NBHWC |ACTUAL QUESTIONS & VERIFIED
ANSWERS 2026-2027 UPDATED EDITION |GRADED
A+
Question 1
A risk analysis & management process includes, but is not limited to, the following
activities?
A. Maintain continuous, reasonable, and appropriate security protections
B. Document the chosen security measures and, where required, the rationale for adopting
those measures
C. Evaluate the likelihood and impact of potential risks to e-PHI
D. Implement appropriate security measures to address the risks identified in the risk
analysis
E. All the above
CORRECT ANSWER
E. All of the above
Question 2
Security Management Process, Security Personnel, Information Access Management,
Workforce Training and Management, and Evaluation are all parts of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
A. Administrative Safeguards
1
@THE STUDY VAULT
,Question 3
When was the Health Insurance Portability and Accountability Act (HIPAA), Public Law
104-191 enacted?
A. April 28, 2007
B. August 21, 1996
C. July 18, 2011
D. August 27, 1983
CORRECT ANSWER
B. August 21,1996
Question 4
Access Control, Audit Controls, Integrity Controls, and Transmission Security are all a part
of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
C. Technical Safeguards
Question 5
With HIPAA, what Information is Protected? **(Select all that apply)**
A. Education records and/or certifications and licenses.
B. Treatment and/or the provision of health care to the individual.
2
@THE STUDY VAULT
,C. Financial information and/or the past, present, or future payment for the provision of
health care to the individual.
D. Name, address, birth date, and Social Security Number.
E. Employment records and/or terms of employment.
F. Diagnosis and/or the individual's past, present or future physical or mental health or
condition.
CORRECT ANSWER
B. Treatment and/or the provision of health care to the individual.
C. Financial information and/or the past, present, or future payment for the provision of
health care to the individual.
D. Name, address, birth date, and Social Security Number.
F. Diagnosis and/or the individual's past, present or future physical or mental health or
condition.
Question 6
Who is Covered by the Privacy Rule? **(Select all that apply)**
A. Health Plans
B. Health Care Providers
C. Health Care Clearinghouses
D. Healthcare Power of Attorney
E. Business Associates
F. Next of kin
CORRECT ANSWER
A. Health Plans
B. Health Care Providers
C. Health Care Clearinghouses
E. Business Associates
3
@THE STUDY VAULT
, Question 7
Facility Access and Control, and workstation and Device Security are both a part of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
B. Physical Safeguards
Question 8
At which coaching session is it best to set SMART goals?
A. First Session
B. Second Session
C. Sixth Session
D. After 2 months of coaching
CORRECT ANSWER
A. First Session
Question 9
_________ are statements of intended results spoken or written in the first person.
A. Goals
B. Reflections
C. Missions
D. Affirmations
4
@THE STUDY VAULT
ANSWERS 2026-2027 UPDATED EDITION |GRADED
A+
Question 1
A risk analysis & management process includes, but is not limited to, the following
activities?
A. Maintain continuous, reasonable, and appropriate security protections
B. Document the chosen security measures and, where required, the rationale for adopting
those measures
C. Evaluate the likelihood and impact of potential risks to e-PHI
D. Implement appropriate security measures to address the risks identified in the risk
analysis
E. All the above
CORRECT ANSWER
E. All of the above
Question 2
Security Management Process, Security Personnel, Information Access Management,
Workforce Training and Management, and Evaluation are all parts of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
A. Administrative Safeguards
1
@THE STUDY VAULT
,Question 3
When was the Health Insurance Portability and Accountability Act (HIPAA), Public Law
104-191 enacted?
A. April 28, 2007
B. August 21, 1996
C. July 18, 2011
D. August 27, 1983
CORRECT ANSWER
B. August 21,1996
Question 4
Access Control, Audit Controls, Integrity Controls, and Transmission Security are all a part
of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
C. Technical Safeguards
Question 5
With HIPAA, what Information is Protected? **(Select all that apply)**
A. Education records and/or certifications and licenses.
B. Treatment and/or the provision of health care to the individual.
2
@THE STUDY VAULT
,C. Financial information and/or the past, present, or future payment for the provision of
health care to the individual.
D. Name, address, birth date, and Social Security Number.
E. Employment records and/or terms of employment.
F. Diagnosis and/or the individual's past, present or future physical or mental health or
condition.
CORRECT ANSWER
B. Treatment and/or the provision of health care to the individual.
C. Financial information and/or the past, present, or future payment for the provision of
health care to the individual.
D. Name, address, birth date, and Social Security Number.
F. Diagnosis and/or the individual's past, present or future physical or mental health or
condition.
Question 6
Who is Covered by the Privacy Rule? **(Select all that apply)**
A. Health Plans
B. Health Care Providers
C. Health Care Clearinghouses
D. Healthcare Power of Attorney
E. Business Associates
F. Next of kin
CORRECT ANSWER
A. Health Plans
B. Health Care Providers
C. Health Care Clearinghouses
E. Business Associates
3
@THE STUDY VAULT
, Question 7
Facility Access and Control, and workstation and Device Security are both a part of what?
A. Administrative Safeguards
B. Physical Safeguards
C. Technical Safeguards
D. None of the above
CORRECT ANSWER
B. Physical Safeguards
Question 8
At which coaching session is it best to set SMART goals?
A. First Session
B. Second Session
C. Sixth Session
D. After 2 months of coaching
CORRECT ANSWER
A. First Session
Question 9
_________ are statements of intended results spoken or written in the first person.
A. Goals
B. Reflections
C. Missions
D. Affirmations
4
@THE STUDY VAULT
