Free HealthCare Information Security and Privacy Practitioner HCISPP Exam Practice Test

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

• Ensure the fire prevention and detection systems are sufficient to protect personnel
  
• Review the architectural plans to determine how many emergency exits are present
  
• Conduct a gap analysis of a new facilities against existing security requirements
  
• Revise the Disaster Recovery and Business Continuity (DR/BC) plan
  

Group Health Plans sponsored or maintained by employers, however,

• ARE SOMETIMES covered entities.
  
• ARE NOT covered entities.
  
• ARE covered entities
  
• ARE called uncovered entities
  

Gap analysis does not apply to

• Transactions
  
• availability
  
• Privacy
  
• Security
  

The Cannon of Medicine was a summarized medical knowledge of the time period accurately disturbing meningitis, tetanus and other diseases.

• True
  
• False
  

HIPPA gave the option to adopt other financial and administrative transactions standards, 'consistent with the goals of improving the operation of health care system and reducing administrative costs' to

• ASCA prohibits HHS from paying Medicare claims that are not submitted electronically after October 16, 2003.
  
• ASCA prohibits HHS from paying Medicare claims that are not submitted on paper after October 16, 2003
  
• ASCA prohibits HHS from paying Medicare claims that are not submitted electronically after October 16, 2003, unless the Secretary grants a waiver from this requirement
  
• No
  

Clients need to receive a copy of Notice of Privacy Practices.

• True
  
• False
  

A covered healthcare provider which a direct treatment relationship with an individual need not:

• provide the notice no later than the date of the first service delivery, including service
  delivered electronically
  
• have the notice available at the service delivery site for individuals to request and keep
  
• get a acknowledgement of the notice from each individual on stamped paper
  
• post the notice in a clear and prominent location where it is reasonable to expect individuals
  seeking service from the covered healthcare provider to be able to read it
  

According to private sector data classification levels, how would salary levels and medical information be classified?

• Public
  
• Sensitive
  
• Private
  
• Confidential
  

Do the same requirements apply to both medical records and mental health records?

• No, a client is not allowed to have access to any part of a mental health record, with or without psychotherapy notes
  
• Generally, including conditioning enrollment in a plan on the client granting authorization for disclosure of psychotherapy notes
  
• Yes, and client is entitled to all of the same information in both settings
  
• Generally, psychotherapy notes are not included in the provision that allows clients to see and copy their health information
  

Is concised, accurate records of actions taken and decisions made during the meeting.

• Minutes
  
• Agenda
  
• Committees