CCS Security Principles and Practices 3

Question 1

A coding specialist working remotely accesses patient records over public Wi-Fi without a VPN. This violates which HIPAA Security Rule requirement?

Accepted Answer

Transmission security safeguards for ePHI

Answer

Workforce training requirements

Answer

Physical safeguards for workstation use

Answer

Contingency plan requirements

Question 2

Which of the following represents a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Locked server rooms with key card access

Answer

Password complexity requirements

Answer

Automatic logoff from workstations after inactivity

Answer

Encryption of data at rest

Question 3

A patient requests an amendment to their medical record because they believe it contains an error. Under HIPAA, the covered entity must:

Accepted Answer

Accept or deny the request within 60 days, with a possible 30-day extension

Answer

Immediately make the requested change

Answer

Refer the patient to their physician and take no action

Answer

Deny all amendment requests to maintain record integrity

Question 4

Which type of malware specifically encrypts an organization's files and demands payment for the decryption key?

Accepted Answer

Ransomware

Answer

Spyware

Answer

Adware

Answer

Trojan horse

Question 5

A coder realizes she has been documenting under a colleague's login credentials for two weeks. This situation violates which core security principle?

Accepted Answer

Non-repudiation and individual accountability

Answer

Data redundancy

Answer

Data minimization

Answer

Role-based access control alignment

Question 6

Under the HIPAA Minimum Necessary Rule, which scenario is most appropriate?

Accepted Answer

A biller accesses only the claim-related diagnosis and procedure codes needed for billing

Answer

A coder accesses the full psychiatric notes to code a routine fracture repair

Answer

A receptionist views all lab results to verify patient identity

Answer

A physician reviews all records for every patient in the practice daily

Question 7

Which federal law specifically addresses the electronic exchange of health information and established nationwide standards for health data security?

Accepted Answer

HIPAA of 1996

Answer

HITECH Act

Answer

Sarbanes-Oxley Act

Answer

Gramm-Leach-Bliley Act