Start practicing

Ethics & Law · single question

Which of the following BEST protects patient privacy under HIPAA security rules?

  1. Using single sign-on for all staff
  2. Changing passwords every 60 days
  3. Multi-factor authentication (MFA) for system access
  4. Sharing passwords only with trusted employees
Show answer and explanation

Correct answer: C. Multi-factor authentication (MFA) for system access

Multi-factor authentication is the strongest standard for protecting electronic health records under HIPAA.
  • A. Single sign-on alone does not satisfy HIPAA security requirements without additional measures including MFA.
  • B. Periodic password changes help but alone are insufficient — MFA provides a much stronger security layer.
  • C. CORRECT. Multi-factor authentication requires verification through two or more independent methods (e.g., password + phone code), significantly reducing unauthorized access risk and aligning with HIPAA security standards.
  • D. INCORRECT. Sharing passwords with anyone — even trusted staff — is a HIPAA violation. Each user must have unique credentials.

Practice Ethics & Law questions Ethics & Law study notes

More Ethics & Law practice questions