HIPAA Training Exam Questions and Answers
1. If you find a USB drive, do not insert it into a University machine,
even to identify the owner.
Answer True
2. Once a person has died, how long does HIPAA protect the decedent's
PHI?
Answer 50
Years
3. The HIPAA Security Rule requires what type of safeguards for ePHI?
Answer administrative, physical, and technical (all of the above)
4. A covered entity is required to enter into a business associate
agreement with another health care provider before disclosing PHI for
the treatment of an individual.
Answer False
5. During a charity golf tournament, a University vice chancellor was
injured and transported to a UNC clinic for treatment. The vice
chancellor's medical record may be accessed or viewed only
Answer B and C
1/
6
, 6. If you are at home or some other off-site location, any computers and
mobile devices you use to connect to University networks or systems
must meet the same minimum security standards that apply to your
work computer.
Answer True
7. Before treating a vice chancellor who was injured during a charity golf
tour- nament, the UNC clinic providing treatment requested her
complete medical records for review. The clinic's request must follow
the Minimum Necessary standard for purposes of treating the vice
chancellor
Answer False
8. To use or disclose PHI for research purposes, you must have
Answer Appropriate HIPAA
documentation, including an authorization or waiver of authorization
9. All University Units are covered by HIPAA.
Answer False
10. Which of the following are examples of best practices for
safeguarding the privacy and security of PHI?
Answer All the above
11. Which of the following best describes the University "workforce" for
2/
6
1. If you find a USB drive, do not insert it into a University machine,
even to identify the owner.
Answer True
2. Once a person has died, how long does HIPAA protect the decedent's
PHI?
Answer 50
Years
3. The HIPAA Security Rule requires what type of safeguards for ePHI?
Answer administrative, physical, and technical (all of the above)
4. A covered entity is required to enter into a business associate
agreement with another health care provider before disclosing PHI for
the treatment of an individual.
Answer False
5. During a charity golf tournament, a University vice chancellor was
injured and transported to a UNC clinic for treatment. The vice
chancellor's medical record may be accessed or viewed only
Answer B and C
1/
6
, 6. If you are at home or some other off-site location, any computers and
mobile devices you use to connect to University networks or systems
must meet the same minimum security standards that apply to your
work computer.
Answer True
7. Before treating a vice chancellor who was injured during a charity golf
tour- nament, the UNC clinic providing treatment requested her
complete medical records for review. The clinic's request must follow
the Minimum Necessary standard for purposes of treating the vice
chancellor
Answer False
8. To use or disclose PHI for research purposes, you must have
Answer Appropriate HIPAA
documentation, including an authorization or waiver of authorization
9. All University Units are covered by HIPAA.
Answer False
10. Which of the following are examples of best practices for
safeguarding the privacy and security of PHI?
Answer All the above
11. Which of the following best describes the University "workforce" for
2/
6
