What is the title given to the group authorized by the HIPAA Privacy Rule to approve a waiver of authorization for the disclosure and/or use of personally identifiable health information?
-
A
-
B
Institutional Review Board
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationThe Privacy Board is the group authorized by the HIPAA Privacy Rule to approve a waiver of authorization for the disclosure and/or use of personally identifiable health information.
When controlling the type of supply, increasing the amount of generalists could contain costs because.
-
A
Generalists earn lower incomes than specialists
-
B
Generalists practice resource-intensive medicine and generate lower overall health care expenditures
-
C
Generalists use less hospital and laboratory services
-
D
Reveal answer details
Close answer details
Which is NOT an element of Security Awareness Training?
-
A
Determination that all staff will receive security training
-
B
Policy related to documentation of all security training
-
C
Procedural issues of who will terminate user access
-
D
Training on vulnerabilities of the electronic Protected Health Information policies
Reveal answer details
Close answer details
Correct answerC
ExplanationProcedural issues of who will terminate user access in not an element of Security Awareness Training.
Price inflation has been a major contributor to the rise of health care costs in the recent decades. This inflation has been due to:
-
A
Prices of health care rising more rapidly than prices in the overall economy.
-
B
An increase in the quantities of health care utilized relative to increases in the overall quantity of goods and services.
-
C
-
D
Factors other than price or quantity of health care.
Reveal answer details
Close answer details
Multi-threaded applications are more at risk than single-threaded applications to
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Confidential information must not be shared with another unless the recipient has:
-
A
-
B
-
C
Permission from appropriate authority in the office
-
D
Reveal answer details
Close answer details
In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?
-
A
Reduced risk to internal systems.
-
B
Prepare the server for potential attacks.
-
C
Mitigate the risk associated with the exposed server.
-
D
Bypass the need for a firewall.
Reveal answer details
Close answer details
Which is not a "painless" cost control strategy?
-
A
Reduction of administrative waste
-
B
Use of cost-effective analysis to limit care
-
C
Elimination of inappropriate care
-
D
Elimination of ineffective care
Reveal answer details
Close answer details
Medicare and Medicaid are apart of social security amendments?
-
A
-
B
Reveal answer details
Close answer details
Question 10
Single choice
Which is NOT consistent with Personnel Clearance Procedures needed to comply with HIPAA Administrative Safeguards?
-
A
Current database of what personnel has access to buildings, offices, filing cabinets, computers, and databases
-
B
New employees, contractors, and unpaid staff have references checked
-
C
Appropriate exit interviews for outgoing personnel
-
D
Discretion given to who does and does not have access to secure office spaces or keys/door codes
Reveal answer details
Close answer details
Correct answerC
ExplanationAppropriate exit interviews for outgoing personnel is least consistent with personnel clearance procedures needed to comply with Administrative Safeguards.
Question 11
Single choice
True or False? In a free market, multiple patients and providers act interdependently.
-
A
-
B
Reveal answer details
Close answer details
DRAG DROP Place in order, from BEST (1) to WORST (4), the following methods to reduce the risk of data remanence on magnetic media. 
Reveal answer details
Close answer details
Question 13
Single choice
The inception of _____ was used as a trial balloon for the idea of government-sponsored universal health insurance.
-
A
-
B
-
C
-
D
health care for the veterans
Reveal answer details
Close answer details
Question 14
Single choice
Which of the following is a potential risk when a program runs in privileged mode?
-
A
It may serve to create unnecessary code complexity
-
B
It may not enforce job separation duties
-
C
It may create unnecessary application hardening
-
D
It may allow malicious code to be inserted
Reveal answer details
Close answer details
Question 15
Single choice
Vertical integration refers to an organization model that under one ownership.
-
A
Contains all levels of care, from primary to tertiary
-
B
Provides the necessary staff for this full spectrum of care
-
C
Provides the necessary facility for all levels of care
-
D
Reveal answer details
Close answer details
Question 16
Single choice
______________- medicine believed gods and evil spirits caused disease.
-
A
-
B
-
C
Reveal answer details
Close answer details
Question 17
Single choice
February 17, 2010 was the effective date for updated changes to HIPAA triggered by the Health Information Technology for Economic and Clinical Health Act (HITECH). As part of HITECH, what must providers who have clients who opt to self-pay do when those clients request the provider not inform their health care insurance provider?
