ANCC NURSING INFORMATICS
CERTIFICATION REVIEW QUESTIONS
WITH ANSWERS
HIPPA monly mapplies mto morganizations mthat mhave melectronic mhealth mrecords. m
True
False m- mcorrect manswers m-False
The mInformatics mnurse mis minvolved mwith mmeasure mto mprotect mthe msecurity mand
mconfidentiality mof mpatient mdata mbecause: m
a. mit mis ma mjoint mcommission mmandate
b. mit mis mregulated mby mHIPPA mlegislation
c. mthe mmajor mcause mof msecurity mbreaches mis mhuman merror
,d. mboth mB mand mC mare mcorrect m- mcorrect manswers m-d. mIt mis mregulated mby
mHIPPA mLegislation mand mThe mMajor mcause mof msecurity mbreeches mis mhuman
merror.
Controls mto mprotect mdata mprivacy mand mintegrity mare mboth mlogical mand:
a. mphysical
b. manalytical
c. mtheoretical
d. mpsychological m- mcorrect manswers m-b. manalytical
Which mof mthe mfollowing mis mnot ma mmechanism mfor mprotecting mthe msecurity mof
mhealth mdata:
a. mAutomatic msign-offs
b. mA mStrong mPassword
c. mHaving mone mpassword mper mnursing munit
d. mFirewalls m- mcorrect manswers m-C. mHaving mone mpassword mper mnursing munit.
An maudit mtrail mis m: m
a. ma mlog mof mwhich mproject mmeetings mand mevents mhave mbeen mcompleted
b. man melectronic mtool mthat mcan mtrack msystem maccess mby mindividual muser mwho
mviewed ma mspecific mclient mrecord.
c. ma mproactive mtool mto mmonitor mwho mwill mbe musing ma msystem mand mmodifying
mdata.
d. mused mprimarily mas ma mdata mintegrity mtool m- mcorrect manswers m-b. man
melectronic mtool mthat mcan mtrack msystem maccess mby mindividual muser mwho
mviewed ma mspecific mclient mrecord.
Data mcan mbe mrepresented mby mall mEXCEPT:
a. mtext
b. maudio
c. mtransmission mwaves
d. mvideo m- mcorrect manswers m-a. mtext
Things mto mconsider mrelated mto mdisaster mplanning minclude:
a. mshould mhave monly m1 mdatabase mto mmake mit measier mto mrecover
b. mall mdata mshould mbe mstored monsite mso mit mis maccessible
c. mmust mhave ma msolid mcommunication mplan mduring mdisaster mand mrecovery.
d. man massociation mor mgroup mthat mshows muniformity m- mcorrect manswers m-C.
mMust mhave ma msolid mcommunication mplan mduring mdisaster mand mrecover.
Some mexamples mof mphysical msecurity mfor mhealthcare mdata mare mfences, mwalls,
mlocks, msafes, mvaults, marmed mguards, msensors, malarms. m
True
False m- mcorrect manswers m-TRUE
One mway mto mtrack mthe mactivity mthat mis moccurring min ma msystem mis:
,a. ma mGANTT mchart
b. man maudit mtrail
c. ma mdata mbackup
d. mbiometrics m- mcorrect manswers m-b. man maudit mtrail
PHI mstands mfor m:
a. mphysician mhospital minterchange
b. mpassword mhint mindicator
c. mpotential mhardware mincursion
d. mprotected mhealth minformation m- mcorrect manswers m-d. mProtected mHealth
mInformation
If mthe minformatics mnurse mis mconcerned mthat ma mcomputer msystem mmay mnot
mfunction mwell mduring mpeak mtimes mof maccess mthe mtype mof mtesting mneeded mis:
a. mFunctional mTesting
b. mSystem mIntegrated mtesting
c. mBlack mbox mtesting
d. mLoad mvolume mtesting m- mcorrect manswers m-Load mVolume mTesting
What mis mLoad mVolume mTesting? m- mcorrect manswers m-Load/volume mtesting mis
ma mnon-functional mtesting mfor mreliability mthat massesses mthe mability mof mthe
msystem mto mfunction munder mvarious mloads, msuch mas mat mpeak mtimes mwhen
mmultiple musers min mmultiple mdepartments mare maccessing mthe msystem. mThe
mpurpose mof mload/volume mtesting mis mto mdetermine mthe mmaximum mload
mcapacity mand mto midentify mthe mload mat mwhich mproblems mbegin mto moccur.
mTesting mis mdone mat mboth mthe msafe mworking mload m(SWL) mand mabove mthe
mSWL.
