Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

HIPAA HIO-201 - Certified HIPAA Professional

Page: 5 / 5
Total 160 questions

A grouping of functional groups, delimited by' a header/trailer pair, is called a:

A.

Data element

B.

Data segment

C.

Transaction set

D.

Functional envelope

E.

Interchange envelope

Workstation Use falls under which Security Rule area?

A.

Person or Entity Authentication

B.

Technical Safeguards

C.

Administrative Safeguards

D.

Physical Safeguards

E.

Transmission Security

Performing a periodic review in response to environmental or operational changes affecting the security of electronic protected health information is called:

A.

Transmission Security

B.

Evaluation

C.

Audit Control

D.

Integrity

E.

Security Management Process

A provider is in compliance with the Privacy Rule. She has a signed Notice of Privacy Practices from her patient. To provide treatment, the doctor needs to consult with an independent provider who has no relationship with the patient. To comply with the Privacy Rule the doctor MUST:

A.

Establish a business partner relationship with the other provider.

B.

Obtain a signed authorization from the patient to cover the disclosure.

C.

Make a copy of the signed Notice available to the other provider.

D.

Obtain the patients signature on the second provider's Notice of Privacy Practices.

E.

Do nothing more -the Notice of Privacy Practices covers treatment activities.

When PHI is sent or received over an electronic network there must be measures to guard against unauthorized access. This is covered under which security rule standard?

A.

Device and Media Controls

B.

Access Controls

C.

Transmission Security

D.

Integrity

E.

Audit Controls

The objective of this HIPAA security standard is to implement policies and procedures to prevent, detect, contain, and correct security violations.

A.

Security Incident Procedures

B.

Assigned Security Responsibly

C.

Security Management Process

D.

Access Control

E.

Facility Access Control

To comply with the Privacy Rule, a valid Notice of Privacy Practices:

A.

Is required for all Chain of Trust Agreements.

B.

Must allow for the patient's written acknowledgement of receipt.

C.

Must always be signed by the patient.

D.

Must be signed in order for the patient's name to be sold to a mailing list organization

E.

Is not required if an authorization is being developed

Which of the following is not one of the HIPAA Titles?:

A.

Title IX: Employer sponsored group health plans.

B.

Title III: Tax-related Health Provisions.

C.

Title II: Administrative Simplification.

D.

Title I: Health Care Insurance Access, Portability, and Renewability.

E.

Title V: Revenue Offsets.