#1
What does PHI stand for in the context of healthcare information?
Personal Health Insurance
Protected Health Information
Public Health Initiative
Patient Health Inquiry
#2
Which of the following is NOT a common threat to healthcare information security?
Malware
Social Engineering
Physical Security Measures
Ransomware
#3
What is the purpose of a firewall in healthcare information security?
To encrypt data transmissions
To detect and prevent unauthorized access to the network
To store and manage sensitive information
To provide physical security for servers
#4
Which of the following is an example of a technical safeguard for protecting healthcare information?
Employee training programs
Password policies
Secure messaging systems
Visitor logs
#5
What is the purpose of access controls in healthcare information security?
To limit physical access to healthcare facilities
To regulate access to electronic health records and systems
To monitor patient vitals
To schedule appointments
#6
What does HIPAA stand for?
Healthcare Information Privacy and Protection Act
Health Insurance Portability and Accountability Act
Health Information Protection and Privacy Act
Healthcare Information Protection and Assurance Act
#7
Which encryption algorithm is commonly used to secure healthcare data?
#8
What is the primary purpose of a risk assessment in healthcare information security?
To identify potential vulnerabilities and threats
To implement encryption protocols
To train employees on security best practices
To monitor network traffic
#9
Which regulatory body oversees healthcare information security compliance in the United States?
Centers for Disease Control and Prevention (CDC)
Food and Drug Administration (FDA)
Office for Civil Rights (OCR)
Federal Trade Commission (FTC)
#10
What is the purpose of encryption in healthcare information security?
To secure data during transmission and storage
To monitor network traffic
To train employees on security best practices
To manage access controls
#11
What is the principle of least privilege in the context of healthcare information security?
Giving users only the permissions necessary to perform their job functions
Providing all users with maximum access privileges
Restricting access to only the most critical data
Allowing unrestricted access to all users
#12
What is the role of a Chief Information Security Officer (CISO) in healthcare organizations?
To ensure compliance with HIPAA regulations
To manage the organization's overall cybersecurity strategy
To provide medical diagnosis and treatment
To handle administrative tasks related to patient care
#13
Which of the following is an example of a security incident in healthcare information management?
Routine system maintenance
An unauthorized individual accessing patient records
A scheduled data backup
Routine software updates
#14
What is the role of a Business Associate Agreement (BAA) in healthcare information security?
To ensure compliance with HIPAA regulations
To regulate healthcare billing practices
To provide medical treatment
To manage access controls
#15
What is the purpose of penetration testing in healthcare information security?
To assess the effectiveness of security controls by simulating real-world attacks
To manage patient appointments
To diagnose medical conditions
To encrypt data transmissions