In mpreparation mfor mthe mworkflow mredesign mnecessitated mfor mimplementation mof
man mEHR, mthe mfirst mstep mshould mbe mto m
a. mAssess mthe mEHR mrequirments
b. mConduct msurveys mabout mthe mworkflow
c. mAssess mcompatibility mwith mthe mEHR
d. mMap mthe mcurrent mworkflow m- mcorrect manswers m-map mthe mcurrent mworkflow
Which mresource mfor mevidence-based mresearch mis mprovided mby mthe mNational
mLibrary mof mMedicine?
a. mBMJ mPublishing
b. mCINAHL
c. mPubMed
d. mWorld mView mon mEvidence mbased- mnursing m- mcorrect manswers m-PubMed mis
ma mresource mfor mevidence-based mresearch mthat mis mprovided mby mthe mNational
mLibrary mof mMedicine, mwhich mwas mdeveloped mby mthe mNational mCenter mfor
mBiotechnology mInformation m(NCBI). mPubMed mprovides maccess mto mnumerous
mdatabases mwith m24 mmillion mcitations mfrom mMEDLINE m(the mNational mLibrary mof
mMedicine's mbibliographic mdatabase mwith mreferences mto mlife msciences mand
, mbiomedical msciences), mlife mscience mjournals, mand melectronic mbooks mwith mlinks
mto mfull mtext mwhen mit mis mavailable.
When mconsidering mtransitioning mto mcloud mstorage mand massessing mvendors, mthe
mmost mcritical massessment mrelates mto:
a. mregulatory mcompliance
b. mmonitoring mmechanisms
c. mcost manalysis
d. minteroperability m- mcorrect manswers m-The mmost mcritical massessment mrelates
mto mcompliance mwith mregulatory mrequirements mbecause mif mthe mvendor mcannot
mverify mthat mthe mcompany mmeets mHIPAA mrequirements mand msatisfies mthe
mCode mof mFederal mRegulations mTitle m21, mPart m11 m(which mprovides mregulations
mregarding melectronic mrecords mand melectronic msignatures), mthen msecurity mof
mpatient mdata mmay mbe minadequate. mOther mimportant mconsiderations minclude
mcost manalysis m(including mcost mof mimplementation mand mongoing mcosts),
mmonitoring mmechanisms, mand minteroperability.
When mutilizing ma mprioritization mmatrix mto mprioritize mactivities mas ma mproject
mmanager, mthe minformatics mnurse mmust mfirst mestablish:
a. mrating mscale mand mcategories
b. mcriteria mand mtimeframe
c. mcriteria mand mrating mscale
d. mrating mscale mand mtimeframe m- mcorrect manswers m-the minformatics mnurse
mmust mfirst mestablish mcriteria mand ma mrating mscale. mThe mcriteria mincludes mthose
mfactors mthat mare mutilized mto mdetermine mhow mimportant meach mproject mis; mfor
mexample, ma mproject mmandated mby mregulations mis mmore mimportant mthan ma
mproject mthat mmay mimprove mcustomer msatisfaction. mA mrating mscale mfor meach
mproject mshould mbe mestablished mwith mnumeric mvalues m(such mas m1 mto m10)
mused mto mdemonstrate mhow meffective mthe mproject mis min mmeeting mthe mcriteria.
mA mtypical mprioritization mmatrix mmay mhave mup mto ma mdozen mcriteria.
An madvantage mof man midentity mand maccess mmanagement m(IAM) msystem mis mthat
mthe mIAM msystem:
a. mprovides mHIPAA-required mencryption mfor mPHI
b. msatisfies mthe mCode mof mFederal mRegulations mTitle m21, mPart m11
c. mmeets mHIPAA's mSecurity mRule mrequirements mregarding maccess mto mPHI
d. mmeets mHIPAA's mPrivacy mRule mrequirements mregarding midentification m-
mcorrect manswers m-An madvantage mof man midentity mand maccess mmanagement
m(IAM) msystem mis mthat mthe mIAM msystem mmeets mHIPAA's mSecurity mRule
mrequirements mregarding maccess mto mPHI mthrough midentity mmanagement. mAn
mIAM msystem mprovides, mcaptures, mupdates, mand mrecords muser mIDs mand
mprovides mappropriate maccess mprivileges, mpreventing m"privilege mcreep," mwhich
mincreases mrisks mto msecurity. mThe mIAM msystem mshould mprovide mauthentication
m(single msign-in mand msession mmanagement), mauthorization m(based mon mroles,
mrules, mand mattributes), muser mmanagement m(provisioning mand mpassword
mmanagement), mand ma mcentral mdirectory.
