ISC HCISPP Online Practice Questions and Exam Preparation

ISC HCISPP Online Questions & Answers

• Question 221:

  Copies of patient information may be disposed of in any garbage can in the facility.

  A. True
  B. False
  B. False

• Question 222:

  Intellectual property rights are PRIMARY concerned with which of the following?

  A. Owner's ability to realize financial gain
  B. Owner's ability to maintain copyright
  C. Right of the owner to enjoy their creation
  D. Right of the owner to control delivery method
  D. Right of the owner to control delivery method

• Question 223:

  ___________ is one of the main objectives of HIPAA.

  A. Secrecy
  B. Accountability
  C. Anonymity
  D. Complexity
  C. Anonymity

• Question 224:

  Which one of the following is NOT a fundamental component of a Regulatory Security Policy?

  A. What is to be done.
  B. When it is to be done.
  C. Who is to do it.
  D. Why is it to be done
  C. Who is to do it.

• Question 225:

  A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

  A. The inherent risk is greater than the residual risk.
  B. The Annualized Loss Expectancy (ALE) approaches zero.
  C. The expected loss from the risk exceeds mitigation costs.
  D. The infrastructure budget can easily cover the upgrade costs.
  C. The expected loss from the risk exceeds mitigation costs.

• Question 226:

  What is the title given to the group authorized by the HIPAA Privacy Rule to approve a waiver of authorization for the disclosure and/or use of personally identifiable health information?

  A. Cohort Group
  B. Institutional Review Board
  C. Privacy Board
  D. Board of Directors
  C. Privacy Board

• Question 227:

  Part of Administrative Safeguards under HIPAA is Workforce Security measures. Which is NOT a key element of a Workforce Security Element?

  A. Identification of barriers to client electronic Personal Health Information
  B. Clearance Procedures
  C. Termination Procedures
  D. Authorization and Supervision
  A. Identification of barriers to client electronic Personal Health Information

• Question 228:

  A Governing board is also known as the___________.

  A. Medical Staff
  B. Administration
  C. Board of Trustees
  C. Board of Trustees

• Question 229:

  Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis. Which element is NOT part of risk analysis?

  A. Developing adequate communication with all contractors, interns, and staff in relation to the agency's security policies
  B. Assessing vulnerabilities of integrity and availability of electronic personal health information
  C. Determining how client electronic personal health information confidentiality may be compromised
  D. Determining barriers in existence to needed client electronic personal health information
  A. Developing adequate communication with all contractors, interns, and staff in relation to the agency's security policies

• Question 230:

  True or False? The government health coverage program for the elderly and certain people with disabilities is called Medicaid.

  A. True
  B. False
  B. False