Free HIO-201: Certified HIPAA Professional Exam Questions and Answers

Security to protect information assets is generally defined as having:

• AA. Controls
• BB. PKI
• CC. Biometrics
• DD. VPN technology
• EE. Host-based intrusion detection

Which of the following is example of "Payment" as defined in the HIPAA regulations?

• AA. Annual Audits
• BB. Claims Management
• CC. Salary disbursement to the workforce having direct treatment relationships.
• DD. Life Insurance underwriting
• EE. Cash given to the pharmacist for the purchase of an over-the-counter drug medicine

This final security rule standard addresses encryption of data.

• AA. Security Management Process
• BB. Device and Media Controls
• CC. Information Access Management
• DD. Audit Controls
• EE. Transmission Security

In an emergency treatment situation, a health care provider:

• AA. Must obtain the signature of the patient before disclosing PHI to another provider.
• BB. Must contact a relative of the patient before disclosing PHI to another provider.
• CC. May use their best judgment in order to provide appropriate treatment.
• DD. May use PHI but may not disclose it to another provider.
• EE. Must inform the patient about the Notice of Privacy Practices before delivering treatment.

Health information is protected by the Privacy Rule as long as:

• AA. The authorization has been revoked by the physician.
• BB. The patient remains a citizen of the United States.
• CC. The information is under the control of HHS.
• DD. The information is in the possession of a covered entity.
• EE. The information is not also available on paper forms.

To comply with the Privacy Rule, a valid Notice of Privacy Practices:

• AA. Is required for all Chain of Trust Agreements.
• BB. Must allow for the patient's written acknowledgement of receipt.
• CC. Must always be signed by the patient.
• DD. Must be signed in order for the patient's name to be sold to a mailing list organization
• EE. Is not required if an authorization is being developed

Signed authorization forms must be retained:

• AA. Indefinitely, because the life of a signed authorization isindefinite.
• BB. Six (6) years from the time it expires.
• CC. For as long as the patient's records are kept.
• DD. Until it is specifically revoked by the individual.
• EE. Ten (10) years from the date it was signed.

This is a documented and routinely updated plan to create and maintain, for a specific period of time, retrievable copies of information:

• AA. Disaster Recovery Plan
• BB. Data Backup Plan
• CC. Facility Access Controls
• DD. Security Incident Procedures
• EE. Emergency Mode Operations Plan

The objective of this HIPAA security standard is to implement policies and procedures to prevent, detect, contain, and correct security violations.

• AA. Security Incident Procedures
• BB. Assigned Security Responsibly
• CC. Security Management Process
• DD. Access Control
• EE. Facility Access Control

Encryption is included as an addressable implementation specification under which security rule standard?

• AA. Information Access Management
• BB. Security Management Process
• CC. Evaluation
• DD. Transmission Security
• EE. Device and Media Controls