HIPAA HIPAA Certifications HIO-201 Questions & Answers

• Question 81:

  Within the context of a transaction set, the fields that comprise a hierarchical level are referred to as a(n):

  A. Loop.

  B. Enumerator,

  C. Identifier.

  D. Data segment.

  E. Code set.

  Correct Answer: A

• Question 82:

  Select the correct statement regarding the administrative requirements of the HIPAA privacy rule.

  A. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

  B. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

  C. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

  D. A covered entity may require individuals to waive their rights.

  E. A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.

  Correct Answer: A

• Question 83:

  Which of the following is a required implementation specification associated with the Contingency Plan Standard?

  A. Integrity Controls

  B. Access Control and Validation Procedures

  C. Emergency Mode Operation Plan

  D. Response and Reporting

  E. Risk Analysis

  Correct Answer: C

• Question 84:

  In terms of Security, the best definition of "Access Control" is:

  A. A list of authorized entities, together with their access rights.

  B. Corroborating your identity

  C. The prevention of an unauthorized use of a resource.

  D. Proving that nothing regarding your identity has been altered.

  E. Being unable to deny you took part in a transaction.

  Correct Answer: C

• Question 85:

  Security reminders, using an anti-virus program on workstations, keeping track of when users log-in and out, and password management are all part of:

  A. Security incident Procedures

  B. information Access Management

  C. Security Awareness and Training

  D. Workforce Security

  E. Security Management Process

  Correct Answer: C

• Question 86:

  Signed authorization forms must be retained:

  A. Indefinitely, because the life of a signed authorization is indefinite

  B. Six ) years from the time it expires.

  C. For as long as the patient's records are kept.

  D. Until it is specifically revoked by the individual.

  E. Ten (10) years from the date it was signed.

  Correct Answer: B

• Question 87:

  This transaction is the response to a Health Care Claim (837):

  A. Eligibility (270/271)

  B. Premium Payment (B20)

  C. Claim Status Notification (277)

  D. Remittance Advice (35)

  E. Functional Acknowledgment (997)

  Correct Answer: C

• Question 88:

  The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:

  A. Situations where the marketing is for a drug or treatment could improve the health of that individual.

  B. Situations where the patient has already signed the covered entity's Notice of Privacy Practices.

  C. A face-to-face encounter with the sales person of a company that provides drug samples.

  D. A communication involving a promotional gift of nominal value.

  E. The situation where the patient has signed the Notice of Privacy Practices of the marketer.

  Correct Answer: D

• Question 89:

  This transaction, which is not a HIPAA standard, may be used as the first response when receiving a Health Care Claim (837):

  A. Eligibility (270/271).

  B. Premium Payment (820).

  C. Unsolicited Claim Status (277).

  D. Remittance Advice (835).

  E. Functional Acknowledgment (997).

  Correct Answer: E

• Question 90:

  A doctor is sending a patient's lab work to a lab That is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient, In order to use or disclose PHI, the lab MUST.

  A. Request that the patient sign the lab's Notice of Privacy Practices

  B. Do nothing more -- the activity is covered by the doctor's Notice of Privacy Practices,

  C. Obtain a specific authorization from the patient.

  D. Obtain a specific authorization from the doctor.

  E. Verify that the doctor's Notice of Privacy Practices has not expired.

  Correct Answer: B