Question 1
Which of the following is an active knowledge system that uses two or more items of patient data to generate case-specific advice?
a) medical knowledge data base
b) electronic health record system
c) patient data research system
d) clinical decision support system

Question 2
Which of the following is used to ensure that the person accessing a system is, indeed, who they present themselves to be?
A) Authentication
B) User identification
C) Encryption
D) Authorization

Question 3
True or false: Procedure refreshers, training and reminders are a part of a clinical decision support system.
True
False

Question 4
Which of the following is one of the most common ways thieves steal corporate information?
A) stealing employee laptops while employees are traveling
B) breaking into the data center building
C) using employees' computers while they are away from their desks
D) picking up transmissions in unsecured wireless hot spots

Question 5
True or false: There is sufficient case law to establish liability in issues dealing with clinical decision support systems.
True
False

Question 6
Which of the following make up the security triad?
A) Confidentiality, Integrity, Accuracy
B) Integrity, Privacy, Accuracy
C) Confidentiality, Integrity, Availability
D) Privacy, Confidentiality, Integrity

Question 7
True or false: Under the HIPAA Privacy Rule, patient authorization is required for release of information for treatment, payment and operations.
True
False

Question 8
Which of the following is not true about firewalls?
A) They can be a hardware device.
B) They can be software.
C) They filter data packets based on a set of rules.
D) They only filter data packets coming into the network or system.

Question 9
Certified EHR systems have technical safeguards built in and no further configuration is required.
True
False

Question 10
True or False: There are no legal or regulatory barriers that affect clinical decision support systems, as they have recently been overcome.
True
False

Question 11
True or false: An Intrusion Detection System (IDS) does not add any additional security.
True
False

Question 12
Which of the following are core principles of medical ethics? (select all that apply)
a) respect for autonomy
b) beneficence
c) non-maleficence
d) justice

Question 13
When looking to secure information resources, organizations must balance the need for security with which of the following?
the cost of replacing the data if it is stolen
the potential damage to the company' reputation if the data is stolen
the users' need to effectively access and use these resources
the customers' expectation that their data will be protected

Question 14
Which of the following are supported by clinical decision support systems? (select all that apply)
a) clinical diagnosis and treatment plan processes
b) control of costs
c) clinical coding and documentation
d) assists with the details of managing clinical complexity

Question 15
Which of the following should be included in a good backup plan? (select all that apply)
A) a full inventory of all of the information that needs to be backed up
B) Regular backups of all data
C) Offsite storage of backup data sets
D) Test of data restoration

Question 16
Which of the following is the right to keep personal information secret?
a) confidentiality
b) privacy
c) security
d) protected health information

Question 17
Which of the following is the process of encoding data upon its transmission or storage so that only authorized individuals can read it?
A) Public key infrastructure
B) Encryption
C) Secret code
D) None of the above

Question 18
True or False: Paper medical records are much more secure than electronic records.
True
False

Question 19
Which of the following is described as the assurance that the information being accessed has not been altered and truly represents what is intended?
Correctness
Completeness
Integrity
Assurance

Question 20
Which of the following are requirements for a clinical decision support system? (select all that apply)
a) knowledge base
b) program for combining the knowledge with patient-specific information
c) a communication mechanism
d) a super computer capable of combining all the possible outcomes.