©PREP4EXAMS@2024[REAL EXAM DUMPS] Thursday, July 25, 2024 6:51 PM
RHIT Practice Exam 1 Domain 2 - Access,
Disclosure, Privacy, and Security 37-60
Questions and Answers (100% Pass)
A tool that identifies when a user logs in and out, what actions he or she takes, and
more is called a(n): - ✔️✔️A. Audit Trail
B. Facility Access Control
C. Forensic scan
D. Security management plan
Answer: A
An audit trail is a record of system and application activity by users. It can track
when an employee has accessed the system, the actions taken, and how long the
employee has been logged into a system (Rinehart-Thompson 2016c, 271)
Which of the following statements is true regarding HIPAA security? - ✔️✔️A. All
institutions must implement the same security measures.
1
, ©PREP4EXAMS@2024[REAL EXAM DUMPS] Thursday, July 25, 2024 6:51 PM
B. Institutions are allowed flexibility in the way they implement HIPAA standards.
C. All institutions must implement all HIPAA specifications
D. A security risk assessment must be performed every year
Answer: B
HIPAA allows a covered entity to adopt security protection measures that are
appropriate for its organization as long as they meet the minimum HIPAA security
standards. Security protections in a large medical facility will be more complex than
those implemented in a small group practice (Rinehart-Thompson 2016c, 271)
Access to health records based on protected health information within a healthcare
facility should be limited to employees who have a: - ✔️✔️A. Legitimate need for
access
B. Password to access the EHR
C. Report development program
D. Signed confidentiality agreement
Answer: A
2
, ©PREP4EXAMS@2024[REAL EXAM DUMPS] Thursday, July 25, 2024 6:51 PM
The access controls standard requires implementation of technical procedures to
control or limit access to health information. The procedures would be executed
through some type of software program. This requirement ensures that individuals
are given authorization to access only the data they need to perform their respective
jobs (Rinehart-Thompson 2016c, 273)
The release of information function requires the HIM professional to have
knowledge of: - ✔️✔️A. Clinical coding principles
B. Database development
C. Federal and state confidentiality laws
D. Human resource management
Answer: C
Release of Information (ROI) is the process of providing PHI access to individuals or
entities that are deemed to be authorized to either receive or review it. Protecting
the security and privacy of patient information is one of a healthcare organization's
top priorities, and the HIM department is usually responsible for determining
appropriate access to and ROI from patient health records. Knowledge of state and
federal confidentiality laws is critical to the ROI function (Rinehart-Thompson
2016b, 243-245)
3
RHIT Practice Exam 1 Domain 2 - Access,
Disclosure, Privacy, and Security 37-60
Questions and Answers (100% Pass)
A tool that identifies when a user logs in and out, what actions he or she takes, and
more is called a(n): - ✔️✔️A. Audit Trail
B. Facility Access Control
C. Forensic scan
D. Security management plan
Answer: A
An audit trail is a record of system and application activity by users. It can track
when an employee has accessed the system, the actions taken, and how long the
employee has been logged into a system (Rinehart-Thompson 2016c, 271)
Which of the following statements is true regarding HIPAA security? - ✔️✔️A. All
institutions must implement the same security measures.
1
, ©PREP4EXAMS@2024[REAL EXAM DUMPS] Thursday, July 25, 2024 6:51 PM
B. Institutions are allowed flexibility in the way they implement HIPAA standards.
C. All institutions must implement all HIPAA specifications
D. A security risk assessment must be performed every year
Answer: B
HIPAA allows a covered entity to adopt security protection measures that are
appropriate for its organization as long as they meet the minimum HIPAA security
standards. Security protections in a large medical facility will be more complex than
those implemented in a small group practice (Rinehart-Thompson 2016c, 271)
Access to health records based on protected health information within a healthcare
facility should be limited to employees who have a: - ✔️✔️A. Legitimate need for
access
B. Password to access the EHR
C. Report development program
D. Signed confidentiality agreement
Answer: A
2
, ©PREP4EXAMS@2024[REAL EXAM DUMPS] Thursday, July 25, 2024 6:51 PM
The access controls standard requires implementation of technical procedures to
control or limit access to health information. The procedures would be executed
through some type of software program. This requirement ensures that individuals
are given authorization to access only the data they need to perform their respective
jobs (Rinehart-Thompson 2016c, 273)
The release of information function requires the HIM professional to have
knowledge of: - ✔️✔️A. Clinical coding principles
B. Database development
C. Federal and state confidentiality laws
D. Human resource management
Answer: C
Release of Information (ROI) is the process of providing PHI access to individuals or
entities that are deemed to be authorized to either receive or review it. Protecting
the security and privacy of patient information is one of a healthcare organization's
top priorities, and the HIM department is usually responsible for determining
appropriate access to and ROI from patient health records. Knowledge of state and
federal confidentiality laws is critical to the ROI function (Rinehart-Thompson
2016b, 243-245)
3
