CHIMA NCE EXAMINATION TEST UPDATED ACTUAL Exam
Questions and CORRECT Answers | Complete Certification
Review Guide | Grade A+
Question 1.
Project risks may pose a problem for e-health implementation. The 4 major threats
associated
a. project failure, scope compromise, timetable delay, cost overruns.
b. incompatible technology, security issues, quality issues, cost overruns.
c. project failure, quality issues, contractual issues, staff issues
d. stakeholder buy-in, score compromise, timetable delay, a budgetary insufficiency.
Correct Answer: a. project failure, scope compromise, timetable delay, cost
overruns.
Question 2.
What type of risk is the unauthorized disclosure of personal health information?
a. Security risk.
b. Business risk.
c. Privacy risk.
d. Safety risk.
Correct Answer: c. Privacy risk.
Question 3.
Which of the following would NOT be classified as an operational risk?
a. Human factors issues.
b. Political influence.
c. Business interruption.
d. Lack of skilled human resources
Correct Answer: d. Lack of skilled human resources
Question 4.
The three objectives associated with information security are:
a. privacy, security, confidentiality.
b. confidentiality, integrity, availability.
c. confidentiality, privacy, integrity.
d. integrity, data quality, privacy.
Correct Answer: b. confidentiality, integrity, availability.
Question 5.
Which of the following is concerned with ensuring that information is complete, accurate
and up to-date and that the information is not corrupted in any way?
,a. Confidentiality.
b. Integrity.
c. Availability.
d. Security.
Correct Answer: b. Integrity.
Question 6.
Which of the following is concerned with ensuring that personal health information is
available to authorized users when it is needed?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security.
Correct Answer: c. Availability.
• Which of the following is concerned with ensuring that personal health
information is protected from unauthorized access, use and disclosure?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security. -✓✓a. Confidentiality.
Question 7.
Which of the following is NOT a security risk?
a. Loss of Personal Health Information.
b. Corruption or unauthorized modification of PHI.
c. Loss of critical information and communication technologies (ICT) services.
d. Inability to meet service levels.
Correct Answer: d. Inability to meet service levels.
Question 8.
A virus attacks a hospital's information systems and permanently destroys some
Personal Health Information. What type of risk would this be categorized as?
a. Safety risk.
b. Privacy risk.
c. Security risk.
d. Integrity risk.
Correct Answer: c. Security risk.
Question 9.
A patient is denied access to their own personal health Information. Which risk category
would this event be classified under?
,a. Security risk.
b. Privacy risk.
c. Operational risk.
d. Business risk.
Correct Answer: b. Privacy risk.
Question 10.
A new medication administration system is implemented in a health care organization.
Unfortunately, the IT department did not involve front-line users in the testing of
possible systems before choosing and implementing one. The user interface of the new
system is not user friendly and many data entry errors are occurring related to patient
medications. What type of risk is this?
a. Safety risk.
b. Security risk.
c. Privacy risk.
d. Business risk.
Correct Answer: a. Safety risk.
Question 11.
Incompatible technology, obsolescence, inability to meet service levels and lack of
skilled human resources are e-health issues associated with what type of risk?
a. Project risks.
b. Business risks.
c. Operational risks.
d. Strategic risks.
Correct Answer: c. Operational risks.
• Which of the following is concerned with ensuring that personal health
information is available to authorized users when it is needed?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security. -✓✓c. Availability.
Question 12.
Which of the following is NOT a key component of the risk management process?
a. Establish the context.
b. Consult and communicate. c. Monitor and review.
d. Mitigate.
Correct Answer: d. Mitigate.
, Question 13.
Which of the following is part of the external context related to e-health solutions?
a. Political context.
b. Technical solution.
c. Information governance.
d. Organizational culture.
Correct Answer: a. Political context.
Question 14.
The extent to which an organ on can cope with changes driven by an e-health solution is
called:
a. information governance.
b. risk tolerance.
c. organization culture.
d. capacity for change.
Correct Answer: d. capacity for change.
Question 15.
What type of risk treatment would the purchase of insurance be categorized as?
a. Avoidance.
b. Acceptance.
c. Transfer.
d. Mitigation.
Correct Answer: c. Transfer.
Question 16.
Which of the following is usually the preferred approach to risk management?
a. Avoidance.
b. Acceptance.
c. Transfer.
d. Mitigation.
Correct Answer: d. Mitigation.
Question 17.
Sometimes, risks must simply be accepted. This statement is:
a. true, and there is nothing further an organization can do.
b. false. There is always a mitigation strategy available.
c. true, but contingency and monitoring plans must be put in place.
d. false. Organizations can at least avoid risks even if they can't mitigate them.
Correct Answer: c. true, but contingency and monitoring plans must be put in
place.
