#1
1. What does HIPAA stand for in the context of healthcare privacy?
Health Information Privacy and Access Act
Healthcare Information and Privacy Protection Act
Health Insurance Portability and Accountability Act
Hospital Information and Patient Privacy Act
#2
2. Which of the following is an example of sensitive healthcare information?
Patient's gender
Patient's date of birth
Patient's room number
Patient's preferred hospital
#3
10. In healthcare, what does 'PHI' stand for?
Personal Health Insurance
Protected Health Information
Public Health Initiative
Patient Health Identification
#4
15. What is the purpose of 'audit trails' in healthcare information systems?
To record and track user activities for security monitoring
To schedule regular hospital audits
To organize patient medical records
To manage the hospital's financial accounts
#5
20. Which organization is responsible for developing and maintaining standards for the electronic exchange of healthcare information?
CMS - Centers for Medicare & Medicaid Services
ONC - Office of the National Coordinator for Health Information Technology
WHO - World Health Organization
FDA - Food and Drug Administration
#6
25. Which of the following is an example of a 'man-in-the-middle' attack in healthcare data transmission?
Malware infection through email
Intercepting and altering data during transmission
Unauthorized access to patient records
Data loss due to hardware failure
#7
3. What is the primary goal of encryption in healthcare data security?
To hide data from authorized users
To ensure data integrity
To secure data during transmission or storage
To speed up data processing
#8
4. Which government agency in the United States is responsible for enforcing HIPAA regulations?
FDA - Food and Drug Administration
CDC - Centers for Disease Control and Prevention
OCR - Office for Civil Rights
NIH - National Institutes of Health
#9
6. What is the purpose of a 'firewall' in the context of healthcare IT security?
To protect against physical fires in data centers
To filter and monitor network traffic for security purposes
To provide emergency response services
To regulate room temperatures in server rooms
#10
7. Which of the following is an example of a 'social engineering' attack in healthcare?
Malware infection through a phishing email
Physical theft of a computer
Securing a network with a strong password
Upgrading antivirus software
#11
11. What is the role of a 'Security Risk Assessment' in healthcare organizations?
To identify potential risks and vulnerabilities in the security infrastructure
To schedule emergency drills for healthcare staff
To assess the nutritional risks of patients
To evaluate the efficiency of medical treatments
#12
12. What is the significance of 'data minimization' in healthcare data management?
Reducing the size of healthcare facilities
Limiting the collection and storage of unnecessary patient data
Increasing the data transfer speed in healthcare networks
Maximizing the usage of patient data for research
#13
5. In the context of healthcare cybersecurity, what is a 'zero-day' vulnerability?
A vulnerability that has been present for zero days
A vulnerability that has been exploited for zero days
A newly discovered and unpatched security flaw
A security flaw with zero impact on the system
#14
8. What role does a 'Data Loss Prevention (DLP)' system play in healthcare data security?
Detecting and preventing unauthorized access to healthcare facilities
Monitoring and controlling the transfer of sensitive data
Ensuring physical security of healthcare records
Regulating employee work hours
#15
9. What is 'two-factor authentication' in the context of healthcare access control?
Using two different passwords for authentication
Providing access to two different healthcare facilities
Verifying identity with two separate authentication methods
Allowing access only during two specific time periods
#16
13. Which of the following is an example of a 'biometric' authentication method in healthcare?
Username and password
Retina scan
Smart card access
Security questions
#17
14. How does 'role-based access control' contribute to healthcare information security?
By limiting access based on the user's role in the organization
By providing unlimited access to all healthcare employees
By randomly assigning access permissions
By restricting access only to senior management
#18
18. What is the purpose of a 'Business Associate Agreement' in healthcare privacy?
To establish a new healthcare business
To define the relationship between covered entities and their business associates
To regulate employee benefits
To manage financial transactions