Pass the HIPAA CHP HIO-201 Questions and answers with CertsForce

Viewing page 4 out of 5 pages
Viewing questions 31-40 out of questions
Questions # 31:

A State insurance commissioner is requesting specific, individually identifiable information from an insurer as a part of a routine review of the insurer's practices. What must the insurer do to deidentify the information?

Options:

A.

The protected health information must be removed from the information. A substitute "key" may be supplied to allow re-identification, if needed.


B.

Limit the information to coverage, dates of treatment, and payment amounts to avoid collecting any protected data.


C.

Nothing. An oversight agency has the right to access this information without prior authorization.


D.

Request that the insurance commissioner ask for an exception from HIPAA from the Department of Health and Human Services.


E.

A written authorization is required from the patient.


Questions # 32:

This rule covers the policies and procedures that must be in place to ensure that the patients' health information is respected and their rights upheld:

Options:

A.

Security rule.


B.

Privacy rule.


C.

Covered entity rule.


D.

Electronic Transactions and Code Sets rule.


E.

Electronic Signature Rule.


Questions # 33:

One implementation specification of a contingency plan is:

Options:

A.

Risk analysis


B.

Applications and Data Criticality Analysis


C.

Risk Management


D.

Integrity Controls


E.

Encryption


Questions # 34:

Select the best statement regarding the definition of protected health information (PHI).

Options:

A.

PHI includes all individually identifiable health information (IIHI).


B.

PHI does not include physician's hand written notes about the patient's treatment.


C.

PHI does not include PHI stored on paper.


D.

PHI does not include PHI in transit.


E.

PHI includes de-identified health information


Questions # 35:

To comply with the Privacy Rule, a valid Notice of Privacy Practices:

Options:

A.

Is required for all Chain of Trust Agreements.


B.

Must allow for the patient's written acknowledgement of receipt.


C.

Must always be signed by the patient.


D.

Must be signed in order for the patient's name to be sold to a mailing list organization


E.

Is not required if an authorization is being developed


Questions # 36:

Select the best statement regarding organized health care arrangements (OHCA).

Options:

A.

An organized health care arrangement is a clinically integrated setting in which patients receive care from multiple providers.


B.

Independent providers participating in an organized health care arrangement are business associates of each other.


C.

An example of an OHCA is a nurse employed in a physician's office.


D.

An example of an OHCA is a laboratory attached to a physician's office.


E.

An example of an OHCA is a health insurance company and its affiliated life insurancecompany.


Questions # 37:

This Security Standard addresses the proper functions to be performed on a specific workstation as well as the physical attributes of its surroundings.

Options:

A.

Information Access Management


B.

Workstation Security


C.

Access Control


D.

Facility Access Controls


E.

Workstation Use


Questions # 38:

Information in this transaction is generated by the payer's adjudication system:

Options:

A.

Eligibility (270/271)


B.

Premium Payment (820)


C.

Unsolicited Claim Status (277)


D.

Remittance Advice (835)


E.

Functional Acknowledgment (997)


Questions # 39:

Assigning a name and/or number for identifying and tracking users is required by which security rule implementation specification?

Options:

A.

Access Authentication


B.

Integrity Controls


C.

Authorization and/or Supervision


D.

Data Authentication


E.

Unique User Identification


Questions # 40:

Select the correct statement regarding the definition of the term "disclosure" as used in the HIPAA regulations.

Options:

A.

"Disclosure" refers lo employing IIHI within a covered entity.


B.

"Disclosure" refers to utilizing, examining, or analyzing IIHI within a covered entity.


C.

"Disclosure" refers to the release, transfer, or divulging of IIHI to another covered entity.


D.

"Disclosure" refers to the movement of information within an organization.


E.

"Disclosure" refers to the sharing of information within the covered entity.


Viewing page 4 out of 5 pages
Viewing questions 31-40 out of questions