HIO-201 by HIPAA Valid Free Exam Practice Test

Question 1

The scope of the Privacy Rule includes:

A. Disclosure of non-identifiable demographics. B. The Washington Publishing Company C. All Employers. D. The prevention of use of de-identified information. E. Oral disclosure of PHI.

Correct Answer: E

Question 2

The security standard that has the objective of implementing
mechanisms to record and examine system activity is:

A. Data Authentication B. Person or Entity Authentication C. Access Control D. Authorization Controls E. Audit Controls

Correct Answer: E

Question 3

The Security Incident Procedures standard requires just one implementation specification. That implementation specification is:

A. Emergency Access Procedure B. Contingency Operations C. Response and Reporting D. Termination Procedures E. Automatic Logoff

Correct Answer: C

Question 4

The applicable methods for HIPAA-related EDI transactions are:

A. Batch and real-time. B. HCFA-1500 and 837. C. Remote and enterprise. D. Claim status and remittance advice. E. Subscriber and payer.

Correct Answer: A

Question 5

Patient identifiable information may include:

A. Telephone number, B. Smart card-based digital signatures. C. Country of birth. D. Patient credit reports. E. Information on past 3 employers.

Correct Answer: A

Question 6

An Electronic Medical Record (EMR):

A. Is another name for the Security Ruling B. Requires the use of biometrics for access to records. C. Is electronically stored information about an individual's health status and health care. D. Identifies all hospitals and health care organizations. E. Requires a P1<1 for the provider and the patient.

Correct Answer: C

Question 7

A provider is in compliance with the Privacy Rule. She has a signed Notice of Privacy Practices from her patient. To provide treatment, the doctor needs to consult with an independent provider who has no relationship with the patient To comp with the Privacy Rule the doctor MUST:

A. Make a copy of the signed Notice available to the other provider B. Obtain a signed authorization from the patient to cover the disclosure. C. Do nothing more - the Notice of Privacy Practices covers treatment activities. D. Establish a business partner relationship with the other provider. E. Obtain the patients
signature
on the second providers Notice of Privacy Practices.

Correct Answer: C

Question 8

Assigning a name and/or number for identifying and tracking users is required by which security rule implementation specification?

A. Data Authentication B. Access Authentication C. Integrity Controls D. Authorization and/or Supervision E. Unique User Identification

Correct Answer: E

Question 9

Select the correct statement regarding
the requirements for
oral communication in the HIPAA regulations.

A. Covered entities must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of de-Identified data B. Covered entities must reasonably safeguard PHI, including oral communications, from any intentional or unintentional use or disclosure that is in violation of the Privacy Rule. C. Covered entities are prohibited from marketing through oral communications. D.
The Privacy
Rule requires
covered entities
to document any
information, including oral communications, which is used or disclosed for TPO purposes. D. The Privacy Rule will often
require major structural changes, such as soundproof rooms
and encryption
of telephone systems,
to provide the "reasonable safeguards" of oral communications required by the regulations.

Correct Answer: B

Question 10

The Privacy Rule interacts with Federal and State laws by:

A. Allowing State privacy laws to provide a cumulative effect lower than HIPA4. B. Defining privacy to be a national interest that is best protected by Federal law. C. Mandating that Federal laws preempt State laws regarding privacy. D. Establishing a 'floor" for privacy protection. E. Establishing an orderly hierarchy where HIPAA applies, then other Federal law, then State law.

Correct Answer: D

Question 11

The Security Rule requires that the covered entity identifies a security official who is responsible for the development and implementation of the policies and procedures. This is addressed under which security standard?:

A. Facility Access Controls B. Response and Reporting C. Assigned Security Responsibility D. Termination Procedures E. Security incident Procedures

Correct Answer: C

Question 12

This transaction type is a "response" transaction that may include information
such as accepted/rejected claim, approved claim(s) pre-payrnent, or approved claim(s) post-payment:

A. 277. B. 278. C. 837. D. 820. E. 270.

Correct Answer: A

Question 13

The National Provider Identifier (NPI) will eventually replace the:

A. NPF . B. CDT . C. UPIN . D. NPS . E. ICD-9-CM, Volume 3 .

Correct Answer: C

Question 14

An Electronic Medical Record (EMR):

A. Requires the use of biometrics for access to records. B. Is electronically stored information about an individual's health status and health care. C. Identifies all hospitals and health care organizations. D. Requires a P1<1 for the provider and the patient. E. Is another name for the Security Ruling.

Correct Answer: B

HIPAA Certified HIPAA Professional - HIO-201 Exam Practice Test