Module 4 EHR Practice Quiz

An EHR specialist is preparing to enter patient information into the EHR. Which of the following actions should the EHR specialist take to maintain the security of protected health information (PHI)?

• Log off of the EHR system when not in use.

• Share login credentials with coworkers for convenience.

• Write passwords on sticky notes attached to the computer.

• Leave the computer unlocked when stepping away.

An EHR specialist is educating a newly hired staff member about safeguarding patient information in the EHR. Which of the following statements should the EHR specialist make?

• Biometric measurements are acceptable for individual identification for EHR system access.

• Sharing passwords with coworkers is allowed in emergencies.

• It is acceptable to leave patient records open on the screen when stepping away briefly.

• Using generic logins for multiple users is recommended for efficiency.

Which of the following parts of the EHR indicates if a health record documentation has been modified?

• User Activity Feed

• Patient Demographics

• Medication List

• Allergy Information

Which of the following behaviors should an EHR specialist identify as a threat to data security when transmitting electronic patient health information?

• Sending an unencrypted email to a pharmacy.

• Using a secure, encrypted messaging system.

• Verifying recipient identity before sending information.

• Storing data on a secure, password-protected server.

For which of the following reasons was the Security Standards Matrix created by the Centers for Medicare and Medicaid Services (CMS)?

• Ensuring that covered entities assess their compliance with the HIPAA Security Rule.

• To provide financial incentives for electronic health record adoption.

• To establish billing codes for telemedicine services.

• To regulate the pricing of prescription drugs.

In order to limit the use of, disclosure of, and request for protected health information (PHI), the HIPAA Privacy Rule requires covered entities to adhere to which of the following concepts?

• Minimum necessary

• Full disclosure

• Open access

• Maximum retention

An EHR specialist is working in a hospital setting. Which of the following personnel should have access to the financial data section of a patient's EHR in order to fulfill their responsibilities?

(a)  

An EHR specialist is reviewing EHR entries. The EHR specialist should identify that which of the following is included on The Joint Commission's official "do not use" list of abbreviations?

(a)  

An EHR specialist is assisting with an internal audit of patient EHRs. The EHR specialist should identify that SOF is an abbreviation for which of the following?

Which of the following penalties does Medicare impose when providers have not implemented certified EHR technology?