-
A
The provider has the option to not disclose the information to the health care insurance provider
-
B
The provider must disclose the information anyway to the heath care insurance provider
-
C
The provider must not disclose the information to the health care insurance provider
-
D
The provider must have the client sign a waiver freeing the provider from the compulsion to report to the provider
Reveal answer details
Close answer details
Correct answerC
ExplanationThe provider must not disclose the information to the health care provider under the new rules. Previously, the provider's compliance with the request was optional under HIPAA guidelines.
Question 18
Single choice
The form of payment that is based specifically on the individual components of health care is.
-
A
Fee-for-service reimbursement.
-
B
-
C
Reimbursement by episode of illness.
-
D
Reveal answer details
Close answer details
Question 19
Single choice
Employers often advocate on behalf of their employees in benefit disputes and appeals, answer Question:s with regard to the health plan, and generally help them navigate their health benefits. Is individual consent required?
-
A
-
B
-
C
-
D
The answer is indeterminate
Reveal answer details
Close answer details
Question 20
Single choice
If a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, is the entity in compliance with HIPAA guidelines?
-
A
No. HIPAA is law while DMA guidelines are not law, and require less than HIPAA
-
B
Yes. HIPAA is federal law and DMA is state law, which is usually more restrictive, and the more restrictive standard should be met.
-
C
No. HIPAA law is federal and DMA law is state, so HIPAA supersedes DMA law.
-
D
Yes. DMA's guidelines are stricter and will supersede those minimum standards of HIPAA.
Reveal answer details
Close answer details
Correct answerA
ExplanationIf a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, they are not in compliance with HIPAA guidelines because HIPAA is law while DMA guidelines are not, requiring less than HIPAA.
Question 21
Single choice
For most privately insured Americans, health insurance is:
-
A
-
B
financed by the government
-
C
-
D
Reveal answer details
Close answer details
Question 22
Single choice
The CQI approach of producing health care "report cards," specifically HEDIS is a tool to encourage health care consumers to choose high-quality caregivers, but often.
-
A
these report cards are inaccurate
-
B
cost, not quality is the driving motivator for employers to choose health care plans for their employees
-
C
HEDIS includes only a limited number of quality performance indicators
-
D
Reveal answer details
Close answer details
Question 23
Single choice
Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationReferences: https://www.aicpa.org/content/dam/aicpa/interestareas/frc/assuranceadvisoryservices/downloadabledocuments/trust-services-criteria.pdf
Question 24
Single choice
The BEST method to mitigate the risk of a dictionary attack on a system is to
-
A
-
B
-
C
implement password history.
-
D
encrypt the access control list (ACL).
Reveal answer details
Close answer details
Question 25
Single choice
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 26
Single choice
Which of the following is true of experience rating?
-
A
High risk patients pay relatively low premiums.
-
B
It provides affordable coverage to the chronically ill.
-
C
Young, healthier groups have cheaper premiums.
-
D
The elderly have among the lowest premiums.
Reveal answer details
Close answer details
Question 27
Single choice
A generalist care coordinator can advocate on behalf of his/her patients to integrate services from multiple providers. Besides caring for the whole person, an advantage(s) of care coordination include:
-
A
-
B
Avoiding the duplication of services
-
C
Prohibiting the use of all specialist services
-
D
Reveal answer details
Close answer details
Question 28
Single choice
What is a Covered Entity? The term "Covered Entity" is defined in 160.103 of the regulation.
-
A
The definition is complicate and long.
-
B
The definition is referred to in the Secure Computing Act
-
C
The definition is very detailed.
-
D
The definition is deceptively simple and short
Reveal answer details
Close answer details
Question 29
Single choice
A gap analysis for the Transactions set does not refer to
-
A
the practice of identifying the data content you currently have available through your medical software
-
B
the practice of and comparing that content to what is required by HIPPA, and ensuring there is a match.