CERTIFICATION REVIEW QUESTIONS
WITH ANSWERS
HIPPA monly mapplies mto morganizations mthat mhave melectronic mhealth mrecords. m
True
False m- mcorrect manswers m-False
The mInformatics mnurse mis minvolved mwith mmeasure mto mprotect mthe msecurity mand
mconfidentiality mof mpatient mdata mbecause: m
a. mit mis ma mjoint mcommission mmandate
b. mit mis mregulated mby mHIPPA mlegislation
c. mthe mmajor mcause mof msecurity mbreaches mis mhuman merror
,d. mboth mB mand mC mare mcorrect m- mcorrect manswers m-d. mIt mis mregulated mby
mHIPPA mLegislation mand mThe mMajor mcause mof msecurity mbreeches mis mhuman
merror.
Controls mto mprotect mdata mprivacy mand mintegrity mare mboth mlogical mand:
a. mphysical
b. manalytical
c. mtheoretical
d. mpsychological m- mcorrect manswers m-b. manalytical
Which mof mthe mfollowing mis mnot ma mmechanism mfor mprotecting mthe msecurity mof
mhealth mdata:
a. mAutomatic msign-offs
b. mA mStrong mPassword
c. mHaving mone mpassword mper mnursing munit
d. mFirewalls m- mcorrect manswers m-C. mHaving mone mpassword mper mnursing munit.
An maudit mtrail mis m: m
a. ma mlog mof mwhich mproject mmeetings mand mevents mhave mbeen mcompleted
b. man melectronic mtool mthat mcan mtrack msystem maccess mby mindividual muser mwho
mviewed ma mspecific mclient mrecord.
c. ma mproactive mtool mto mmonitor mwho mwill mbe musing ma msystem mand mmodifying
mdata.
d. mused mprimarily mas ma mdata mintegrity mtool m- mcorrect manswers m-b. man
melectronic mtool mthat mcan mtrack msystem maccess mby mindividual muser mwho
mviewed ma mspecific mclient mrecord.
Data mcan mbe mrepresented mby mall mEXCEPT:
a. mtext
b. maudio
c. mtransmission mwaves
d. mvideo m- mcorrect manswers m-a. mtext
Things mto mconsider mrelated mto mdisaster mplanning minclude:
a. mshould mhave monly m1 mdatabase mto mmake mit measier mto mrecover
b. mall mdata mshould mbe mstored monsite mso mit mis maccessible
c. mmust mhave ma msolid mcommunication mplan mduring mdisaster mand mrecovery.
d. man massociation mor mgroup mthat mshows muniformity m- mcorrect manswers m-C.
mMust mhave ma msolid mcommunication mplan mduring mdisaster mand mrecover.
Some mexamples mof mphysical msecurity mfor mhealthcare mdata mare mfences, mwalls,
mlocks, msafes, mvaults, marmed mguards, msensors, malarms. m
True
False m- mcorrect manswers m-TRUE
One mway mto mtrack mthe mactivity mthat mis moccurring min ma msystem mis:
,a. ma mGANTT mchart
b. man maudit mtrail
c. ma mdata mbackup
d. mbiometrics m- mcorrect manswers m-b. man maudit mtrail
PHI mstands mfor m:
a. mphysician mhospital minterchange
b. mpassword mhint mindicator
c. mpotential mhardware mincursion
d. mprotected mhealth minformation m- mcorrect manswers m-d. mProtected mHealth
mInformation
If mthe minformatics mnurse mis mconcerned mthat ma mcomputer msystem mmay mnot
mfunction mwell mduring mpeak mtimes mof maccess mthe mtype mof mtesting mneeded mis:
a. mFunctional mTesting
b. mSystem mIntegrated mtesting
c. mBlack mbox mtesting
d. mLoad mvolume mtesting m- mcorrect manswers m-Load mVolume mTesting
What mis mLoad mVolume mTesting? m- mcorrect manswers m-Load/volume mtesting mis
ma mnon-functional mtesting mfor mreliability mthat massesses mthe mability mof mthe
msystem mto mfunction munder mvarious mloads, msuch mas mat mpeak mtimes mwhen
mmultiple musers min mmultiple mdepartments mare maccessing mthe msystem. mThe
mpurpose mof mload/volume mtesting mis mto mdetermine mthe mmaximum mload
mcapacity mand mto midentify mthe mload mat mwhich mproblems mbegin mto moccur.
mTesting mis mdone mat mboth mthe msafe mworking mload m(SWL) mand mabove mthe
mSWL.
