Certified HIPAA Professional (HIO-201) Free Practice Test

Question 1

The Security Incident Procedures standard requires just one implementation specification. That implementation specification is:

A. Response and Reporting

B. Termination Procedures

C. Automatic Logoff

D. Contingency Operations

E. Emergency Access Procedure

Correct Answer: A

Question 2

Select the best statement regarding the definition of protected health information (PHI).

A. PHI includes all individually identifiable health information (IIHI).

B. PHI does not include PHI in transit.

C. PHI includes de-identified health information

D. PHI does not include PHI stored on paper.

E. PHI does not include physician's hand
written notes about the patient's treatment.

Correct Answer: A

Question 3

The code set that must be used to describe or identify dentists services and procedures is:

A. ICD-9-CM, Volume 3

B. CDT

C. HCPCS

D. lcD-9-cM, Volumes 1 and 2

E. CPT-4

Correct Answer: B

Question 4

Workstation Use falls under which Security Rule area?

A. Administrative Safeguards

B. Physical Safeguards

C. Person or Entity Authentication

D. Technical Safeguards

E. Transmission Security

Correct Answer: B

Question 5

Select the FALSE statement regarding the administrative requirements of the HIPAA privacy rule.

A. A covered entity must mitigate, to the extent practicable, any harmful effect that it becomes aware of from the use or disclosure
of PHI in violation of its policies and procedures or HIPAA regulations.

B. A covered entity must retain the documents required by the regulations for a period of six years.

C. A covered entity must change its policies and procedures to comply with HIPAA regulations no later than three years after the change in law.

D. A covered must not in any way intimidate, retaliate, or discriminate against any individual or other entity, which files a complaint.

E. A covered entity may
not require individuals
to waive
their rights
as a condition for treatment, payment, enrollment in a health plan, or eligibility for benefits.

Correct Answer: C

Question 6

Which of the following is NOT a HIPAA national health care identifier?

A. Social Security Number (SSN)

B. National Employer Identifier for Health Care (EIN)

C. National Health Identifier for Individuals (NI-UI)

D. National Health Plan Identifier (PlanID)

E. National Provider Identifier (NPI)

Correct Answer: A

Question 7

The National Provider File (NPF) includes information such as:

A. ICD-9-CM.

B. Enrollment date.

C. Effective date.

D. CDT.

E. CPT-4.

Correct Answer: C

Question 8

A doctor is sending a patient's lab work to a lab That is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient, In order to use or disclose PHI, the lab MUST.

A. Obtain a specific authorization from the patient.

B. Do nothing more - the activity is covered by the doctor's Notice of Privacy Practices,

C. Obtain a specific authorization from the doctor.

D. Verify that the doctor's Notice of Privacy Practices has not expired.

E. Request that the patient sign the lab's Notice of Privacy Practices

Correct Answer: B

Welcome to TestSimulate

HIPAA Certified HIPAA Professional (HIO-201) Free Practice Test