HIO-201 Free Practice Test

Physical safeguards using media controls do not include procedures to:

1. A. Control access to tapes, floppies, and re-writeable CDs.
2. B. Track the access of record able media.
3. C. Dispose of storage devices.
4. D. Backup copies of health information.
5. E. Prohibit alteration of health information.

Correct Answer: E

The Security Rule requires that the covered entity identifies a security official who is responsible for the development and implementation of the policies and procedures. This is addressed under which security standard?:

1. A. Security Incident Procedures
2. B. Response and Reporting
3. C. Assigned Security Responsibility
4. D. Termination Procedures
5. E. Facility Access Controls

Correct Answer: C

The security standard that has the objective of implementing mechanisms to record and examine system activity is:

1. A. Access Control
2. B. Audit Controls
3. C. Authorization Controls
4. D. Data Authentication
5. E. Person or Entity Authentication

Correct Answer: B

The key objective of a contingency plan is that the entity must establish and implement policies and procedures to ensure the:

1. A. Creation and modification of health information during and after an emergency.
2. B. Integrity of health information during and after an emergency.
3. C. Accountability of health information during and after an emergency.
4. D. Vulnerability of health information during and after an emergency.
5. E. Non-repudiation of the entity.

Correct Answer: B

The objective of this HIPAA security standard is to implement policies and procedures to prevent, detect, contain, and correct security violations.

1. A. Security Incident Procedures
2. B. Assigned Security Responsibly
3. C. Security Management Process
4. D. Access Control
5. E. Facility Access Control

Correct Answer: C