AHIMA AHIMA Certifications RHIA Questions & Answers

• Question 401:

  On the day that a new employee is hired, he requests that no one in the department have access to his EHR. You tell the employee that you will

  A. send a memo to everyone in the department informing them of his request for confidentiality.

  B. increase the level of confidentiality on his record.

  C. examine his record yourself to determine who else currently has access to it.

  D. delete his record from the system.

  Correct Answer: B

• Question 402:

  A covered entity:

  A. is exempt from the H1PAA privacy and security rules.

  B. includes all healthcare providers.

  C. includes healthcare providers who perform specified actions electronically.

  D. must utilize business associates.

  Correct Answer: C

• Question 403:

  You have been given the responsibility of developing the plan to be used in the event that the ADT system goes down and your facility has to revert to manual backup processes. Which of the following should be considered?

  A. Print everything in the ADT.

  B. Ask patients to memorize their medical record number.

  C. Use the same number for the patient account number and medical record number.

  D. Use an MPI card system or maintain a paper or microfilm copy of an alphabetic MPI listing.

  Correct Answer: D

• Question 404:

  As Chief Privacy Officer, you have been asked why you are conducting a risk assessment. Which reason would you give?

  A. get rid of problem staff

  B. change organizational culture

  C. prevent breach of confidentiality

  D. None of the above

  Correct Answer: C

• Question 405:

  You have decided that the current method of tracking release of confidential information is no longer appropriate for your facility's needs. You have decided that it is necessary to purchase a computerized tracking system. The administrator is supportive of the purchase but has asked for a formal justification of the system. Which of the following is NOT a reason to purchase the system?

  A. Everyone in the facility who releases information can enter information into a common database.

  B. A report can be printed upon demand.

  C. The system would restrict the release to the HIM department.

  D. You do not have to track down manual entries.

  Correct Answer: C

• Question 406:

  Which of the following documents is subject to the HIPAA security rule?

  A. document faxed to the facility

  B. copy of discharge summary

  C. paper medical record

  D. scanned operative report stored on CD

  Correct Answer: D

• Question 407:

  The privacy and security rules are part of the HIPAA

  A. Administrative Simplification.

  B. Transactions and Code sets.

  C. Insurance Portability.

  D. Identifiers.

  Correct Answer: D

• Question 408:

  In conducting an environmental risk assessment, which of the following would be considered in the assessment?

  A. placement of water pipes in the facility

  B. verifying that virus checking software is in place

  C. use of single sign-on technology

  D. authentication

  Correct Answer: A

• Question 409:

  You are walking around the facility to identify any privacy and security issues. You walk onto the 6W nursing unit and are able to watch the nurse entering confidential patient information. How can you best improve the privacy of the patient's health information?

  A. Ask the nurse to type the data at another computer.

  B. Turn the computer screen so that the public cannot see it.

  C. Give the nurse additional training.

  D. none of the above

  Correct Answer: B

• Question 410:

  You are walking around the facility to identify any privacy and security issues. You walk onto the 6W nursing unit and stand in a public area to look for possible violations. From where you are standing, you see that anyone can watch the nurse entering confidential patient information. You make a note of this. What are you doing?

  A. conducting a gap analysis

  B. conducting a risk assessment

  C. monitoring audit trail

  D. none of the above

  Correct Answer: B