HIO-201 by HIPAA Actual Free Exam Q&As

Question 1

The Privacy Rule has broad
administrative
requirements.
Which
one of the following requirements is defined under the Privacy Rule?

A. Deploy tokens and smart cards to all medical personnel. B. Designate a security officer. C. Use biometrics to authenticate transactions. D. Verify that business associates treat patient information respectfully. E. Document termination procedures.

Discussion 0

Correct Answer: D Vote an answer

Question 2

Select the
correct statement
regarding the
administrative
requirements of the HIPAA privacy rule

A. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice. B. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure C. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity. D. A covered entity may require individuals to waive their rights. E. A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit
incidental uses and disclosures
made
pursuant to permitted
or required use or disclosure.

Discussion 0

Correct Answer: C Vote an answer

Question 3

Select the best statement regarding organized health care arrangements (OHCA).

A. An example of an OHCA is a health insurance company and its affiliated life insurance company. B. Independent providers participating in an organized health care arrangement are
business associates of each other. C. An example of an OHCA is a laboratory attached to a physician's office. D. An organized health care arrangement is a clinically integrated setting in which patients receive care from multiple providers. E. An example of an OHCA is a nurse employed in a physician's office.

Discussion 0

Correct Answer: D Vote an answer

Question 4

The transaction
number
assigned
to the
Payment
Order/Remittance Advice transaction is:

A. 270 B. 278 C. 820 D. 836 E. 834

Discussion 0

Correct Answer: C Vote an answer

Question 5

A valid Notice of Privacy Practices must

A. Describe in plain language what is meant by treatment, payment, and health care operations (TPO). B. Detail specifically all activities that are considered a use or disclosure C. Inform the individual that protected health information (PHI) may only be used for valid medical research. D. Inform
the individual
that this version of the
Notice will always cover
them, regardless of subsequent changes. E. State the expiration date of the Notice.

Discussion 0

Correct Answer: A Vote an answer

Question 6

The Data Backup Plan is part of which Security Standard?

A. Evaluation B. Security Incident Procedures C. Contingency Plan D. Security Management Procedures E. Facility Access Control

Discussion 0

Correct Answer: C Vote an answer

Question 7

Which
of the following
is NOT
a correct statement
regarding HIPAA requirements?

A. A covered entity must provide a process for individuals to make complaints concerning privacy issues. B. The Privacy Rule requires that the covered entity has a documented security policy. C. A covered entity must change its
policies and
procedures
to comply with HIPAA regulations, standards, and implementation specifications. D. A covered entity must document all complaints received regarding privacy issues. E. A covered entity must
reasonably
safeguard
PHI from
any intentional
or unintentional use or disclosure that is in violation of the regulations.

Discussion 0

Correct Answer: B Vote an answer

Question 8

Once a year, a team at ABC Hospital reviews environmental and operational changes that may have had an impact on the security of electronic PHI. This is an example of:

A. Security Management Process B. Transmission Security C. Audit Controls D. Evaluation E. Integrity

Discussion 0

Correct Answer: D Vote an answer

Question 9

Select the FALSE statement regarding violations of the HIPAA Privacy rule.

A. Criminal penalties for willful violation are fines up to $60,000 and one year in prison for each requirement or prohibition violated. B. Criminal penalties for violations committed under "false pretenses are fines up to $100,000 and five years in prison for each requirement or prohibition violated. C. Covered entities that violate the standards or implementation specifications will be subjected to civil penalties of up to $100 per violation except that the total amount imposed on any one person in each calendar year may not exceed $25,000 for violations of one requirement. D. Criminal penalties for non-compliance are fines up to $65,000 and one year in prison for each requirement or prohibition violated. E. Criminal penalties for violations committed with the intent to sell, transfer, or use PHI for commercial advantage, personal gain or malicious harm are fines up to $250,000 and ten years in prison for each requirement or prohibition violated.

Discussion 0

Correct Answer: D Vote an answer

Question 10

Title 1 of the HIPAA legislation in the United States is about:

A. The use of strong authentication technology that must
be supported by hospitals and health care providers. B. P1<1 requirements for hospitals and health care providers. C. Fraud and abuse in the health care system and ways to eliminate the same. D. Guaranteed health insurance
coverage
to workers and their
families when they change employers. E. Encryption algorithms that must be supported by hospitals and health care providers.

Discussion 0

Correct Answer: D Vote an answer

HIPAA Certified HIPAA Professional - HIO-201 Exam Practice Test