate Agreement specifying permitted uses and security obligations.

Question 4

Under the HIPAA Security Rule, which of the following best describes 'ePHI'?

Accepted Answer

Individually identifiable health information created, received, maintained, or transmitted in electronic form

Answer

ePHI is individually identifiable health information that is created, received, maintained, or transmitted in any electronic format by a covered entity or business associate.

Question 5

Which Security Rule standard requires training programs to educate workforce members about potential threats to ePHI security?

Accepted Answer

Security Awareness and Training

Answer

Security Awareness and Training is an Administrative Safeguards standard requiring covered entities to train all workforce members on security policies and procedures.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The HIPAA Security Rule 5