HIIM 351 - Exam 3 Review

Malicious software that can destroy or disrupt an information system is:

Another term for a disaster recovery plan is a "crisis management plan".

Which approach to risk determination assigns monetary values to the likelihood and effect of a particular threat?

Which of the following is true about ransomware?

Use of one PC attack other PCs in the system, flooding the network with spam emails is an example of

Which describes processes and controls to be followed until operations are fully restored after an event?

Dr. C works remotely by utilizing a secure tunnel to access the hospital’s computer system. Dr. C is utilizing:

Which of the following restores critical services as quickly as possible after an event?

Malware that uses fake threats to trick users into malware-infested website or sharing of personal info is called

This term is used to describe the activities that threaten and organization through disruption, theft, and alteration

Attackers can compromise a mobile device user's personal information through an unsecure or weak Wi-Fi.

Which of the following characteristics describes a worm?

Wi-Fi enabled Medical devices are part of the Internet of Things (IoT)

Under HIPAA, risk analysis documentation is required to be retained:

Ransomware resembles scareware, but it is different because:

Hijacking of medical devices is also known as

Which of the following is considered to be a best practice measure for protecting text messaged information?

Cookies are a type of virus

Which of the following is true regarding a computer virus?

Small businesses are at lower risk for a security attack.

The Cybersecurity Act of 2015 resulted in:

A hospital’s network is flooded with traffic & becomes unusable for others to access. What has occurred is:

Text messaging and e-mails can also be considered methods of telemedicine.

Which of the following is the most constant threat to health information integrity?

Data backup cannot prevent ransomware from blocking a computer's functionality.

31. Personal Health Records (PHRs) are created by the patient

In risk analysis, which type of risk determination step assigns number values to the likelihood and effect of a threat?

Whaling is a type of spearphishing aimed at a organization's executive

According to HIPAA, an accurate and thorough assessment of the potential risks and vulnerabilities to ePHI is: