Question 1

For an r2 assessment, HITRUST requires a Corrective Action Plan (CAP) when the Control Reference required for certification scored a 70 or less, and Implementation scores less than 100%.

Options :

A : True

B : False

Answer: A

Question 2

Who defines the scope of an assessment?

Options :

A : Client Management

B : The Assessor

C : HITRUST

Answer: A

Question 3

Management has asked you to scope out an assessment including your entire network. What are some examples you may see listed as a primary scoping component?

Options :

A : Hypervisor

B : Server

C : Oracle database

D : Smoke detectors

E : Network attached storage device

Answer: A,B,C,E

Question 4

The HITRUST CSF applies to covered information in all forms (words, numbers, pictures, sounds).

Options :

A : True

B : False

Answer: A

Question 5

David, a member of an external assessor organization, helped his client remediate a control gap. As part of the validation process, David can then review the remediation for appropriateness.

Options :

A : True

B : False

Answer: B