MHA Information Technology 2

Question 1

Which federal law specifically governs the privacy and security of individually identifiable health information maintained by covered entities?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) establishes the Privacy Rule and Security Rule governing protected health information (PHI).

Question 2

A hospital CIO wants to ensure patient data remains available during a ransomware attack. Which strategy provides the BEST protection?

Accepted Answer

Maintaining air-gapped offline backups

Answer

Air-gapped offline backups cannot be encrypted by ransomware since they are physically disconnected from the network.

Question 3

Which data exchange standard is the modern replacement for HL7 v2 and enables RESTful APIs for health data interoperability?

Accepted Answer

FHIR

Answer

HL7 FHIR (Fast Healthcare Interoperability Resources) uses RESTful APIs and JSON/XML formats for modern health data exchange.

Question 4

Under the HIPAA Security Rule, which of the following is classified as a physical safeguard?

Accepted Answer

Facility access controls

Answer

Physical safeguards under HIPAA include facility access controls, workstation use policies, and device and media controls.

Question 5

A health system is selecting a cloud vendor to store PHI. Which contractual requirement is MANDATORY under HIPAA?

Accepted Answer

Business Associate Agreement

Answer

A Business Associate Agreement (BAA) is legally required before a covered entity can share PHI with any vendor or business associate.

MHA - Master of Healthcare Administration Practice Test

MHA - Master of Healthcare Administration Practice Test

MHA Information Technology 2