HCISPP Exam Training Practice Tests (ISC HealthCare Information Security and Privacy Practitioner)]

Question 1

The CQI approach of producing health care "report cards," specifically HEDIS is a tool to encourage health care consumers to choose high-quality caregivers, but often.

A. cost, not quality is the driving motivator for employers to choose health care plans for their employees B. these report cards are inaccurate C. HEDIS includes only a limited number of quality performance indicators D. None of the above

Correct Answer: A

Question 2

If a client requests a restriction for disclosure of a certain part of their PHI to a health plan, the health care provider is:

A. Required to agree to the requested restriction B. Required to agree only if the client specifies why he/she wants the restriction C. Required to agree to the requested restriction if the disclosure is for treatment or payment, is not required by law, and if the information is specifically related to a health care item or service that the client has paid for in full D. Required to agree only if the client specifies who he/she wants the restriction to apply to

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which of the following types of business continuity tests includes assessment of resilience to internal and external risks without endangering live operations?

A. Walkthrough B. Parallel C. Simulation D. White box

Correct Answer: B

Question 4

HIPPA results in

A. minor changes in most healthcare transaction and administrative information systems B. no changes in most healthcare transaction and minor changes in administrative information systems C. sweeping changes in most healthcare transaction and administrative information systems D. sweeping changed in some healthcare transaction and administrative information systems

Correct Answer: C

Question 5

During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.
What is the best approach for the CISO?
During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant.
What is the best approach for the CISO?

A. Notate the information and move on B. Document the system as high risk C. Perform a vulnerability assessment D. Perform a quantitative threat assessment

Correct Answer: C

Question 6

A gap analysis for the Transactions set refer to the practice of identifying the data content you currently have available

A. based on the statutory authorities report B. through your accounting software C. through competing unit medical software D. through your medical software

Correct Answer: D

Question 7

What kind of personally identifiable health information is protected by HIPAA privacy rule?

A. The spoken word B. Paper C. Electronic D. All of the above E. None of the above

Correct Answer: D

Question 8

As a result of the Dispersed Model of health care used in the U.S., the hospital structure resembles a diamond, with.

A. A small number of hospitals at the base, which provide highly super specialized referral services. B. The bulk of the hospitals in the middle, providing a wide range of secondary and tertiary services. C. The bulk of the hospitals in the middle, which lack specialized units. D. A small number of hospitals at the top, which lack specialized units.

Correct Answer: B

Question 9

The inclusion of network-model HMOs in the Health Maintenance Act of 1973 ensured.

A. the HMO movement would not create rapid change to the mode of health care delivery B. no economic risk among both physicians and HMOs C. All of the above. D. universal coverage

Correct Answer: A

Question 10

He discovered Penicillin.

A. Koch B. Flemming C. Your Mother

Correct Answer: B

Question 11

Part of Administrative Safeguards under HIPAA is Workforce Security measures. Which is NOT a key element of a Workforce Security Element?

A. Authorization and Supervision B. Termination Procedures C. Identification of barriers to client electronic Personal Health Information D. Clearance Procedures

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 12

Which of the following best describes the incentives associated with capitation?

A. A and B only B. It only pays for an in-person visit with a physician. C. Physicians have a higher incentive to sign up only healthy patients. D. Physicians have more flexibility to deliver effective and efficient services to patients.

Correct Answer: A

Question 13

Access to health care is measured by.

A. The number of times a person uses health care services. B. The number of physicians available to a person. C. The quality of health care services a person has. D. The type of insurance a person has.

Correct Answer: A

Question 14

For most privately insured Americans, health insurance is:

A. privately purchased B. financed by the government C. employer based D. none of the above

Correct Answer: C

Question 15

You work in the billing department of your agency and while processing claims, you notice the name of someone you know. Since you are curious, you decide to investigate and you pull their medical record and read it. Is this appropriate?

A. No B. Yes

Correct Answer: A

ISC HealthCare Information Security and Privacy Practitioner - HCISPP Exam Practice Test