HIPAA HIPAA Certifications HIO-201 Questions & Answers

• Question 91:

  As part of their HIPAA compliance process, a small doctor's office formally puts the office manager in charge of security related issues, This complies with which security rule standard?

  A. Security Awareness and Training

  B. Security Management Process

  C. Access Control

  D. Assigned Security Responsibility

  E. Security incident Procedures

  Correct Answer: D

• Question 92:

  This transaction is typically used in two modes: update and full replacement:

  A. Premium Payment.

  B. Health Care Claim.

  C. First Report of Injury.

  D. Health Plan Enrollment and Dis-enrollment.

  E. Coordination of Benefits.

  Correct Answer: D

• Question 93:

  A provider is in compliance with the Privacy Rule. She has a signed Notice of Privacy Practices from her patient. To provide treatment, the doctor needs to consult with an independent provider who has no relationship with the patient To comp with the Privacy Rule the doctor MUST:

  A. Establish a business partner relationship with the other provider.

  B. Obtain a signed authorization from the patient to cover the disclosure.

  C. Make a copy of the signed Notice available to the other provider

  D. Obtain the patients signature on the second providers Notice of Privacy Practices.

  E. Do nothing more -- the Notice of Privacy Practices covers treatment activities.

  Correct Answer: E

• Question 94:

  The National Provider Identifier (NPI) will eventually replace the:

  A. NPF .

  B. NPS .

  C. CDT .

  D. ICD-9-CM, Volume 3.

  E. UPIN .

  Correct Answer: E

• Question 95:

  Use or disclosure of Protected Health Information (PHI) for Treatment, Payment, and Health care Operations (TPO) is:

  A. Limited to the minimum necessary to accomplish the intended purpose.

  B. Left to the professional judgment and discretion of the requestor.

  C. Controlled totally by the requestor's pre-existing authorization document.

  D. Governed by industry "best practices" regarding use.

  E. Left in force for eighteen (18) years.

  Correct Answer: A

• Question 96:

  Some of the information that an authorization must include is:

  A. The date on which any automatic extension occurs.

  B. Covered entity's signature.

  C. A statement that federal privacy laws still protect the information after it is disclosed.

  D. A statement that the individual has no right to revoke the authorization.

  E. The date signed.

  Correct Answer: E

• Question 97:

  A pharmacist is approached by an individual and asked a question about an over-the-counter medication. The pharmacist needs some protected health information (PHI) from the individual to answer the question. The pharmacist will not be creating a record of this interaction. The Privacy Rule requires the pharmacist to:

  A. Verbally request a consent and offer a copy of the Notice of Privacy Practices.

  B. Verbally request specific authorization for the PHI.

  C. Do nothing more.

  D. Obtain the signature of the patient on their Notice of Privacy Practices.

  E. Not respond to the request without an authorization from the primary physician.

  Correct Answer: C

• Question 98:

  An Electronic Medical Record (EMR):

  A. Is another name for the Security Ruling.

  B. Requires the use of biometrics for access to records.

  C. Is electronically stored information about an individual's health status and health care.

  D. Identifies all hospitals and health care organizations.

  E. Requires a PK1 for the provider and the patient.

  Correct Answer: C

• Question 99:

  Implementing policies and procedures to prevent, detect, contain, and correct security violations is required by which security standard?

  A. Security incident Procedures

  B. Assigned Security Responsibility

  C. Access control

  D. Facility Access Controls

  E. Security Management Process

  Correct Answer: E

• Question 100:

  To comply with the Final Privacy Rule, a valid Notice of Privacy Practices:

  A. Is required for all Business Associate Contracts

  B. Must always be associated with a valid authorization

  C. Must be signed before providing treatment to a patient.

  D. Must be associated with a valid Business Associate Contract

  E. Must describe the individual's rights under the Privacy Rule.

  Correct Answer: E