NP Technology & Digital Applications 3 — Questions and Answers
Question 1: A nurse practitioner suspects a phishing email targeting the practice's EHR login credentials. What is the FIRST action to take?
- Click the link to verify if it is legitimate
- Report it to the IT/security team immediately without clicking any links (Correct answer)
- Delete it and take no further action
- Forward it to colleagues as a warning
Correct answer: Report it to the IT/security team immediately without clicking any links
Phishing emails should be immediately reported to IT security without interacting with links or attachments to prevent credential compromise and a potential HIPAA breach.
Question 2: Under HIPAA's Minimum Necessary Standard, when an NP accesses the EHR, which practice is MOST appropriate?
- Access all patient records to stay prepared for any question
- Access only the patient information needed to perform a specific, authorized task (Correct answer)
- Share login credentials with medical assistants to save time
- Download all records to a personal device for offline access
Correct answer: Access only the patient information needed to perform a specific, authorized task
The Minimum Necessary Standard requires limiting PHI access to only what is needed for the immediate, authorized purpose.
Question 3: A patient asks the NP to communicate exclusively via personal text message for all clinical matters. The BEST response is to:
- Agree, as patient preference always takes precedence
- Explain that unencrypted SMS is not HIPAA-compliant and direct the patient to the secure patient portal (Correct answer)
- Provide the NP's personal cell phone number for urgent matters only
- Refuse all electronic communication with this patient
Correct answer: Explain that unencrypted SMS is not HIPAA-compliant and direct the patient to the secure patient portal
Standard SMS is not encrypted and does not meet HIPAA security standards; patients should use the practice's secure, HIPAA-compliant messaging platform.
Question 4: Which type of clinical decision support tool would MOST directly help an NP reduce inappropriate antibiotic prescribing?
- A billing code autocomplete tool
- An antibiogram-integrated prescribing alert that flags when broad-spectrum antibiotics are ordered for likely viral infections (Correct answer)
- A scheduling optimization algorithm
- An automated patient satisfaction survey
Correct answer: An antibiogram-integrated prescribing alert that flags when broad-spectrum antibiotics are ordered for likely viral infections
Antibiogram-integrated CDSS alerts provide real-time local resistance data and evidence-based guidance to promote antibiotic stewardship at the point of prescribing.
Question 5: A remote patient monitoring (RPM) program transmits daily blood pressure readings from a hypertensive patient. Which workflow element is ESSENTIAL for program success and safety?
- Having the patient self-interpret all data trends
- Establishing predefined alert thresholds with a clear clinical response protocol when values are exceeded (Correct answer)
- Reviewing data only at the next scheduled office visit
- Storing readings in a consumer app without EHR integration
Correct answer: Establishing predefined alert thresholds with a clear clinical response protocol when values are exceeded
RPM programs require predefined thresholds and response protocols so that clinically significant readings trigger timely intervention rather than data accumulation without action.
Question 6: When documenting a telehealth visit in the EHR, which element is MOST important to include to support billing and compliance?
- The patient's internet service provider name
- The communication technology type used, patient's location, provider's location, and patient's consent for telehealth (Correct answer)
- The duration of hold time during technical difficulties
- The brand of the patient's device
Correct answer: The communication technology type used, patient's location, provider's location, and patient's consent for telehealth
Telehealth billing compliance requires documentation of the platform type, both parties' locations, and documented patient consent as payers and auditors require this information.
Question 7: An NP is reviewing a patient's wearable device data showing 14 consecutive nights of average sleep duration of 4.5 hours. Which action BEST integrates this digital health data into clinical care?
- Dismiss it as consumer-grade data not suitable for clinical decision-making
- Incorporate the data into the clinical assessment, discuss sleep hygiene, screen for underlying conditions, and document the findings (Correct answer)
- Prescribe a sedative-hypnotic based solely on the wearable data
- Ask the patient to stop using the device to reduce health anxiety
Correct answer: Incorporate the data into the clinical assessment, discuss sleep hygiene, screen for underlying conditions, and document the findings
Wearable data should be contextually integrated into clinical assessment, used to guide conversation and screening, and documented as part of the patient's health record.
NP Technology & Digital Applications 3
A nurse practitioner suspects a phishing email targeting the practice's EHR login credentials.
What is the FIRST action to take?