can be described as a virtualized data center inside the organization's firewall or a private space dedicated to the organization within the cloud provider's data center.

	A.	Private cloud
	B.	Public cloud
	C.	Hybrid cloud
	D.	Fusion cloud

Adoption of an EHR in the cloud is cost effective for a large urban hospital. It would be more cost-effective for a small physician practice to have a server-based EHR.

True

False

According to HIPAA and HITECH, providers should utilize certified EHR systems for exchanging ePHI.

True

False

The best tools to prevent Ransomware attacks is by using all of the following EXCEPT:

	A.	Staff education
	B.	Risk analysis
	C.	Encryption
	D.	Continuity planning

One of the legal considerations of cloud computing for an EHR is to ensure that the hospital has a Business Associate Agreement with the vendor.

True

False

Select the TRUE statement about mobile device security.

	A.	Mobile devices pose less of a security threat than stationary devices
	B.	Information on the device and accessible from the device are at risk
	C.	Passwords on mobile devices are not easily circumvented
	D.	The definition of mobile devices is limited to laptop computers

Compliance with the HIPAA Security Rule cannot help prevent introduction of malware (including ransomware).

True

False

When Congress passed the Cybersecurity Act of 2015 (CSA), it lead to the creation of the Health Care Industry Cybersecurity (HCIC) Task Force

True

False

Which of the following best describes cookies in a computer context:

	A.	Identify a user's computer to a website
	B.	Installed by information security experts to stop malicious incoming traffice
	C.	Something my Mom bakes for me
	D.	A type of virus

Ransomware:

	A.	Affects information but not system functionality
	B.	Consequences can be completely eliminated by data backup protocols
	C.	Cannot be a worm
	D.	Can be a virus