Free Certified HIPAA Professional Exam HIO-201 Exam Practice Test

In addition to code sets, HIPAA transactions also contain:

• Security information such as a fingerprint.
• Privacy information.
• Information on all business associates,
• Information on all health care clearinghouses.
• Identifiers.

Which one of the following implementation specifications is associated with the Facility Access Control standard?

• Integrity Controls
• Emergency Access Procedure
• Access Control and Validation Procedures
• Security Reminders
• Security Policy

The code set that must be used to describe or identify dentists services and procedures is:

• lcD-9-cM, Volumes 1 and 2
• CPT-4
• CDT
• ICD-9-CM, Volume 3
• HCPCS

Select the correct statement regarding the administrative requirements of the HIPAA privacy rule

• A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.
• A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure
• A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.
• A covered entity may require individuals to waive their rights.
• A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.

One mandatory requirement for the Notice of Privacy Practices set by HIPAA regulations is:

• If the notice must state that the covered entity reserves the right to disclose PHI without obtaining the individuals authorization.
• The notice must prominently include an expiration date.
• The notice must describe every potential use of PHI.
• The notice must describe an individual’s rights under the rule such as to inspect, copy and amend PHI and to obtain an accounting of disclosures of PHI.
• The notice must clearly identify that the covered entity is in compliance with HIPAA regulations as of April 16, 2003.

The purpose of this security rule standard is to implement technical policies and procedures for electronic information systems that maintain electronic PHI, and to allow access only to those persons or software programs that have been granted access rights

• Person or Entity Authentication
• Audit Controls
• Facility Access Controls
• Transmission Security
• Access Controls

Establishing policies and procedures for responding to an emergency or other occurrence that damages systems is an example of

• Security Awareness and Training
• Security Incident Procedure
• Information Access Management
• Security Management Process
• Contingency Plan

The Privacy Rule gives patients the following right

• Access to the psychotherapy notes.
• Request an amendment to their medical record.
• Receive a digital certificate.
• See an accounting of disclosures for which authorization was given.
• The use of a smart card for accessing their records.

Select the correct statement regarding the 834 - Benefit Enrollment and Maintenance transaction.

• It can not be used to transfer enrollment information from a plan sponsor to a health care insurance company or other benefit provider.
• It can be used by a health insurance company to notify a plan sponsor that it has dropped one of its members.
• It can not be used to enroll, update, or dis-enroll employees and dependents in a health plan.
• A sponsor can be an employer, insurance agency, association or government agency but unions are excluded from being plan sponsors
• It can be used in either update or full replacement mode.

Select the correct statement regarding the requirements of HIPAA regulations.

• A covered entity must have and apply sanction against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.
• A covered entity does not need to train all members of its workforce whose functions are affected by a change in policy or procedure
• A covered entity must designate, and document, a privacy officer, and a HIPAA compliance officer,
• A covered entity may require individuals to waive their rights.
• A covered entity must require the individual to sign the Notice of Privacy Practices prior to delivering any treatment related service,