{
  "module": "104.4",
  "title": "104.4 Office and Digital Skills",
  "pass_percent": 75,
  "pre_test": {
    "graded": false,
    "questions": [
      {
        "question": "Which email address should a CHW use to send a client update to a clinic?",
        "options": [
          "A personal Gmail account",
          "The agency work email account",
          "A family member's email",
          "Any account that is handy"
        ],
        "correct": 1,
        "explanation": "Client work belongs on secure work accounts, not personal ones."
      },
      {
        "question": "What should go in the Client column of a shared data tracker?",
        "options": [
          "The client's full name",
          "The client's address",
          "The client's ID number",
          "The client's diagnosis"
        ],
        "correct": 2,
        "explanation": "ID numbers protect privacy while still letting the team track contacts."
      },
      {
        "question": "CISA recommends passwords that are at least how long?",
        "options": [
          "16 characters",
          "6 characters",
          "8 characters",
          "4 numbers"
        ],
        "correct": 0,
        "explanation": "CISA advises at least 16 characters, or a passphrase of 5 to 7 unrelated words."
      },
      {
        "question": "What is multifactor authentication?",
        "options": [
          "Using the same password everywhere",
          "Writing passwords on a sticky note",
          "Letting a coworker log in for you",
          "A login that needs two or more proofs of identity"
        ],
        "correct": 3,
        "explanation": "MFA adds a second check, such as a code, so a stolen password is not enough."
      },
      {
        "question": "A coworker wants to paste a client's case note into an AI chat tool to fix the grammar. What should the CHW do?",
        "options": [
          "Help her paste it faster",
          "Remind her client data never goes into AI tools, and involve the supervisor",
          "Ignore it because it saves time",
          "Tell her to remove only the last name"
        ],
        "correct": 1,
        "explanation": "Client information must never be entered into AI tools; a possible exposure goes to the supervisor."
      },
      {
        "question": "A client has a video visit tomorrow and has never used the app. What should the CHW do first?",
        "options": [
          "Tell her to call the doctor and cancel",
          "Join the visit and answer medical questions for her",
          "Practice logging in with her before the visit",
          "Give her your personal cell number"
        ],
        "correct": 2,
        "explanation": "Testing the device and app ahead of time is a key telehealth prep step."
      },
      {
        "question": "Which is a common sign of a phishing message?",
        "options": [
          "It rushes you and asks you to sign in through a link",
          "It comes from your supervisor in person",
          "It is a calendar reminder you set",
          "It is a printed agency policy"
        ],
        "correct": 0,
        "explanation": "Urgency plus a request for login details is a classic phishing sign."
      },
      {
        "question": "What does the HIPAA idea of minimum necessary mean?",
        "options": [
          "Share as much as possible to be helpful",
          "Never write anything down",
          "Only doctors can see records",
          "Use or share only the information a task truly needs"
        ],
        "correct": 3,
        "explanation": "Minimum necessary limits health information to what the purpose requires."
      },
      {
        "question": "A CHW realizes an email with client details went to the wrong person. What should the CHW do?",
        "options": [
          "Wait and see if anyone notices",
          "Delete the sent email and say nothing",
          "Email the person and ask them to forget it",
          "Tell the supervisor right away and follow the breach policy"
        ],
        "correct": 3,
        "explanation": "Possible privacy breaches must be reported quickly under agency policy."
      },
      {
        "question": "A client misses video visits because he has no home internet. This is best described as:",
        "options": [
          "A sign he does not care about his health",
          "An upstream barrier we can help address with community assets",
          "Something the CHW cannot do anything about",
          "A reason to close his case"
        ],
        "correct": 1,
        "explanation": "Access to devices and internet is an upstream factor, and libraries and helpers are assets."
      }
    ]
  },
  "post_test": {
    "graded": true,
    "questions": [
      {
        "question": "A client misses video visits because he has no home internet. This is best described as:",
        "options": [
          "A sign he does not care about his health",
          "An upstream barrier we can help address with community assets",
          "Something the CHW cannot do anything about",
          "A reason to close his case"
        ],
        "correct": 1,
        "explanation": "Access to devices and internet is an upstream factor, and libraries and helpers are assets."
      },
      {
        "question": "What is multifactor authentication?",
        "options": [
          "Using the same password everywhere",
          "Writing passwords on a sticky note",
          "Letting a coworker log in for you",
          "A login that needs two or more proofs of identity"
        ],
        "correct": 3,
        "explanation": "MFA adds a second check, such as a code, so a stolen password is not enough."
      },
      {
        "question": "CISA recommends passwords that are at least how long?",
        "options": [
          "16 characters",
          "6 characters",
          "8 characters",
          "4 numbers"
        ],
        "correct": 0,
        "explanation": "CISA advises at least 16 characters, or a passphrase of 5 to 7 unrelated words."
      },
      {
        "question": "What does the HIPAA idea of minimum necessary mean?",
        "options": [
          "Share as much as possible to be helpful",
          "Never write anything down",
          "Only doctors can see records",
          "Use or share only the information a task truly needs"
        ],
        "correct": 3,
        "explanation": "Minimum necessary limits health information to what the purpose requires."
      },
      {
        "question": "What should go in the Client column of a shared data tracker?",
        "options": [
          "The client's full name",
          "The client's address",
          "The client's ID number",
          "The client's diagnosis"
        ],
        "correct": 2,
        "explanation": "ID numbers protect privacy while still letting the team track contacts."
      },
      {
        "question": "A coworker wants to paste a client's case note into an AI chat tool to fix the grammar. What should the CHW do?",
        "options": [
          "Help her paste it faster",
          "Remind her client data never goes into AI tools, and involve the supervisor",
          "Ignore it because it saves time",
          "Tell her to remove only the last name"
        ],
        "correct": 1,
        "explanation": "Client information must never be entered into AI tools; a possible exposure goes to the supervisor."
      },
      {
        "question": "A client has a video visit tomorrow and has never used the app. What should the CHW do first?",
        "options": [
          "Tell her to call the doctor and cancel",
          "Join the visit and answer medical questions for her",
          "Practice logging in with her before the visit",
          "Give her your personal cell number"
        ],
        "correct": 2,
        "explanation": "Testing the device and app ahead of time is a key telehealth prep step."
      },
      {
        "question": "Which email address should a CHW use to send a client update to a clinic?",
        "options": [
          "A personal Gmail account",
          "The agency work email account",
          "A family member's email",
          "Any account that is handy"
        ],
        "correct": 1,
        "explanation": "Client work belongs on secure work accounts, not personal ones."
      },
      {
        "question": "A CHW realizes an email with client details went to the wrong person. What should the CHW do?",
        "options": [
          "Wait and see if anyone notices",
          "Delete the sent email and say nothing",
          "Email the person and ask them to forget it",
          "Tell the supervisor right away and follow the breach policy"
        ],
        "correct": 3,
        "explanation": "Possible privacy breaches must be reported quickly under agency policy."
      },
      {
        "question": "Which is a common sign of a phishing message?",
        "options": [
          "It rushes you and asks you to sign in through a link",
          "It comes from your supervisor in person",
          "It is a calendar reminder you set",
          "It is a printed agency policy"
        ],
        "correct": 0,
        "explanation": "Urgency plus a request for login details is a classic phishing sign."
      }
    ]
  }
}