HIPAA HIPAA Certifications HIO-201 Questions & Answers

• Question 101:

  When PHI is sent or received over an electronic network there must be measures to guard against unauthorized access. This is covered under which security rule standard?

  A. Device and Media Controls

  B. Access Controls

  C. Transmission Security

  D. Integrity

  E. Audit Controls

  Correct Answer: C

• Question 102:

  Title 1 of the HIPAA legislation in the United States is about:

  A. P1<1 requirements for hospitals and health care providers.

  B. Encryption algorithms that must be supported by hospitals and health care providers.

  C. Fraud and abuse in the health care system and ways to eliminate the same.

  D. Guaranteed health insurance coverage to workers and their families when they change employers.

  E. The use of strong authentication technology that must be supported by hospitals and health care providers.

  Correct Answer: D

• Question 103:

  This transaction supports multiple functions. These functions include: telling a bank to move money OR telling a bank to move money while sending remittance information

  A. 277.

  B. 276

  C. 271

  D. 820.

  E. 270.

  Correct Answer: D

• Question 104:

  The key objective of a contingency plan is that the entity must establish and implement policies and procedures to ensure The:

  A. Creation and modification of health information during and after an emergency.

  B. Integrity of health information during and after an emergency.

  C. Accountability of health information during and after an emergency.

  D. Vulnerability of health information during and after an emergency.

  E. Non-repudiation of the entity.

  Correct Answer: B

• Question 105:

  A covered entity' that fails to implement the HIPAA Privacy Rule would risk:

  A. $50O0 in fines.

  B. $5000 in fines and six months in prison.

  C. An annual cap of $5000 in fines.

  D. A fine of up to $50000 if they wrongfully disclose PHI.

  E. Six months in prison.

  Correct Answer: D

• Question 106:

  A valid Notice of Privacy Practices must

  A. Detail specifically all activities that are considered a use or disclosure

  B. Describe in plain language what is meant by treatment, payment, and health care operations (TPO).

  C. Inform the individual that protected health information (PHI) may only be used for valid medical research.

  D. Inform the individual that this version of the Notice will always cover them, regardless of subsequent changes.

  E. State the expiration date of the Notice.

  Correct Answer: B

• Question 107:

  The office manager of a small doctors office wants to donate several of their older workstations to the local elementary school. Which Security Rule Standard addresses this situation?

  A. Security Management Process

  B. Device and Media Controls

  C. information Access Management

  D. Facility Access Controls

  E. Workstation Security

  Correct Answer: B

• Question 108:

  Information in this transaction is generated by the payer's adjudication system:

  A. Eligibility (2701271)

  B. Premium Payment 2O)

  C. Unsolicited Claim Status (277)

  D. Remittance Advice 35)

  E. Functional Acknowledgment (997)

  Correct Answer: D

• Question 109:

  Select the FALSE statement regarding the transaction rule.

  A. The Secretary is required by statue to impose penalties of at least $100 per violation on any person or entity that fails to comply with a standard except that the total amount imposed on any one person in each calendar year may not exceed $1 .000.000 for violations of one requirement.

  B. Health plans are required to accept all standard transactions.

  C. Health plans may not require providers to make changes or additions to standard transactions.

  D. Health plans may not refuse or delay payment of standard transactions.

  E. If additional information is added to a standard transaction it must not modify the definition, condition, intent, or use of a data element.

  Correct Answer: A

• Question 110:

  Which of the following is primarily concerned with implementing security measures that are sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level.

  A. Access Establishment and Modification

  B. Isolating Health care clearinghouse Functions

  C. Information System Activity Review

  D. Risk Management

  E. Risk Analysis

  Correct Answer: D