RHIA Domain 2 Exam – 117 Questions with
Answers
Ms. Thomas was a patient at your facility. She has been told that there are some records
that she cannot have access to. These records are most likely - Answer psychotherapy
notes
Your organization is sending confidential patient information across the Internet using
technology that will transform the original data into unintelligible code that can be re-
created by authorized users. This technique is called. - Answer data encryption
When patients are able to obtain a copy of their health record, this is an example of
which of the following? - Answer a patient right
Which of the following should the record destruction program include? - Answer the
method of destruction
You are looking for potential problems and violations of the privacy rule. What is this
security management process called? - Answer risk assessment
The surgeon comes out to speak to a patient's family. He tells them that the patient
came through the surgery fine. The mass was benign and they could see the patient in
an hour. He talks low so that the other people in the waiting room will not hear but
someone walked by and heard. This is called a(n) - Answer incidental disclosure
A patient signed an authorization to release information to a physician but decided not
to go see that physician. Can he stop the release? - Answer Yes, as long as it has not
been released already
, A mechanism to ensure that PHI has not been altered or destroyed inappropriately has
been established. This process is called - Answer integrity
Which of the following documents is subject to the HIPAA security rule? - Answer
scanned operative report stored on CD
The hospital has received a request for an amendment. How long does the facility have
in order to accept or deny the request? - Answer 60 days
You work for a 60-bed hospital in a rural community. You are conducting research on
what you need to do to comply with HIPAA. You are afraid that you will have to
implement all of the steps that your friend at a 900-bed teaching hospital is
implementing at his facility. You continue reading and learn that you only have to
implement what is prudent and reasonable for your facility. This is called. - Answer
scalable
Barbara, a nurse, has been flagged for review because she logged in to the EHR in the
evening when she usually works the day shift. Why should this conduct be reviewed? -
Answer This needs to be investigated before a decision is made because there may be a
legitimate reason why she logged in at this time.
Alisa has trouble remembering her password. She is trying to come up with a solution
that will help her remember. Which one of the following would be the BEST practice? -
Answer creating a password that utilizes a combination of letters and numbers
Which statement is true about when a family member can be provided with PHI? -
Answer The family member is directly involved in the patient's care
A covered entity - Answer includes health care providers who perform specifed actions
electronically.
Answers
Ms. Thomas was a patient at your facility. She has been told that there are some records
that she cannot have access to. These records are most likely - Answer psychotherapy
notes
Your organization is sending confidential patient information across the Internet using
technology that will transform the original data into unintelligible code that can be re-
created by authorized users. This technique is called. - Answer data encryption
When patients are able to obtain a copy of their health record, this is an example of
which of the following? - Answer a patient right
Which of the following should the record destruction program include? - Answer the
method of destruction
You are looking for potential problems and violations of the privacy rule. What is this
security management process called? - Answer risk assessment
The surgeon comes out to speak to a patient's family. He tells them that the patient
came through the surgery fine. The mass was benign and they could see the patient in
an hour. He talks low so that the other people in the waiting room will not hear but
someone walked by and heard. This is called a(n) - Answer incidental disclosure
A patient signed an authorization to release information to a physician but decided not
to go see that physician. Can he stop the release? - Answer Yes, as long as it has not
been released already
, A mechanism to ensure that PHI has not been altered or destroyed inappropriately has
been established. This process is called - Answer integrity
Which of the following documents is subject to the HIPAA security rule? - Answer
scanned operative report stored on CD
The hospital has received a request for an amendment. How long does the facility have
in order to accept or deny the request? - Answer 60 days
You work for a 60-bed hospital in a rural community. You are conducting research on
what you need to do to comply with HIPAA. You are afraid that you will have to
implement all of the steps that your friend at a 900-bed teaching hospital is
implementing at his facility. You continue reading and learn that you only have to
implement what is prudent and reasonable for your facility. This is called. - Answer
scalable
Barbara, a nurse, has been flagged for review because she logged in to the EHR in the
evening when she usually works the day shift. Why should this conduct be reviewed? -
Answer This needs to be investigated before a decision is made because there may be a
legitimate reason why she logged in at this time.
Alisa has trouble remembering her password. She is trying to come up with a solution
that will help her remember. Which one of the following would be the BEST practice? -
Answer creating a password that utilizes a combination of letters and numbers
Which statement is true about when a family member can be provided with PHI? -
Answer The family member is directly involved in the patient's care
A covered entity - Answer includes health care providers who perform specifed actions
electronically.
