RHIT Mock Exam ALL sections Latest 2026
/ 2027 UPDATE) Questions & Answers
100% Correct
Which is true about the Privacy Act of 1974? - correct answer It applies to the Federal
Govt.
Mag looked up PHI on her ex-sister-in-law. A routine audit discovered the violation.
Which statement is true under ARRA? - correct answer Mag cannot be prosecuted as a
covered entity.
Which statement is true when a family member can be provided PHI? - correct answer
The family member is directly involved in the the care of the patient.
Nick is developing an agreement that will be used between the hospital and the health
care clearing house. This will require the two parties to protect the privacy of data
exchanged and is called - correct answer A business associate agreement
,You have been given the task of destroying PHI stored on an old server. What method
would you use? - correct answer Degaussing (magnets)
Which of the following documents is subject to the HIPAA security rule? - correct
answer Scanned op report stored on CD (security rule only applies to ePHI)
Which of the following situations would require authorizations before disclosing PHI? -
correct answer public health activities
A covered entity is - correct answer includes health care providers who perform
specified actions electronically
You have been asked to create a presentation on intentional and unintentional threats.
What would you cite? - correct answer a patient SSN being used for a credit card
applications.
You will be choosing the type of encryption to be used for the new EHR. What are your
choices? - correct answer symmetric and asymmetric
, Your system just crashed. You have established a site that holds computer processors
but not data. This site can be converted to meet needs quickly. This is a - correct
answer cold site
Which of the following is a true statement about symmetric encryption? - correct
answer Symmetric encryption assigns a secret key to data.
HIPAA workforce security requires - correct answer that access to PHI be appropriate.
Richard has asked to view his medical record. The record is stored off-site. How long
does the facility have to provide his record to him? - correct answer 60 days
A data use agreement is required when - correct answer a limited data set is used
What type of digital signature uses encryption. - correct answer digital signature
/ 2027 UPDATE) Questions & Answers
100% Correct
Which is true about the Privacy Act of 1974? - correct answer It applies to the Federal
Govt.
Mag looked up PHI on her ex-sister-in-law. A routine audit discovered the violation.
Which statement is true under ARRA? - correct answer Mag cannot be prosecuted as a
covered entity.
Which statement is true when a family member can be provided PHI? - correct answer
The family member is directly involved in the the care of the patient.
Nick is developing an agreement that will be used between the hospital and the health
care clearing house. This will require the two parties to protect the privacy of data
exchanged and is called - correct answer A business associate agreement
,You have been given the task of destroying PHI stored on an old server. What method
would you use? - correct answer Degaussing (magnets)
Which of the following documents is subject to the HIPAA security rule? - correct
answer Scanned op report stored on CD (security rule only applies to ePHI)
Which of the following situations would require authorizations before disclosing PHI? -
correct answer public health activities
A covered entity is - correct answer includes health care providers who perform
specified actions electronically
You have been asked to create a presentation on intentional and unintentional threats.
What would you cite? - correct answer a patient SSN being used for a credit card
applications.
You will be choosing the type of encryption to be used for the new EHR. What are your
choices? - correct answer symmetric and asymmetric
, Your system just crashed. You have established a site that holds computer processors
but not data. This site can be converted to meet needs quickly. This is a - correct
answer cold site
Which of the following is a true statement about symmetric encryption? - correct
answer Symmetric encryption assigns a secret key to data.
HIPAA workforce security requires - correct answer that access to PHI be appropriate.
Richard has asked to view his medical record. The record is stored off-site. How long
does the facility have to provide his record to him? - correct answer 60 days
A data use agreement is required when - correct answer a limited data set is used
What type of digital signature uses encryption. - correct answer digital signature
