HIPAA HIO-301 Exam - Topic 1 Question 40 Discussion

Actual exam question for HIPAA's HIO-301 exam

Question #: 40
Topic #: 1

Dr. Alice needs to send patient Bob a prescription electronically. Dr. Alice wants to send the message such that Bob can be sure that the sender of the prescription was in fact Dr. Alice. Dr. Alice decides to encrypt the message as well as include her digital signature. What is the content that Dr. Alice must ''sign'' to generate the digital signature?

ADr. Alice ''signs'' the message digest that was created from the original message (prescription)

BDr. Alice signs the digital certificate

CDr. Alice ''signs'' the original message (prescription)

DDr. Alice ''signs'' the message with her Kerberos ticket

EDr. Alice ''signs'' the original message with Bob's public key

Show Suggested Answer

Suggested Answer: D

by Kristel at Jan 08, 2023, 01:42 PM

Limited Time Offer

25%

Off

Get Premium HIO-301 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arthur

4 months ago

I thought it was with Bob's public key!

upvoted 0 times

...

Muriel

4 months ago

Signing the digital certificate sounds off to me.

upvoted 0 times

...

Cecilia

4 months ago

Wait, are we sure it's not the original message?

upvoted 0 times

...

Alison

4 months ago

Totally agree, it's all about the digest!

upvoted 0 times

...

Miles

5 months ago

She signs the message digest, right?

upvoted 0 times

...

Nan

5 months ago

I’m confused about the digital certificate option. I thought that was more about identity verification rather than signing the message itself.

upvoted 0 times

...

Franklyn

5 months ago

I feel like the message digest is the way to go. We did a similar question where we had to identify what gets signed for authenticity.

upvoted 0 times

...

Hyun

5 months ago

I’m not entirely sure, but I remember something about signing the original message directly. That seems like it could be an option too.

upvoted 0 times

...

Billy

5 months ago

I think Dr. Alice needs to sign the message digest, right? It’s like what we practiced in class about ensuring integrity.

upvoted 0 times

...

Agustin

5 months ago

The activity explorer might give some useful insights, but I don't think that's the right tool for identifying specific document types like resumes. I'd go with the pre-trained classifiers.

upvoted 0 times

...

Lorrie

5 months ago

Okay, I've got this. A forecasting method that responds slowly would be best for a demand pattern with a major seasonal component, since it needs to smooth out those regular fluctuations.

upvoted 0 times

...

Davida

5 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover a range of potential issues, so I'll need to think it through carefully before selecting an answer.

upvoted 0 times

...

Lisbeth

10 months ago

I bet Dr. Alice is regretting not taking that 'Practical Cryptography for Doctors' elective in med school right about now.

upvoted 0 times

...

Trinidad

10 months ago

E is just plain wrong. Using the recipient's (Bob's) public key to sign the message would make no sense at all. This is a digital signature, not a grocery list for Bob.

upvoted 0 times

...

Dominque

10 months ago

D is just silly. Kerberos tickets are for authentication, not signing documents. This exam is testing our crypto knowledge, not our fantasy fiction writing skills.

upvoted 0 times

Coleen

9 months ago

E) Dr. Alice 'signs' the original message with Bob's public key

upvoted 0 times

...

Callie

9 months ago

C) Dr. Alice 'signs' the original message (prescription)

upvoted 0 times

...

Patrick

9 months ago

A) Dr. Alice 'signs' the message digest that was created from the original message (prescription)

upvoted 0 times

...

Martin

10 months ago

Option C seems more logical, as she should sign the original message (prescription) itself, not the digest. That's how digital signatures work, right?

upvoted 0 times