Select ALL safeguards from the course material that can protect electronic protected health information (ePHI) from unauthorized access or misuse.

### Why this is right - **A** is true: unique identifiers support accountability and traceability. - **B** is true: role-based controls limit access to job-related needs. - **C** is true: multifactor authentication adds a layer of protection against unauthorized use. - **D** is true: monitoring and logs help detect unusual activity and support prompt response. ### The concept Access protection works through complementary safeguards. Identifiers help attribute activity to an account. Role-based permissions limit what that account can reach. Multifactor authentication requires additional proof of identity beyond a single factor. Monitoring and logs record or examine activity so suspicious patterns can be investigated. Shared accounts undermine accountability because actions become harder to connect to an individual. ### The other options - **E. Shared accounts that prevent tracing activity**: shared accounts weaken individual accountability and make it harder to determine who accessed information. ### Terms - **Multifactor authentication**: a sign-in method that requires more than one kind of evidence to verify a user. - **Access log**: a record of access activity, such as which account used a system and when. ### Remember Use individual accounts, limited permissions, strong authentication, and activity records together.