HIPPA FINAL EXAM QUESTIONS AND
ANSWERS
1. Within HIPAA how does Security differ from Privacy?
Answer Security defines safeguards for ePHI versus Privacy which defines safeguards for
PHI
2. Covered Entities may also use or disclose PHI without
authorization in the following circumstances EXCEPT
A. Emergencies involving imminent threat to health or safety (to the
individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the individual
E. Public health activities
F.Workers' compensation
Answer D. Medical research with information that identifies the individual
3. Authorization is required for which of the following?
A. Minimum necessary disclosures of PHIB. Non-routine disclosures of
PHIC. ReferralsD. Treatment
B. Non-routine disclosures of PHI
C. Referrals
1/
15
, D. Treatment
Answer B. Non-routine disclosures of PHI
4. Penalties for non-compliance can be which of the following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal
Answer D. Civil and Criminal
5. Which of the following is NOT an example of physical security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption
Answer D. Data encryption
6. What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
D. Apathy
Answer B. Education
2/
15
ANSWERS
1. Within HIPAA how does Security differ from Privacy?
Answer Security defines safeguards for ePHI versus Privacy which defines safeguards for
PHI
2. Covered Entities may also use or disclose PHI without
authorization in the following circumstances EXCEPT
A. Emergencies involving imminent threat to health or safety (to the
individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the individual
E. Public health activities
F.Workers' compensation
Answer D. Medical research with information that identifies the individual
3. Authorization is required for which of the following?
A. Minimum necessary disclosures of PHIB. Non-routine disclosures of
PHIC. ReferralsD. Treatment
B. Non-routine disclosures of PHI
C. Referrals
1/
15
, D. Treatment
Answer B. Non-routine disclosures of PHI
4. Penalties for non-compliance can be which of the following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal
Answer D. Civil and Criminal
5. Which of the following is NOT an example of physical security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption
Answer D. Data encryption
6. What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
D. Apathy
Answer B. Education
2/
15
