Free Certified HIPAA Professional Exam HIO-201 Exam Practice Test

Formal, documented instructions for reporting security breaches are referred to as:

• Business Associate Contract
• Response and Reporting
• Emergency Access Procedure
• Sanction policy
• Risk Management

Select the FALSE statement regarding the transaction rule.

• The Secretary is required by statue to impose penalties of at least $100 per violation on any person or entity that fails to comply with a standard except that the total amount imposed on any one person in each calendar year may not exceed $1 .000.000 for violations of one requirement.
• Health plans are required to accept all standard transactions.
• Health plans may not require providers to make changes or additions to standard transactions.
• Health plans may not refuse or delay payment of standard transactions.
• If additional information is added to a standard transaction it must not modify the definition, condition, intent, or use of a data element.

A doctor is sending a patient’s lab work to a lab That is an external business partner. The lab and the doctor’s staff are all trained on the doctor’s Privacy Practices. The doctor has a signed Notice from the patient, In order to use or disclose PHI, the lab MUST.

• Request that the patient sign the lab’s Notice of Privacy Practices
• Do nothing more — the activity is covered by the doctor’s Notice of Privacy Practices,
• Obtain a specific authorization from the patient.
• Obtain a specific authorization from the doctor.
• Verify that the doctor’s Notice of Privacy Practices has not expired.

Select the FALSE statement regarding the X12N Implementation Guides.

• The Washington Publishing Company has the exclusive rights to publish the X12N Implementation Guides.
• HHS has adopted the Implementation Guides as standards for HIPAA transactions.
• The guides are intended to be instructive and need not be followed strictly.
• The guides may be downloaded free from WPC’s Website.
• The guides explain the usage of the transaction set segments and data elements.

This code set describes drugs:

• ICD-9-CM, Volumes 1 and 2.
• CPT-4.
• CDT
• ICD-9-CM, Volume 3.
• NDC.

The objective of this HIPAA security standard is to implement policies and procedures to prevent, detect, contain, and correct security Violations.

• Security Incident Procedures
• Assigned Security Responsibility
• Security Management Process
• Access Control
• Facility Access Control

Select the best statement regarding organized health care arrangements (OHCA).

• An organized health care arrangement is a clinically integrated setting in which patients receive care from multiple providers.
• Independent providers participating in an organized health care arrangement are business associates of each other.
• An example of an OHCA is a nurse employed in a physician’s office.
• An example of an OHCA is a laboratory attached to a physician’s office.
• An example of an OHCA is a health insurance company and its affiliated life insurance company.

The National Provider Identifier (NPI) will eventually replace the:

• NPF.
• NPS.
• CDT.
• ICD-9-CM, Volume 3.
• UPIN.

This transaction is used to transmit referral transactions between UMOs and other parties:

• Referral Premium Payment.
• Health Care Referral Certification and Authorization.
• First Report of Injury.
• Health Plan Referral Enrollment and Dis-enrollment.
• Coordination of Referral Benefits.

An Electronic Medical Record (EMR):

• Is another name for the Security Ruling
• Requires the use of biometrics for access to records.
• Is electronically stored information about an individual’s health status and health care.
• Identifies all hospitals and health care organizations.
• Requires a P1<1 for the provider and the patient.