Page | 1
HIMT 1200 8,9,10 2026 ACTUAL
QUESTIONS WITH VERIFIED
ANSWERS.
Which of the following would be the best tool to determine
whether or not access to ePHI was appropriate? - correct
answer-Audit trail
The HIPAA Security Rule requires which of the following to
achieve compliance? - correct answer-Protecting ePHI
Which computer virus stores and replicates itself? - correct
answer-Worm
__________ is the most common form of social engineering. -
correct answer-phishing
Which of the following are required components of a HIPAA-
compliant disaster plan? - correct answer-Data back-up, data
recovery, and emergency mode of operations
, Page | 2
The best mechanism to protect patient information during
transit is __________. - correct answer-Encryption
Which of the following is not a mechanism to control access to
PHI? - correct answer-Anti-virus software
If a healthcare facility sustains physical damage caused by a
tornado, the disaster recovery mechanism which provides the
greatest protection of the data is __________. - correct answer-
off-site data storage
Helpful University Health System has a laptop sharing program
which allows users to request laptop computers to use for
short-term projects. Many of the projects involve the use of
ePHI. When the laptops are returned to the office, they are
often immediately recirculated to another user in the system.
This is an example of a violation of which of the following
aspects of the security rule? - correct answer-Device and
media controls
Disabling the USB drive on a computer is an example of what
type of security? - correct answer-Workstation
HIMT 1200 8,9,10 2026 ACTUAL
QUESTIONS WITH VERIFIED
ANSWERS.
Which of the following would be the best tool to determine
whether or not access to ePHI was appropriate? - correct
answer-Audit trail
The HIPAA Security Rule requires which of the following to
achieve compliance? - correct answer-Protecting ePHI
Which computer virus stores and replicates itself? - correct
answer-Worm
__________ is the most common form of social engineering. -
correct answer-phishing
Which of the following are required components of a HIPAA-
compliant disaster plan? - correct answer-Data back-up, data
recovery, and emergency mode of operations
, Page | 2
The best mechanism to protect patient information during
transit is __________. - correct answer-Encryption
Which of the following is not a mechanism to control access to
PHI? - correct answer-Anti-virus software
If a healthcare facility sustains physical damage caused by a
tornado, the disaster recovery mechanism which provides the
greatest protection of the data is __________. - correct answer-
off-site data storage
Helpful University Health System has a laptop sharing program
which allows users to request laptop computers to use for
short-term projects. Many of the projects involve the use of
ePHI. When the laptops are returned to the office, they are
often immediately recirculated to another user in the system.
This is an example of a violation of which of the following
aspects of the security rule? - correct answer-Device and
media controls
Disabling the USB drive on a computer is an example of what
type of security? - correct answer-Workstation
