HIPAA CHP HIO-201 Questions & Answers

• Question 171:

  Performing a periodic review in response to environmental or operational changes affecting the security of electronic protected health information is called:

  A. Transmission Security

  B. Evaluation

  C. Audit Control

  D. Integrity

  E. Security Management Process

  Correct Answer: B

• Question 172:

  Which transaction covers information specific to accidents?

  A. Accident Report.

  B. First Report of Injury.

  C. Health Care Claim.

  D. Health Care Claim Payment/Advice.

  E. Premium Payment.

  Correct Answer: B

• Question 173:

  An Electronic Medical Record (EMR):

  A. Is another name for the Security Ruling

  B. Requires the use of biometrics for access to records.

  C. Is electronically stored information about an individual's health status and health care.

  D. Identifies all hospitals and health care organizations.

  E. Requires a P1<1 for the provider and the patient.

  Correct Answer: C

• Question 174:

  The Privacy Rule interacts with Federal and State laws by:

  A. Establishing an orderly hierarchy where HIPAA applies, then other Federal law, then State law.

  B. Defining privacy to be a national interest that is best protected by Federal law.

  C. Allowing State privacy laws to provide a cumulative effect lower than HIPA4.

  D. Mandating that Federal laws preempt State laws regarding privacy.

  E. Establishing a `floor" for privacy protection.

  Correct Answer: E

• Question 175:

  The code set that must be used to describe or identify inpatient hospital services and surgical procedures is:

  A. ICD-9-CM, Volumes 1 and 2

  B. CPT-4

  C. CDT

  D. ICD-9-CM, Volume 3

  E. HCPCS

  Correct Answer: D

• Question 176:

  The Privacy Rule's penalties for unauthorized disclosure:

  A. Imposes fines and imprisonment as civil penalties for violations.

  B. Limits penalties to covered entities and their business associates.

  C. Imposes criminal penalties for noncompliance with standards.

  D. Limits imprisonment to a maximum often years.

  E. Is $1000 per event of disclosure.

  Correct Answer: D

• Question 177:

  ABC Hospital implements policies and procedures to ensure that all members of its workforce have appropriate access to electronic protected health information. These policies and procedures satisfy which HIPAA security standard?

  A. Security Management Process

  B. Facility Access Control

  C. Security Awareness and Training

  D. Workforce Security

  E. B Security Management Process

  Correct Answer: D

• Question 178:

  This transaction type may be used in three ways:

  1.

  Reply to a Health Care Claim Status Request.

  2.

  Unsolicited notification of a health care claim status.

  3.

  Request for additional information about a health care claim.

  A. 837.

  B. 820.

  C. 277.

  D. 835.

  E. 278.

  Correct Answer: C

• Question 179:

  The scope of the Privacy Rule includes:

  A. All Employers.

  B. The Washington Publishing Company

  C. Disclosure of non-identifiable demographics.

  D. Oral disclosure of PHI.

  E. The prevention of use of de-identified information.

  Correct Answer: D

• Question 180:

  The Privacy Rule has broad administrative requirements. Which one of the following requirements is defined under the Privacy Rule?

  A. Designate a security officer.

  B. Document termination procedures.

  C. Use biometrics to authenticate transactions.

  D. Deploy tokens and smart cards to all medical personnel.

  E. Verify that business associates treat patient information respectfully.

  Correct Answer: E