HIPAA HIO-201 Online Practice Questions and Exam Preparation

HIPAA HIO-201 Online Questions & Answers

• Question 111:

  A hospital is preparing a file of treatment information for the state of California. This file is to be sent to external medical researchers. The hospital has removed SSN, name, phone and other information that specifically identifies an individual However, there may still be data in the file that potentially could identify the individual Can the hospital claim `safe harbor" and release the file to the researchers?

  A. Yes the hospital's actions satisfy the "safe harbor" method of de-identification
  B. No - a person with appropriate knowledge and experience must determine that the information that remains can identify an individual,
  C. No - authorization to release the information is still required by HIPAA
  D. No- to satisfy "safe harbor the hospital must also have no knowledge of a way to use the remaining data to identify an individual.
  E. Yes - medical researchers are covered entities and "research" is considered a part of "treatment" by HIPAA.
  D. No- to satisfy "safe harbor the hospital must also have no knowledge of a way to use the remaining data to identify an individual.

• Question 112:

  The National Provider Identifier (NPI) will eventually replace the:

  A. NPF.
  B. NPS.
  C. CDT.
  D. ICD-9-CM, Volume 3.
  E. UPIN .
  E. UPIN .

• Question 113:

  In terms of Security, the best definition of "Access Control" is:

  A. A list of authorized entities, together with their access rights.
  B. Corroborating your identity
  C. The prevention of an unauthorized use of a resource.
  D. Proving that nothing regarding your identity has been altered.
  E. Being unable to deny you took part in a transaction.
  C. The prevention of an unauthorized use of a resource.

• Question 114:

  Workstation Use falls under which Security Rule area?

  A. Person or Entity Authentication
  B. Technical Safeguards
  C. Administrative Safeguards
  D. Physical Safeguards
  E. Transmission Security
  D. Physical Safeguards

• Question 115:

  The transaction pair used for requesting and responding to a health claim status inquiry is:

  A. 2701271
  B. 2761277
  C. 2781278
  D. 8341834
  E. 837/835
  B. 2761277

• Question 116:

  Which of the following is example of "Payment" as defined in the HIPAA regulations?

  A. Annual Audits
  B. Claims Management
  C. Salary disbursement to the workforce having direct treatment relationships.
  D. Life Insurance underwriting
  E. Cash given to the pharmacist for the purchase of an over-the-counter drug medicine
  B. Claims Management

• Question 117:

  When limiting protected health information (PHI) to the minimum necessary for a use or disclosure, a covered entity can use:

  A. Their professional judgment and standards,
  B. The policies set by the security rule for the protection of the information,
  C. Specific guidelines set by WEDI.
  D. Measures that are expedient and reduce costs.
  E. The information for research and marketing purposes only.
  A. Their professional judgment and standards,

• Question 118:

  Which of the following is not one of the HIPAA Titles?:

  A. Title IX: Employer sponsored group health plans.
  B. Title Ill: Tax-related Health Provisions.
  C. Title II: Administrative Simplification.
  D. Title I: Health Care Insurance Access, Portability, and Renewability.
  E. Title V: Revenue Offsets.
  A. Title IX: Employer sponsored group health plans.

• Question 119:

  Implementation features of the Security Management Process include which one of the following?

  A. Power Backup plan
  B. Data Backup Plan
  C. Security Testing
  D. Risk Analysis
  E. Authorization and/or Supervision
  D. Risk Analysis

• Question 120:

  A pharmacist is approached by an individual and asked a question about an over-the-counter medication. The pharmacist needs some protected health information (PHI) from the individual to answer the question. The pharmacist will not be creating a record of this interaction. The Privacy Rule requires the pharmacist to:

  A. Verbally request a consent and offer a copy of the Notice of Privacy Practices.
  B. Verbally request specific authorization for the PHI.
  C. Do nothing more.
  D. Obtain the signature of the patient on their Notice of Privacy Practices.
  E. Not respond to the request without an authorization from the primary physician.
  C. Do nothing more.