HIPAA Challenge Exam ACTUAL
QUESTIONS AND CORRECT ANSWERS
In which of the following circumstances must an individual be given the
opportunity to agree or object the use of disclosure of their PHI? - CORRECT
ANSWERS A. Before their information is included in a facility directory
B. Before PHI directly relevant to a person's involvement with the individual's
care or payment of health care is shared with that person
(A and C correct answers)
Which of the following statements about the HIPAA Security Rule are true? -
CORRECT ANSWERS -established a national set of standards for the
protection of PHI that is created, received, maintained, or transmitted in
electronic media by a HIPAA covered entity (CE) or business associate (BA)
-protects electronic PHI (ePHI)
-Addresses three types of safeguards-administrative, technical and physical-that
must be in place to secure individuals (ePHI)
-(ALL OF THE ABOVE correct answer)
TRUE - CORRECT ANSWERS A covered entity (CE0 must have an
established complaint process
TRUE - CORRECT ANSWERS The e-Government Act promotes the
use of electronic government services by the public and improves the use of
information technology in the government
Within 1 hour of discovery - CORRECT ANSWERS When must a
breach be reported to the U.S. Computer Emergency Readiness Team?
QUESTIONS AND CORRECT ANSWERS
In which of the following circumstances must an individual be given the
opportunity to agree or object the use of disclosure of their PHI? - CORRECT
ANSWERS A. Before their information is included in a facility directory
B. Before PHI directly relevant to a person's involvement with the individual's
care or payment of health care is shared with that person
(A and C correct answers)
Which of the following statements about the HIPAA Security Rule are true? -
CORRECT ANSWERS -established a national set of standards for the
protection of PHI that is created, received, maintained, or transmitted in
electronic media by a HIPAA covered entity (CE) or business associate (BA)
-protects electronic PHI (ePHI)
-Addresses three types of safeguards-administrative, technical and physical-that
must be in place to secure individuals (ePHI)
-(ALL OF THE ABOVE correct answer)
TRUE - CORRECT ANSWERS A covered entity (CE0 must have an
established complaint process
TRUE - CORRECT ANSWERS The e-Government Act promotes the
use of electronic government services by the public and improves the use of
information technology in the government
Within 1 hour of discovery - CORRECT ANSWERS When must a
breach be reported to the U.S. Computer Emergency Readiness Team?
