ISC HCISPP Online Practice Questions and Exam Preparation

ISC HCISPP Online Questions & Answers

• Question 151:

  Which is NOT an element of Security Awareness Training?

  A. Determination that all staff will receive security training
  B. Policy related to documentation of all security training
  C. Procedural issues of who will terminate user access
  D. Training on vulnerabilities of the electronic Protected Health Information policies
  C. Procedural issues of who will terminate user access

• Question 152:

  Are employers required to submit enrollments by the standard transactions?

  A. Though Employers are not CEs and they have to send enrollment using HIPPA standard transactions. However, the employer health plan IS a CE and must be able to conduct applicable transactions using the HIPPA standards
  B. Employers are not CEs and do not have to send enrollment using HIPPA standard transactions. However, the employer health plan IS a CE and must be able to conduct applicable transactions using the HIPPA standards.
  C. Employers are CEs and have to send enrollment using HIPPA standard transactions. However, the employer health plan IS a CE and must be able to conduct applicable transactions using the HIPPA standards.
  D. Employers are CEs and do not have to send enrollment using HIPPA standard transactions. Further, the employer health plan IS also a CE and must be able to conduct applicable transactions using the HIPPA standards.
  B. Employers are not CEs and do not have to send enrollment using HIPPA standard transactions. However, the employer health plan IS a CE and must be able to conduct applicable transactions using the HIPPA standards.

• Question 153:

  The traditional dispersed model of independent private physicians working as solo practitioners or in small groups is in competition with.

  A. Neighborhood health centers
  B. Multispecialty group practices
  C. Large "corporate" group practice organizations and networks
  D. None of the above
  C. Large "corporate" group practice organizations and networks

• Question 154:

  How many major concepts are associated with the privacy rule?

  A. One
  B. Two
  C. Three
  B. Two

• Question 155:

  ______________- medicine believed gods and evil spirits caused disease.

  A. Ancient
  B. Prehistoric
  C. Modern
  B. Prehistoric

• Question 156:

  An important principle of defense in depth is that achieving information security requires a balanced focus on which PRIMARY elements?

  A. Development, testing, and deployment
  B. Prevention, detection, and remediation
  C. People, technology, and operations
  D. Certification, accreditation, and monitoring
  C. People, technology, and operations

• Question 157:

  According to private sector data classification levels, how would salary levels and medical information be classified?

  A. Public
  B. Sensitive
  C. Private
  D. Confidential
  C. Private

• Question 158:

  The titles of CEO, CFO, CIO and COO can be found here.

  A. Board of Trustees
  B. Medical Staff
  C. Administration
  C. Administration

• Question 159:

  Which is not an underlying assumption of a theoretical model of costs and health outcomes?

  A. The relevant outcome is the overall health of a population rather than of an individual.
  B. It is possible to quantify health at a population level.
  C. It is necessary to focus on health outcomes, those aspects of health status directly under the influence of health care.
  D. It is impossible to reduce cost without also reducing health outcomes.
  D. It is impossible to reduce cost without also reducing health outcomes.

• Question 160:

  Confidentiality means that data is not to be made available to unauthorized persons.

  A. True
  B. False
  A. True