-
C
and requires that you study the specific format of a regulated transaction to ensure that the order of the information when sent electronically matches the order that is mandated in the Implementation Guides.
-
D
but does not require that you study the specific format of a regulated transaction to ensure that the order of information when sent electronically matches the order that is mandated in the Implementation Guides.
Reveal answer details
Close answer details
Question 30
Single choice
They serve as a liaison between the medical staff and board of trustees.
-
A
-
B
-
C
Reveal answer details
Close answer details
Question 31
Single choice
A medical intervention lying on a steeper portion of the aggregate cost-benefit curve indicates a major benefit for a relatively modest cost. An example of such an intervention would be:
-
A
-
B
-
C
care for an anencephalic infant.
-
D
purchasing MRI scanners to supplement CT scanners.
Reveal answer details
Close answer details
Question 32
Single choice
Since the early 1900s, the burden of disease in developed countries has shifted.
-
A
to underdeveloped countries
-
B
from infectious to chronic disease
-
C
from chronic to infectious disease
-
D
from the rich to the poor
Reveal answer details
Close answer details
Question 33
Single choice
Lack of health insurance has become a middle class phenomenon among all except.
-
A
Those who are self employed
-
B
Those working in small businesses
-
C
Those with traditional jobs in manufacturing
-
D
Those with part time jobs
Reveal answer details
Close answer details
Question 34
Single choice
Who monitors the purity of foods and safety of medicines?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 35
Single choice
The malpractice liability system negatively impacts quality of care because.
-
A
The fear and stress of malpractice litigation creates an "I didn't do it" response from the physician, rather than working on improvement
-
B
The system is economically wasteful and takes dollars away from improving care
-
C
It wreaks unnecessary stress on often innocent and talented physicians
-
D
Reveal answer details
Close answer details
Question 36
Single choice
Discovered the immunity to small pox.
-
A
-
B
-
C
Reveal answer details
Close answer details
Question 37
Single choice
When responding to a client's request for information about the disclosure of his/her protected health information, which is NOT required?
-
A
The purpose of the disclosure
-
B
A description of what information was sent
-
C
Disclosures for treatment, payment, or health care operations
-
D
The dates of disclosure and to whom the information was sent
Reveal answer details
Close answer details
Correct answerC
ExplanationWhen responding to a client's request for information about the disclosure of his/her protected health information, the health care provider must account for the disclosures by including a description of what information was sent, the dates of disclosure and to whom the information was sent, and the purpose of the disclosure. This information should be presented to the client in writing.
Question 38
Single choice
The single largest health profession in the United States are.
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 39
Single choice
Marcus, age 33, is fully competent to handle his own affairs. He is starting services with a covered entity, as defined by HIPAA, and has received a copy of the organization's privacy practices. How many signatures are going to be required on the receipt or acknowledgement form indicating Marcus received the required information?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationTwo signatures are required on the receipt form. One signature from the client, Marcus, and one from a witness or staff member.
Question 40
Single choice
Integrated medical groups differ from IPAs in that.
-
A
Physicians own their practices and office assets.
-
B
Physicians become employees of an organization that owns the practice
-
C
Physicians act as gatekeepers
-
D
Reveal answer details
Close answer details
Question 41
Single choice
According to private sector data classification levels, how would salary levels and medical information be classified?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 42
Single choice
What mandates all privacy in hospital administration?
-
A
-
B
-
C
Reveal answer details
Close answer details
Question 43
Single choice
What time period was the polio vaccine licensed?
-
A
-
B
-
C
Reveal answer details
Close answer details
Question 44
Single choice
___________ is one of the main objectives of HIPAA.
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 45
Single choice
Who was the first company to give their employees health insurance? What was the health insurance?
-
A
Ford Motor Company/Blue Cross
-
B
General Motors/Blue Cross
-
C
General Motors/Metropolitan life
Reveal answer details
Close answer details
Question 46
Single choice
This is for people 65 years or older with disabilities or people with End Stage Renal Disease.
-
A
-
B
Reveal answer details
Close answer details
|