CRIS PRACTICE TEST QUESTIONS AND CORRECT ANSWERS LATEST UPDATE 2026/2027 .

CRIS PRACTICE TEST

QUESTIONS AND CORRECT

ANSWERS LATEST UPDATE

2026/2027 .

, A covered entity is training its workforce on the HIPAA Privacy Rule. It has scheduled all of

its paid employees to attend training sessions. This covered entity has scheduled everyone that

needs to receive training. ✓✓ CORRECT ANSWER False

1. The HIPAA Security Rule applies to all types of PHI, including information disclosed

verbally. ✓✓ CORRECT ANSWER False

2. To be PHI, information must directly name the individual that the informa-tion is about. ✓✓

CORRECT ANSWER False

3. When a request is received for an MRI report, only the written report should be sent and not

the images, orders and any notes that mention the reason for the MRI ✓✓ CORRECT

ANSWER True

4. A limited data set does not receive HIPAA Privacy Rule protection. ✓✓ CORRECT ANSWER

False

5. Covered entities consist only of healthcare providers, health plans, and healthcare

clearinghouses. ✓✓ CORRECT ANSWER True

6. Preemption requires compliance with state law when a federal law and state law conflict with one

another ✓✓ CORRECT ANSWER False

7. Drug and alcohol abuse treatment records received protection under feder-al law prior to the

HIPAA Privacy Rule. ✓✓ CORRECT ANSWER True

8. By definition, a designated record set includes billing records. ✓✓ CORRECT ANSWER

True