RHIT Practice Exam 1 Domain 2 - Access,
Disclosure, Privacy, and Security 37-60
Questions and Answers (100% Pass)
A tool that identifies when a user logs in and out, what actions he or she takes, and
more is called a(n): - ✔️✔️A. Audit Trail
B. Facility Access Control
C. Forensic scan
D. Security management plan
Answer: A
An audit trail is a record of system and application activity by users. It can track
when an employee has accessed the system, the actions taken, and how long the
employee has been logged into a system (Rinehart-Thompson 2016c, 271)
Which of the following statements is true regarding HIPAA security? - ✔️✔️A. All
institutions must implement the same security measures.
B. Institutions are allowed flexibility in the way they implement HIPAA standards.
C. All institutions must implement all HIPAA specifications
D. A security risk assessment must be performed every year
Answer: B
HIPAA allows a covered entity to adopt security protection measures that are
appropriate for its organization as long as they meet the minimum HIPAA security
standards. Security protections in a large medical facility will be more complex than
those implemented in a small group practice (Rinehart-Thompson 2016c, 271)
Access to health records based on protected health information within a healthcare
facility should be limited to employees who have a: - ✔️✔️A. Legitimate need for
access
The access controls standard requires implementation of technical procedures to
control or limit access to health information. The procedures would be executed
through some type of software program. This requirement ensures that individuals
are given authorization to access only the data they need to perform their respective
jobs (Rinehart-Thompson 2016c, 273)
The release of information function requires the HIM professional to have
knowledge of: - ✔️✔️A. Clinical coding principles
B. Database development
C. Federal and state confidentiality laws
D. Human resource management
Answer: C
Release of Information (ROI) is the process of providing PHI access to individuals or
entities that are deemed to be authorized to either receive or review it. Protecting
the security and privacy of patient information is one of a healthcare organization's
top priorities, and the HIM department is usually responsible for determining
appropriate access to and ROI from patient health records. Knowledge of state and
federal confidentiality laws is critical to the ROI function (Rinehart-Thompson
2016b, 243-245)
3
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller OliviaWest. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.49. You're not tied to anything after your purchase.
