HIPAA CHP HIO-201 Questions & Answers

• Question 151:

  The implementation specifications for this HIPAA security standard (within Technical Safeguards) must support emergency access and unique user identification.

  A. Audit Control

  B. integrity

  C. Access Control

  D. Person or Entity Authentication

  E. Transmission Security

  Correct Answer: C

• Question 152:

  This security rule standard requires policies and procedures for authorizing access to electronic protected health information that are consistent with its required implementation specifications- which are Isolating Health Care Clearinghouse Function, Access Authorization, and Access Establishment and Modification

  A. Access Control

  B. Security Incident Procedures

  C. information Access Management

  D. Workforce Security

  E. Security Management Process

  Correct Answer: C

• Question 153:

  This rule covers the policies and procedures that must be in place to ensure that the patients' health information is respected and their rights upheld:

  A. Security rule.

  B. Privacy rule.

  C. Covered entity rule.

  D. Electronic Transactions and Code Sets rule.

  E. Electronic Signature Rule

  Correct Answer: B

• Question 154:

  The Data Backup Plan is part of which Security Standard?

  A. Contingency Plan

  B. Evaluation

  C. Security Management Procedures

  D. Facility Access Control

  E. Security Incident Procedures

  Correct Answer: A

• Question 155:

  This code set is used to describe or identity radiological procedures and clinical laboratory tests:

  A. ICD-9-CM. Volumes 1 and 2.

  B. CPT-4

  C. CDT.

  D. ICD-9-CM, Volume 3.

  E. HCPCS.

  Correct Answer: E

• Question 156:

  HIPAA Security standards are designed to be:

  A. Technology specific

  B. State of the art

  C. Non-Comprehensive

  D. Revolutionary

  E. Scalable

  Correct Answer: E

• Question 157:

  This security standard requires that the covered entity establishes agreements with each organization with which it exchanges data electronically, protecting the security of all such data.

  A. Security incident Procedures

  B. Integrity

  C. Person or Entity Authentication

  D. Assigned Security Responsibility

  E. Business Associate Contracts and other Arrangements

  Correct Answer: E

• Question 158:

  Select the FALSE statement regarding code sets and identifiers.

  A. The CPT-4 code set is maintained by the American Medical Association (AMA).

  B. A covered entity must use the applicable medical code set that is valid at the time the health care is delivered.

  C. The National Provider Identifier (NPI) will be assigned by the National Provider System (NPS).

  D. The Centers for Medicare and Medicaid Services is responsible for updating the HCPCS code set.

  E. The National Provider Identifier (NPI) will be assigned to health plans.

  Correct Answer: E

• Question 159:

  Which of the following is NOT a HIPAA national health care identifier?

  A. National Provider Identifier (NPI)

  B. Social Security Number (SSN)

  C. National Health Plan Identifier (PlanID)

  D. National Employer Identifier for Health Care (EIN)

  E. National Health Identifier for Individuals (NI-UI)

  Correct Answer: B

• Question 160:

  Select the correct statement regarding code sets and identifiers.

  A. A covered entity must use the applicable code set that is valid at the time the transaction is initiated.

  B. April 14, 2003 is the compliance date for implementation of the National Provider Identifier.

  C. CMS is responsible for updating the CPT-4 code setS

  D. An organization that assigns NPIs is referred to as National Provider for Identifiers.

  E. HHS assigns the Employer Identification Number (EIN), which has been selected as the National Provider Identifier for Health Care.

  Correct Answer: A