HIO-201 Exam Training Practice Tests (HIPAA Certified HIPAA Professional)]

Question 1

Once a year, a team at ABC Hospital reviews environmental and operational changes that may have had an impact on the security of electronic PHI. This is an example of:

A. Evaluation B. Security Management Process C. Transmission Security D. Audit Controls E. Integrity

Correct Answer: A

Question 2

Information in this transaction is generated by the payer's adjudication system:

A. Eligibility (2701271) B. Functional Acknowledgment (997) C. Premium Payment 2O) D. Remittance Advice 35) E. Unsolicited Claim Status (277)

Correct Answer: D

Question 3

Which
of the following
is NOT
a correct statement
regarding HIPAA requirements?

A. A covered entity must
reasonably
safeguard
PHI from
any intentional
or unintentional use or disclosure that is in violation of the regulations. B. A covered entity must change its
policies and
procedures
to comply with HIPAA regulations, standards, and implementation specifications. C. A covered entity must provide a process for individuals to make complaints concerning privacy issues. D. A covered entity must document all complaints received regarding privacy issues. E. The Privacy Rule requires that the covered entity has a documented security policy.

Correct Answer: E

Question 4

This security rule standard requires policies and procedures for authorizing access to electronic protected health information that are consistent with its required implementation specifications- which
are Isolating Health Care Clearinghouse Function, Access Authorization, and Access Establishment and Modification

A. Workforce Security B. Security Incident Procedures C. Access Control D. Security Management Process E. information Access Management

Correct Answer: E

Question 5

The Privacy Rule gives patients the following right

A. Request an amendment to their medical record. B. See an accounting of disclosures for which authorization was given. C. Access to the psychotherapy notes. D. Receive a digital certificate. E. The use of a smart card for accessing their records.

Correct Answer: A

Question 6

Which HIPAA Title is fueling initiatives within organizations to address health care priorities in the areas of transactions, privacy, and security'?

A. Title V. B. Title III. C. Title M D. Title I. E. Title II

Correct Answer: E

Question 7

A provider is in compliance with the Privacy Rule. She has a signed Notice of Privacy Practices from her patient. To provide treatment, the doctor needs to consult with an independent provider who has no relationship with the patient To comp with the Privacy Rule the doctor MUST:

A. Obtain the patients
signature
on the second providers Notice of Privacy Practices. B. Do nothing more - the Notice of Privacy Practices covers treatment activities. C. Obtain a signed authorization from the patient to cover the disclosure. D. Establish a business partner relationship with the other provider. E. Make a copy of the signed Notice available to the other provider

Correct Answer: B

Question 8

One implementation specification of the Security Management Process is:

A. Encryption and Decryption B. Authorization and/or Supervision C. Termination Procedures D. Risk Analysis E. Contingency Operations

Correct Answer: D

Question 9

Select the best example of a business associate (if they had access to PHI).

A. Hospital employees B. CEO of the covered entity C. Accountants D. The covered entity's billing service department E. A covered entity's internal IT department

Correct Answer: C

Question 10

The scope of the Privacy Rule includes:

A. Oral disclosure of PHI. B. Disclosure of non-identifiable demographics. C. All Employers. D. The Washington Publishing Company E. The prevention of use of de-identified information.

Correct Answer: A

Question 11

A doctor is sending a patient's lab work to a lab That is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient, In order to use or disclose PHI, the lab MUST.

A. Verify that the doctor's Notice of Privacy Practices has not expired. B. Obtain a specific authorization from the patient. C. Do nothing more - the activity is covered by the doctor's Notice of Privacy Practices, D. Obtain a specific authorization from the doctor. E. Request that the patient sign the lab's Notice of Privacy Practices

Correct Answer: C

Question 12

Which of the following is not one of the HIPAA Titles?:

A. Title I: Health Care Insurance Access, Portability, and Renewability. B. Title II: Administrative Simplification. C. Title Ill: Tax-related Health Provisions. D. Title IX: Employer sponsored group health plans. E. Title V: Revenue Offsets.

Correct Answer: D

Question 13

The transaction number
assigned to the
Health Care Claim Payment/Advice transaction is:

A. 270 B. 834 C. 837 D. 276 E. 835

Correct Answer: E

HIPAA Certified HIPAA Professional - HIO-201 Exam Practice Test