HIPAA and Privacy Act Training (1.5 hrs)
(DHA-US001) Questions and Answers
1. Select all that apply; In which of the following circumstances must an
individual be given the opportunity to agree or object to the use and
disclosure of their PHI?
Answer Both A and C
-Before PHI directly relevant to a person's involvement with the individual's care or payment of health care
is shared with that person
- Before their information is included in a facility directory
2. Which of the following statements about the HIPAA Security Rule are
true?
Answer All of the above
3. A covered entity (CE) must have an established complaint process.
Answer True
4. The e-Government Act promotes the use of electronic government
services by the public and improves the use of information technology
in the govern-ment.
Answer True
1/
7
, 5. When must a breach be reported to the U.S. Computer Emergency
Readiness Team?
Answer Within 1 hour of discovery
6. Which of the following statements about the Privacy Act are true?
Answer All of the above
7. What of the following are categories for punishing violations of federal
health care laws?
Answer All of the above
8. Which of the following are common causes of breaches?
Answer All of the above
9. Which of the following are fundamental objectives of information
security?
Answer All
of the above
10. If an individual believes that a DoD covered entity (CE) is not
complying with HIPAA, he or she may file a complaint with the
Answer All of the above
11. Technical safeguards are
2/
7
(DHA-US001) Questions and Answers
1. Select all that apply; In which of the following circumstances must an
individual be given the opportunity to agree or object to the use and
disclosure of their PHI?
Answer Both A and C
-Before PHI directly relevant to a person's involvement with the individual's care or payment of health care
is shared with that person
- Before their information is included in a facility directory
2. Which of the following statements about the HIPAA Security Rule are
true?
Answer All of the above
3. A covered entity (CE) must have an established complaint process.
Answer True
4. The e-Government Act promotes the use of electronic government
services by the public and improves the use of information technology
in the govern-ment.
Answer True
1/
7
, 5. When must a breach be reported to the U.S. Computer Emergency
Readiness Team?
Answer Within 1 hour of discovery
6. Which of the following statements about the Privacy Act are true?
Answer All of the above
7. What of the following are categories for punishing violations of federal
health care laws?
Answer All of the above
8. Which of the following are common causes of breaches?
Answer All of the above
9. Which of the following are fundamental objectives of information
security?
Answer All
of the above
10. If an individual believes that a DoD covered entity (CE) is not
complying with HIPAA, he or she may file a complaint with the
Answer All of the above
11. Technical safeguards are
2/
7
