HIPAA CHP HIO-201 Questions & Answers

• Question 31:

  When a breach of security' is discovered, policies and procedures defined under this implementation specification should be followed:

  A. Automatic Logoff

  B. Access Establishment and Modification

  C. Termination Procedures

  D. Response and Reporting

  E. information system Activity Review

  Correct Answer: D

• Question 32:

  Which of the following is example of "Payment" as defined in the HIPAA regulations?

  A. Annual Audits

  B. Claims Management

  C. Salary disbursement to the workforce having direct treatment relationships.

  D. Life Insurance underwriting

  E. Cash given to the pharmacist for the purchase of an over-the-counter drug medicine

  Correct Answer: B

• Question 33:

  A grouping of functional groups, delimited by a header/trailer pair, is called a:

  A. Data element

  B. Data segment

  C. Transaction set

  D. Functional envelope

  E. Interchange envelope

  Correct Answer: E

• Question 34:

  Select the FALSE statement regarding health-related communications and marketing in The I-IIPAA regulations:

  A. A covered entity must obtain an authorization for any use or disclosure of protected health information for marketing, except if the communication is in the form allowed by the regulations.

  B. A face-to-face communication made by a covered entity to an individual is allowed by the regulations without an authorization.

  C. A promotional gift of nominal value provided by the covered entity is NOT allowed by the regulations without an authorization.

  D. If the marketing is expected to result in direct or indirect remuneration to the covered entity from a third party, the authorization must state that such remuneration is expected.

  E. Disclosure of PHI for marketing purposes is limited to disclosure to business associates (which could be a telemarketer) that undertakes marketing activities on behalf of the covered entity.

  Correct Answer: C

• Question 35:

  Policies requiring workforce members to constantly run an updated anti-virus program on their workstation might satisfy which implementation specification?

  A. Risk Management

  B. Protection from Malicious Software

  C. Facility Security Plan

  D. Response and Reporting

  E. Emergency Access Procedure

  Correct Answer: B

• Question 36:

  Select the best statement regarding organized health care arrangements (OHCA).

  A. An organized health care arrangement is a clinically integrated setting in which patients receive care from multiple providers.

  B. Independent providers participating in an organized health care arrangement are business associates of each other.

  C. An example of an OHCA is a nurse employed in a physician's office.

  D. An example of an OHCA is a laboratory attached to a physician's office.

  E. An example of an OHCA is a health insurance company and its affiliated life insurance company.

  Correct Answer: A

• Question 37:

  The State of Nebraska's Medicaid Program has decided to implement an EDI solution to comply with the HIPAA transaction rule. Select the transaction or code set that would not apply to them.

  A. 270

  B. 835

  C. 837 - Professional

  D. CPT-4

  E. U8-92

  Correct Answer: E

• Question 38:

  This is a documented and routinely updated plan to create and maintain, for a specific period of time, retrievable copies of information:

  A. Disaster Recovery Plan

  B. Data Backup Plan

  C. Facility Access Controls

  D. Security Incident Procedures

  E. Emergency Mode Operations Plan

  Correct Answer: B

• Question 39:

  Select the correct statement regarding the definition of the term "disclosure" as used in the HIPAA regulations.

  A. "Disclosure" refers to employing IIHI within a covered entity.

  B. "Disclosure" refers to utilizing, examining, or analyzing IIHI within a covered entity.

  C. "Disclosure" refers to the release, transfer, or divulging of IIHI to another covered entity.

  D. "Disclosure" refers to the movement of information within an organization.

  E. "Disclosure" refers to the sharing of information within the covered entity.

  Correct Answer: C

• Question 40:

  Encryption is included as an addressable implementation specification under which security rule standard?

  A. Information Access Management

  B. Security Management Process

  C. Evaluation

  D. Transmission Security

  E. Device and Media Controls

  Correct Answer: D