HIPAA CHP HIO-201 Questions & Answers

• Question 11:

  Select the best example of a business associate (if they had access to PHI).

  A. Accountants

  B. Hospital employees

  C. A covered entity's internal IT department

  D. CEO of the covered entity

  E. The covered entity's billing service department

  Correct Answer: A

• Question 12:

  Which transaction covers information specific to accidents?

  A. Accident Report.

  B. First Report of Injury.

  C. Health Care Claim.

  D. Health Care Claim Payment/Advice.

  E. Premium Payment.

  Correct Answer: B

• Question 13:

  Select the FALSE statement regarding the administrative requirements of the HIPAA privacy rule.

  A. A covered entity must mitigate, to the extent practicable, any harmful effect that it becomes aware of from the use or disclosure of PHI in violation of its policies and procedures or HIPAA regulations.

  B. A covered must not in any way intimidate, retaliate, or discriminate against any individual or other entity, which files a complaint.

  C. A covered entity may not require individuals to waive their rights as a condition for treatment, payment, enrollment in a health plan, or eligibility for benefits.

  D. A covered entity must retain the documents required by the regulations for a period of six years.

  E. A covered entity must change its policies and procedures to comply with HIPAA regulations no later than three years after the change in law.

  Correct Answer: E

• Question 14:

  One implementation specification of a contingency plan is:

  A. Risk analysis

  B. Applications and Data Criticality Analysis

  C. Risk Management

  D. integrity Controls

  E. Encryption

  Correct Answer: B

• Question 15:

  One implementation specification of the Security Management Process is:

  A. Risk Analysis

  B. Authorization and/or Supervision

  C. Termination Procedures

  D. Contingency Operations

  E. Encryption and Decryption

  Correct Answer: A

• Question 16:

  Maintenance personnel that normally have no access to PHI are called in to investigate water that is leaking from the ceiling of the room where a large amount of PHI is stored. The room is normally secured but the file cabinets have no doors or locks. Situations like this are addressed by which Workforce Security implementation specification?

  A. Risk Management

  B. Written Contract or Other Arrangement

  C. Accountability

  D. Authorization and/or Supervision

  E. integrity Controls

  Correct Answer: D

• Question 17:

  HL7 is particularly involved with:

  A. NCPDP-based pharmacy standards.

  B. The standard for pharmacy-health plan communication.

  C. Administering Medicare and Medicaid programs.

  D. Claims attachments.

  E. Publishing HIPAA Transactions-related Implementation Guides.

  Correct Answer: D

• Question 18:

  Policies and procedures that address the final disposition of electronic PHI (including the media on which is stored) is address by this required implementation specification.

  A. Media Re-use

  B. Termination Procedures

  C. Risk Management

  D. Maintenance Records

  E. Disposal

  Correct Answer: E

• Question 19:

  When using the Health Care Eligibility Request/Response (2701271), ii a provider submits certain minimum information and the patient/subscriber is in their database, the payer must generate a response. Which of the following is one of the minimum information fields?

  A. Patient's country of birth

  B. Patient's pet name

  C. Patient's weight

  D. Patient's address

  E. Patient's date of birth

  Correct Answer: E

• Question 20:

  Periodic testing and revision of contingency plans is addressed by:

  A. Testing and Revision Procedures

  B. Information System Activity Review

  C. Response and Reporting

  D. Data Backup Plan

  E. Emergency Access Procedure

  Correct Answer: A