RHIA Domain 2 with Questions and 100%
Correct Answers
Device and Media Controls - Answer Security breaches from lack of wiping data from
devices
Employee Physical - Answer Should report family history unless specifically excluded
Virtual Privacy - Answer Private tunnel with Internet as transport medium for secure
transmission
Role-Based - Answer Access determined by employee's job title and responsibilities
Administrative Safeguard - Answer More people-focused in nature
Most of the safeguards
Healthcare Integrity and Protection Data Bank - Answer Legal action taken against
healthcare provider
Privileged Communication - Answer Between patient and provider based on medical
condition
Privacy - Answer Patient can maintain control over certain personal information
Authorizations - Answer Must be signed for every disclosure of PHI
, Consent - Answer Sound mind or legal directive
Deidentified - Answer Not protected by HIPAA Privacy Rule
NPP - Answer Only informational
Patients can not object to TPO uses
Must inform patients of disclosures to foundations
Patient Review of Records - Answer Cannot dictate place bc org is responsible for
integrity
Privacy Rule Identifier - Answer Vehicle License Plate
PCP - Answer Patients cannot deny PCP access to their records
Office of Civil Rights - Answer Oversight and enforcement of HIPAA
Workforce - Answer Perform functions on behalf of covered entities and business
associates
Includes volunteers and external orgs
When federal and state law are different - Answer Choose the stricter one
Addressable Security Rule - Answer Should be implemented unless an entity determines
it is not reasonable and appropriate
500 days - Answer DHHS secretary must be informed of breaches greater than this
Correct Answers
Device and Media Controls - Answer Security breaches from lack of wiping data from
devices
Employee Physical - Answer Should report family history unless specifically excluded
Virtual Privacy - Answer Private tunnel with Internet as transport medium for secure
transmission
Role-Based - Answer Access determined by employee's job title and responsibilities
Administrative Safeguard - Answer More people-focused in nature
Most of the safeguards
Healthcare Integrity and Protection Data Bank - Answer Legal action taken against
healthcare provider
Privileged Communication - Answer Between patient and provider based on medical
condition
Privacy - Answer Patient can maintain control over certain personal information
Authorizations - Answer Must be signed for every disclosure of PHI
, Consent - Answer Sound mind or legal directive
Deidentified - Answer Not protected by HIPAA Privacy Rule
NPP - Answer Only informational
Patients can not object to TPO uses
Must inform patients of disclosures to foundations
Patient Review of Records - Answer Cannot dictate place bc org is responsible for
integrity
Privacy Rule Identifier - Answer Vehicle License Plate
PCP - Answer Patients cannot deny PCP access to their records
Office of Civil Rights - Answer Oversight and enforcement of HIPAA
Workforce - Answer Perform functions on behalf of covered entities and business
associates
Includes volunteers and external orgs
When federal and state law are different - Answer Choose the stricter one
Addressable Security Rule - Answer Should be implemented unless an entity determines
it is not reasonable and appropriate
500 days - Answer DHHS secretary must be informed of breaches greater than this
