Discuss ISC2 HCISPP Exam Topic 10 Question 14

Which of the following are some common features designed to protect confidentiality of health information contained in patient medical records?

ALocks on medical records rooms

BPasswords to access computerized records

CRules that prohibit employees from looking at records unless they have a need to know

DAll of the above

Suggested Answer: D

Get Premium HCISPP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Terrilyn 11 months ago

Wow, I didn't know there were so many layers to protect our info!

Annett 12 months ago

All of the above? Seems a bit excessive, don’t you think?

Pete 12 months ago

Agreed, but can we really trust everyone to follow those rules?

Launa 12 months ago

I think passwords are a must too.

France 1 year ago

Definitely locks on medical records rooms!

Danica 1 year ago

I vaguely remember a question that asked about different security measures, and I think "all of the above" might be the right choice here, but I’m not completely confident.

Stefania 1 year ago

I think passwords for computerized records are definitely a key part of protecting confidentiality, but I can't recall if they mentioned anything about physical locks in the practice questions.

Lazaro 1 year ago

I remember studying about the importance of locks on medical records rooms, but I'm not sure if that's the only feature we should consider.

Tatum 1 year ago

I feel like all of these options are important, especially the rules about employees needing to know. It seems like they all work together to protect patient information.

Erin 1 year ago

I've worked with IBM Cloud Pak before, so I'm pretty confident the answer is A. Role-based access control is a key requirement for monitoring APIs and data.

Chantay 1 year ago

This is a tricky one. I'll need to think through the trade-offs between performance and data protection.

Theola 1 year ago

Okay, let me see... The key is to use the server name and site name, not the full URL or default page. I think the answer is A.

Ligia 1 year ago

I feel like this might fall under "delivery," since the malicious attachment was sent to the user but not executed.

ISC2 HCISPP Exam - Topic 10 Question 14 Discussion