AHIMA AHIMA Certifications RHIA Questions & Answers

• Question 381:

  Miles has asked you to explain the rights that he has via HIPAA privacy standards. Which of the following is one of his HIPAA-given rights?

  A. He can review his bill.

  B. He can ask to be contacted at an alternative site.

  C. He can discuss financial arrangements with business office staff.

  D. He can ask a patient advocate to sit in on all appointments at the facility.

  Correct Answer: B

• Question 382:

  According to HIPAA, covered entities may include marketing in a newsletter that is sent to a wide range of individuals.

  A. true

  B. true if there is an opt-out procedure identified

  C. false

  D. false if services marketed do not apply to the individual

  Correct Answer: B

• Question 383:

  Would an entity that conducts the sale or dispensing of a drug, device, equipment , or other item in accordance with a prescription be a covered entity ?

  A. yes

  B. no

  Correct Answer: A

• Question 384:

  The purpose of the new security awareness program is(are)

  A. to help staff realize the importance of security.

  B. remind users of procedures.

  C. lock down PHI.

  D. both A and B

  Correct Answer: D

• Question 385:

  When addressing physical security, which of the following should be taken into consideration?

  A. natural threats

  B. human-made threats

  C. damaging nearby activities

  D. all of the above

  Correct Answer: D

• Question 386:

  An employee utilizes the patient's name and Social Security number to obtain a credit card. This is an example of

  A. theft.

  B. de-identified information.

  C. limited data set.

  D. security incident.

  Correct Answer: A

• Question 387:

  Your system just crashed. Fortunately you have established a site that holds computer processors that can be converted to meet our needs quickly. This is a

  A. hot site.

  B. cold site.

  C. redundant site.

  D. backup site

  Correct Answer: B

• Question 388:

  The purpose of the notice of privacy practices is to

  A. notify the patient of uses of PHI.

  B. notify patient of audits.

  C. report incidents to the 01G.

  D. notify researchers of allowable data use.

  Correct Answer: A

• Question 389:

  The term "de-identified" indicates

  A. the patient's name has been removed.

  B. the patient's name and medical record number have been removed.

  C. the patient's name, medical record number, and social security number have been removed

  D. all of the HIPAA specified patient identifiers have been removed.

  Correct Answer: D

• Question 390:

  You are a researcher at the local university hospital. You will need to access patient information without patient authorization to conduct your research. Which of the following statements is true?

  A. You cannot gain any information without patient consent.

  B. You can obtain the information if the institutional review board waives the requirement for patient authorization.

  C. You can access anything that you need as long as you sign a statement saying that you will only use it for the purpose described on the form.

  D. You can access the information if you call the patients personally and get their written permission.

  Correct Answer: B