Questions and CORRECT Answers | Complete Certification
Review Guide | Grade A+
Question 1.
Project risks may pose a problem for e-health implementation. The 4 major threats
associated
a. project failure, scope compromise, timetable delay, cost overruns.
b. incompatible technology, security issues, quality issues, cost overruns.
c. project failure, quality issues, contractual issues, staff issues
d. stakeholder buy-in, score compromise, timetable delay, a budgetary insufficiency.
Correct Answer: a. project failure, scope compromise, timetable delay, cost
overruns.
Question 2.
What type of risk is the unauthorized disclosure of personal health information?
a. Security risk.
b. Business risk.
c. Privacy risk.
d. Safety risk.
Correct Answer: c. Privacy risk.
Question 3.
Which of the following would NOT be classified as an operational risk?
a. Human factors issues.
b. Political influence.
c. Business interruption.
d. Lack of skilled human resources
Correct Answer: d. Lack of skilled human resources
Question 4.
The three objectives associated with information security are:
a. privacy, security, confidentiality.
b. confidentiality, integrity, availability.
c. confidentiality, privacy, integrity.
d. integrity, data quality, privacy.
Correct Answer: b. confidentiality, integrity, availability.
Question 5.
Which of the following is concerned with ensuring that information is complete, accurate
and up to-date and that the information is not corrupted in any way?
,a. Confidentiality.
b. Integrity.
c. Availability.
d. Security.
Correct Answer: b. Integrity.
Question 6.
Which of the following is concerned with ensuring that personal health information is
available to authorized users when it is needed?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security.
Correct Answer: c. Availability.
• Which of the following is concerned with ensuring that personal health
information is protected from unauthorized access, use and disclosure?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security. -✓✓a. Confidentiality.
Question 7.
Which of the following is NOT a security risk?
a. Loss of Personal Health Information.
b. Corruption or unauthorized modification of PHI.
c. Loss of critical information and communication technologies (ICT) services.
d. Inability to meet service levels.
Correct Answer: d. Inability to meet service levels.
Question 8.
A virus attacks a hospital's information systems and permanently destroys some
Personal Health Information. What type of risk would this be categorized as?
a. Safety risk.
b. Privacy risk.
c. Security risk.
d. Integrity risk.
Correct Answer: c. Security risk.
Question 9.
A patient is denied access to their own personal health Information. Which risk category
would this event be classified under?
,a. Security risk.
b. Privacy risk.
c. Operational risk.
d. Business risk.
Correct Answer: b. Privacy risk.
Question 10.
A new medication administration system is implemented in a health care organization.
Unfortunately, the IT department did not involve front-line users in the testing of
possible systems before choosing and implementing one. The user interface of the new
system is not user friendly and many data entry errors are occurring related to patient
medications. What type of risk is this?
a. Safety risk.
b. Security risk.
c. Privacy risk.
d. Business risk.
Correct Answer: a. Safety risk.
Question 11.
Incompatible technology, obsolescence, inability to meet service levels and lack of
skilled human resources are e-health issues associated with what type of risk?
a. Project risks.
b. Business risks.
c. Operational risks.
d. Strategic risks.
Correct Answer: c. Operational risks.
• Which of the following is concerned with ensuring that personal health
information is available to authorized users when it is needed?
a. Confidentiality.
b. Integrity.
c. Availability.
d. Security. -✓✓c. Availability.
Question 12.
Which of the following is NOT a key component of the risk management process?
a. Establish the context.
b. Consult and communicate. c. Monitor and review.
d. Mitigate.
Correct Answer: d. Mitigate.
, Question 13.
Which of the following is part of the external context related to e-health solutions?
a. Political context.
b. Technical solution.
c. Information governance.
d. Organizational culture.
Correct Answer: a. Political context.
Question 14.
The extent to which an organ on can cope with changes driven by an e-health solution is
called:
a. information governance.
b. risk tolerance.
c. organization culture.
d. capacity for change.
Correct Answer: d. capacity for change.
Question 15.
What type of risk treatment would the purchase of insurance be categorized as?
a. Avoidance.
b. Acceptance.
c. Transfer.
d. Mitigation.
Correct Answer: c. Transfer.
Question 16.
Which of the following is usually the preferred approach to risk management?
a. Avoidance.
b. Acceptance.
c. Transfer.
d. Mitigation.
Correct Answer: d. Mitigation.
Question 17.
Sometimes, risks must simply be accepted. This statement is:
a. true, and there is nothing further an organization can do.
b. false. There is always a mitigation strategy available.
c. true, but contingency and monitoring plans must be put in place.
d. false. Organizations can at least avoid risks even if they can't mitigate them.
Correct Answer: c. true, but contingency and monitoring plans must be put in
place.
