Free Practice Questions for HIPAA HIO-301 Exam

Question 1

Identify the implementation specification associated with the Facility Access Controls Standard:

AData Backup Plan

BSecurity Reminders

CTesting and Revision Procedure

DMaintenance Records

EIntegrity Controls

Correct Answer: D. Maintenance Records

Question 2

This is a standard within Physical Safeguards

AContingency Operations

BWorkstation Use

CSecurity Incident Management

DDisaster Recovery

EDisposal

Correct Answer: B. Workstation Use

Question 3

During your discussions with one of the clients, you need to explain the meaning of a Virtual Private Network. Select the best definition:

AA VPN enables a group of two or more computer systems or networks, such as between a hospital and a clinic, to communicate securely over a public network, such as the Internet.

BA VPN is used within the organization only and a firewall is needed to communicate with the external network.

CA VPN requires a private dedicated communication between the two end points.

DA VPN may exist between an individual machine and a private network but, never between a machine on a private network and a remote network.

EA VPN is a ''real'' private network as opposed to a ''virtual'' network.

Correct Answer: A. A VPN enables a group of two or more computer systems or networks, such as between a hospital and a clinic, to communicate securely over a public network, such as the Internet.

Question 4

Statement 1: A SSL session established between a client and a Web site ensure encryption of information transmitted over the channel.

Statement 2: A PRI can generate certificates for a VPN infrastructure

Statement 3: With a PKI, the SSL server certificate as well as the end user's client certificate can be generated.

AStatement 1 is TRUE, Statement 2 is TRUE and Statement 3 is TRUE

BStatement 1 is TRUE, Statement 2 is TRUE and Statement 3 is FALSE

CStatement 1 is TRUE, Statement 2 is FALSE and Statement 3 is TRUE

DStatement 1 is FALSE, Statement 2 is TRUE and Statement 3 is FALSE

EStatement 1 is TRUE, Statement 2 is FALSE and Statement 3 is FALSE

Correct Answer: A. Statement 1 is TRUE, Statement 2 is TRUE and Statement 3 is TRUE

Question 5

Which of the following is a specification for securing e-mail using public keys that comply with the X.509 standard?

ASNMP

BHTTP

CIPSec

DS/MIME

ESSL

Correct Answer: D. S/MIME

Question 6

The CTQ of a clearinghouse wants to implement a security mechanism that can alert the systems administrator about any hacker attempting to break into the electronic PHI processing server system. As a security advisor to the OTO, what mechanism would you recommend? Select the best answer.

ADeploying a VPN.

BDeploy SSL for all connections to the server.

CInstalling an IDS solution on the server.

DDeploying a PRI solution.

EInstalling a firewall to allow pass through traffic only to the allowed network address.

Correct Answer: C. Installing an IDS solution on the server.

Question 7

Digital certificates are used to bind:

AA public key to an individual or entity

BA private key to an individual or entity

CA session key to an individual or entity

DA public key to a private key

EA session key to a public key

Correct Answer: A. A public key to an individual or entity

Question 8

One of the three core principles of HIPAA security is:

AAudit

BConfidentiality

CPHI literacy

DIsolation

ESecurity Incident Response

Correct Answer: B. Confidentiality

Question 9

This implementation specification impacts workforce members who fail to comply with the security policies and procedures of a covered entity:

ASanction Policy

BChain of Trust

CSecurity Policy

DRisk Policy

EBusiness Associates Agreement

Correct Answer: A. Sanction Policy

Question 10

The objective of this implementation specification is to implement security measures sufficient to reduce vulnerabilities to a reasonable and appropriate level:

ASanction Policy

BTermination Procedures

CResponse and Reporting Procedures

DRisk Analysis

ERisk Management

Correct Answer: E. Risk Management