Which of the following is NOT a goal of the HIPAA Security Rule?

Prevent all cybersecurity threats

Which of the following is an example of an acceptable method for data disposal?

Physically destroying the media

What is the main purpose of encryption under HIPAA?

To protect ePHI from unauthorized access

What is the purpose of workstation security under HIPAA?

To ensure that only authorized users can access ePHI

What is the purpose of audit controls in HIPAA?

To review unauthorized access attempts

Which access control method grants access based on users’ identity, role, location, and time of access?

Context-based access control (CBAC)

studbud

ADIS 6136 CH. 4

9 termsStudBud Administration

Imported from external platform

Flashcards9 cardsFPractice quizPHost liveL

Questions 9

Answers

1
Which of the following is NOT a goal of the HIPAA Security Rule?
Ensure workforce compliance
Ensure confidentiality, integrity, and availability of ePHI
Prevent all cybersecurity threats
Protect against unauthorized use or disclosure of ePHI
2
Which of the following is an example of an acceptable method for data disposal?
Storing old hard drives in a locked room
Physically destroying the media
Deleting files from a computer
Using Airdrop
3
What is the main purpose of encryption under HIPAA?
To prevent data loss in case of power failure
To store PHI in a compressed format
To speed up data transmission
To protect ePHI from unauthorized access
4
Which of the following is NOT one of the five categories of HIPAA Security Rule standards?
Technical safeguards
Physical safeguards
Administrative safeguards
Patient consent safeguards
5
What is the purpose of workstation security under HIPAA?
To monitor email usage
To ensure that only authorized users can access ePHI
To track patient records
To allow all users to access PHI freely
6
What is the purpose of audit controls in HIPAA?
To track patient satisfaction
To review unauthorized access attempts
To manage insurance claims
To limit staff access to ePHI
7
When was the HIPAA Security Rule compliance date for small health plans?
2009
2005
2003
2006
8
Which access control method grants access based on users’ identity, role, location, and time of access?
Context-based access control (CBAC)
Password-based access control (PBAC)
User-based access control (UBAC)
Role-based access control (RBAC)
9
What type of safeguard includes access control and validation procedures?
Technical safeguards
Physical safeguards
Organizational safeguards
Administrative safeguards

ADIS 6136 CH. 4 Flashcards | StudBud