HIMT1200- Final Exam QUESTIONS
WELL ANSWERED
Darling v. Charleston Community Memorial Hospital is most often credited for - correct answer
✔✔eliminating the doctrine of charitable immunity
The RAC program was designed to reduce improper Medicare payments through detection of
overpayments related to non-covered services, incorrectly coded services and: - correct answer
✔✔duplicate services
Mercy Hospital personnel need to review the medical records of Katie Grace for utilization
review purposes (#1). They will also be sending her records to her physician for continuity of
care (#2). As they pertain to Mercy Hospital, these two functions are - correct answer ✔✔use
(#1) and disclosure (#2)
The purpose of the implementation specifications of the HIPAA security rule is to provide -
correct answer ✔✔instruction for implementation of standards
The age of majority in most states is - correct answer ✔✔18 and older
Services that are statutorily non-covered by Medicare can be located on the - correct answer
✔✔Medicare Notice of Exclusions From Medicare Benefits
Dr. Watson is known to chronically not remember his password and ask other physicians and
nurses to use their passwords. This is reported by various staff, but the security officer ignores
the complaints since Dr. Watson is the chief of staff. The hospital most likely has not complied
with which of the following? - correct answer ✔✔sanction policy
,The OIG has specific compliance guidance for all of the following entities except - correct
answer ✔✔pharmacies
Although HIPAA is not the first piece of federal privacy legislation, it is more expansive than the
Federal Privacy Act of 1974, which applied privacy rules to - correct answer ✔✔federal agencies
The EMTALA regulations include all but which of the following? - correct answer ✔✔Non-
Medicare, indigent patients must be transferred to the nearest Level 1 trauma center.
Breach notification requirements apply to - correct answer ✔✔HIPAA covered entities
HIPAA business associates
non-business associate PHR vendor
Correct all of these
The Joint Commission's quality improvement activities for health record documentation include
all but which of the following core performance measures for hospitals? - correct answer
✔✔hypertension
The Americans with Disabilities Act - correct answer ✔✔applies to impairments that
substantially limit major life activities
Mr. Smith was admitted to University Hospital by Dr. Collins. Mr. Smith's hospital bill will be paid
by Blue Cross Insurance. Upon discharge from the hospital, who owns the health record of Mr.
Smith? - correct answer ✔✔University Hospital
, The privacy rule generally requires documentation related to its requirements to be retained for
- correct answer ✔✔3 years
Fred resigned from his position at University Hospital. According to the HIPAA security rule, his
access to the electronic health record system should be terminated - correct answer
✔✔promptly upon resignation
In the situation of behavioral healthcare information a healthcare provider may disclose health
information on a patient without the patient's authorization in which of the following
circumstances? - correct answer ✔✔court order
duty to warn
involuntary commitment proceedings
Correct all of these
Disclosure of worker's compensation records is governed by: - correct answer ✔✔state statues
The most common place to find a firewall is between: - correct answer ✔✔an organization's
internal network and the internet.
Risk management and quality improvement programs are related because of which of the
following reasons? - correct answer ✔✔They share similar underlying processes.
Disclosure regarding reportable conditions under state laws and regulations: - correct answer
✔✔must be included in the AOD maintained by the facility
WELL ANSWERED
Darling v. Charleston Community Memorial Hospital is most often credited for - correct answer
✔✔eliminating the doctrine of charitable immunity
The RAC program was designed to reduce improper Medicare payments through detection of
overpayments related to non-covered services, incorrectly coded services and: - correct answer
✔✔duplicate services
Mercy Hospital personnel need to review the medical records of Katie Grace for utilization
review purposes (#1). They will also be sending her records to her physician for continuity of
care (#2). As they pertain to Mercy Hospital, these two functions are - correct answer ✔✔use
(#1) and disclosure (#2)
The purpose of the implementation specifications of the HIPAA security rule is to provide -
correct answer ✔✔instruction for implementation of standards
The age of majority in most states is - correct answer ✔✔18 and older
Services that are statutorily non-covered by Medicare can be located on the - correct answer
✔✔Medicare Notice of Exclusions From Medicare Benefits
Dr. Watson is known to chronically not remember his password and ask other physicians and
nurses to use their passwords. This is reported by various staff, but the security officer ignores
the complaints since Dr. Watson is the chief of staff. The hospital most likely has not complied
with which of the following? - correct answer ✔✔sanction policy
,The OIG has specific compliance guidance for all of the following entities except - correct
answer ✔✔pharmacies
Although HIPAA is not the first piece of federal privacy legislation, it is more expansive than the
Federal Privacy Act of 1974, which applied privacy rules to - correct answer ✔✔federal agencies
The EMTALA regulations include all but which of the following? - correct answer ✔✔Non-
Medicare, indigent patients must be transferred to the nearest Level 1 trauma center.
Breach notification requirements apply to - correct answer ✔✔HIPAA covered entities
HIPAA business associates
non-business associate PHR vendor
Correct all of these
The Joint Commission's quality improvement activities for health record documentation include
all but which of the following core performance measures for hospitals? - correct answer
✔✔hypertension
The Americans with Disabilities Act - correct answer ✔✔applies to impairments that
substantially limit major life activities
Mr. Smith was admitted to University Hospital by Dr. Collins. Mr. Smith's hospital bill will be paid
by Blue Cross Insurance. Upon discharge from the hospital, who owns the health record of Mr.
Smith? - correct answer ✔✔University Hospital
, The privacy rule generally requires documentation related to its requirements to be retained for
- correct answer ✔✔3 years
Fred resigned from his position at University Hospital. According to the HIPAA security rule, his
access to the electronic health record system should be terminated - correct answer
✔✔promptly upon resignation
In the situation of behavioral healthcare information a healthcare provider may disclose health
information on a patient without the patient's authorization in which of the following
circumstances? - correct answer ✔✔court order
duty to warn
involuntary commitment proceedings
Correct all of these
Disclosure of worker's compensation records is governed by: - correct answer ✔✔state statues
The most common place to find a firewall is between: - correct answer ✔✔an organization's
internal network and the internet.
Risk management and quality improvement programs are related because of which of the
following reasons? - correct answer ✔✔They share similar underlying processes.
Disclosure regarding reportable conditions under state laws and regulations: - correct answer
✔✔must be included in the AOD maintained by the facility
