Question

question 2 of 5
which one (1) of the below five (5) options listed might tip you off to the fact that an email you received is phishing?

• a. an email from your supervisor inviting you to a meeting later in the week.
• b. when you place your mouse cursor over a link in the email, you notice that the address that the link points to doesnt belong to the organization that supposedly sent the email.
• c. the email says that some dire consequence will occur if you dont click on a link in the email or open an attachment.
• d. the email contains an attachment claiming to be from a shipping company like fedex or ups, even though you didnt order anything.
• e. the email is from the irs and tells you that youre being sued for back taxes.

a. b. c. & d.
b. c. d. & e.
a. b. d. & e.
question 3 of 5
which of the following statements is false?
medical information in charts, such as test results, must be secure and protected.
medical information should not be discussed in elevators, cafeterias or other public places.
medical information stored on computers does not need to be secured or protected because computers are password protected.
medical information contained in email and faxes should always be protected.
question 4 of 5
which of the following best describes the types of patient and business information found in the emory healthcare computer system that is considered confidential?

Explanation:

Question 2 of 5

• Option A: A meeting invitation from a supervisor is a normal work - related email, not a phishing sign.
• Option B: A link pointing to a non - organizational address is a phishing red flag (malicious links).
• Option C: Threatening consequences to get you to click/attach is a phishing tactic (social engineering).
• Option D: Unsolicited shipping attachments are common in phishing (malicious attachments).
• Option E: IRS - related tax - sue emails are often phishing (impersonation of official entities). So B, C, D, E are phishing signs.

• Medical information in charts (test results) must be secure (HIPAA compliance), so the first statement is true.
• Discussing medical info in public places violates privacy, so the second statement is true.
• Medical info on computers still needs security (e.g., encryption, access controls), not just password protection. So the third statement is false.
• Email and fax medical info need protection (HIPAA), so the fourth statement is true.

Answer:

B, C, D, & E.

Question 3 of 5