In mpreparation mfor mthe mworkflow mredesign mnecessitated mfor mimplementation mof
man mEHR, mthe mfirst mstep mshould mbe mto m
a. mAssess mthe mEHR mrequirments
b. mConduct msurveys mabout mthe mworkflow
c. mAssess mcompatibility mwith mthe mEHR
d. mMap mthe mcurrent mworkflow m- mcorrect manswers m-map mthe mcurrent mworkflow
Which mresource mfor mevidence-based mresearch mis mprovided mby mthe mNational
mLibrary mof mMedicine?
a. mBMJ mPublishing
b. mCINAHL
c. mPubMed
d. mWorld mView mon mEvidence mbased- mnursing m- mcorrect manswers m-PubMed mis
ma mresource mfor mevidence-based mresearch mthat mis mprovided mby mthe mNational
mLibrary mof mMedicine, mwhich mwas mdeveloped mby mthe mNational mCenter mfor
mBiotechnology mInformation m(NCBI). mPubMed mprovides maccess mto mnumerous
mdatabases mwith m24 mmillion mcitations mfrom mMEDLINE m(the mNational mLibrary mof
mMedicine's mbibliographic mdatabase mwith mreferences mto mlife msciences mand
, mbiomedical msciences), mlife mscience mjournals, mand melectronic mbooks mwith mlinks
mto mfull mtext mwhen mit mis mavailable.
When mconsidering mtransitioning mto mcloud mstorage mand massessing mvendors, mthe
mmost mcritical massessment mrelates mto:
a. mregulatory mcompliance
b. mmonitoring mmechanisms
c. mcost manalysis
d. minteroperability m- mcorrect manswers m-The mmost mcritical massessment mrelates
mto mcompliance mwith mregulatory mrequirements mbecause mif mthe mvendor mcannot
mverify mthat mthe mcompany mmeets mHIPAA mrequirements mand msatisfies mthe
mCode mof mFederal mRegulations mTitle m21, mPart m11 m(which mprovides mregulations
mregarding melectronic mrecords mand melectronic msignatures), mthen msecurity mof
mpatient mdata mmay mbe minadequate. mOther mimportant mconsiderations minclude
mcost manalysis m(including mcost mof mimplementation mand mongoing mcosts),
mmonitoring mmechanisms, mand minteroperability.
When mutilizing ma mprioritization mmatrix mto mprioritize mactivities mas ma mproject
mmanager, mthe minformatics mnurse mmust mfirst mestablish:
a. mrating mscale mand mcategories
b. mcriteria mand mtimeframe
c. mcriteria mand mrating mscale
d. mrating mscale mand mtimeframe m- mcorrect manswers m-the minformatics mnurse
mmust mfirst mestablish mcriteria mand ma mrating mscale. mThe mcriteria mincludes mthose
mfactors mthat mare mutilized mto mdetermine mhow mimportant meach mproject mis; mfor
mexample, ma mproject mmandated mby mregulations mis mmore mimportant mthan ma
mproject mthat mmay mimprove mcustomer msatisfaction. mA mrating mscale mfor meach
mproject mshould mbe mestablished mwith mnumeric mvalues m(such mas m1 mto m10)
mused mto mdemonstrate mhow meffective mthe mproject mis min mmeeting mthe mcriteria.
mA mtypical mprioritization mmatrix mmay mhave mup mto ma mdozen mcriteria.
An madvantage mof man midentity mand maccess mmanagement m(IAM) msystem mis mthat
mthe mIAM msystem:
a. mprovides mHIPAA-required mencryption mfor mPHI
b. msatisfies mthe mCode mof mFederal mRegulations mTitle m21, mPart m11
c. mmeets mHIPAA's mSecurity mRule mrequirements mregarding maccess mto mPHI
d. mmeets mHIPAA's mPrivacy mRule mrequirements mregarding midentification m-
mcorrect manswers m-An madvantage mof man midentity mand maccess mmanagement
m(IAM) msystem mis mthat mthe mIAM msystem mmeets mHIPAA's mSecurity mRule
mrequirements mregarding maccess mto mPHI mthrough midentity mmanagement. mAn
mIAM msystem mprovides, mcaptures, mupdates, mand mrecords muser mIDs mand
mprovides mappropriate maccess mprivileges, mpreventing m"privilege mcreep," mwhich
mincreases mrisks mto msecurity. mThe mIAM msystem mshould mprovide mauthentication
m(single msign-in mand msession mmanagement), mauthorization m(based mon mroles,
mrules, mand mattributes), muser mmanagement m(provisioning mand mpassword
mmanagement), mand ma mcentral mdirectory.