1|Page
AHIMA RHIT Practice Exam With
Verified Answers 2026
Psychotherapy Notes - correct-answer-Under HIPAA privacy regulations, which
part of the health record does a patient not have the right to access within his/her
own health record?
Confidentiality - correct-answer-The responsibility to use, disclose, or release
information related to private matters is called
Risk Analysis - correct-answer-Under the HIPAA security rule an organization must
identify potential risks and vulnerabilities to the confidentiality, integrity and
availability of electronic protected health information. This process is referred as
a
,2|Page
privacy screen - correct-answer-What is a safeguard that is used to prevent
incidental disclosures of PHI when an employee is working on a computer in a
public area?
Protected Health Information - correct-answer-Individually identifiable health
information that is transmitted by electronic media, maintained in any electronic
medium, or in any other form or medium is defined as
Designated record set - correct-answer-The HIPAA Privacy Rule requires which of
the following to describe what is maintained as part of the health record
Audit Trails and Audit Logs - correct-answer-Covered entities must perform
security audits using which of the following tools?
, 3|Page
Flashing pagers (such as ones which are used in restaurants) - correct-answer-
Which of the following is an example of a way to decrease the risk of violating
HIPAA Privacy Rules in a patient waiting area?
privacy - correct-answer-The right of an individual to have freedom from
observation or intrusion into their private affairs and rights to maintain control
over certain personal health information is defined as
healthcare operations - correct-answer-When in-house counsel is conducting the
defense of a malpractice claim, an authorization is not required because review of
the record would be covered under
Right to Request Confidential Communication - correct-answer-What is it called
under HIPAA when a patient requests medical and/or billing information be
mailed to an alternate address?
AHIMA RHIT Practice Exam With
Verified Answers 2026
Psychotherapy Notes - correct-answer-Under HIPAA privacy regulations, which
part of the health record does a patient not have the right to access within his/her
own health record?
Confidentiality - correct-answer-The responsibility to use, disclose, or release
information related to private matters is called
Risk Analysis - correct-answer-Under the HIPAA security rule an organization must
identify potential risks and vulnerabilities to the confidentiality, integrity and
availability of electronic protected health information. This process is referred as
a
,2|Page
privacy screen - correct-answer-What is a safeguard that is used to prevent
incidental disclosures of PHI when an employee is working on a computer in a
public area?
Protected Health Information - correct-answer-Individually identifiable health
information that is transmitted by electronic media, maintained in any electronic
medium, or in any other form or medium is defined as
Designated record set - correct-answer-The HIPAA Privacy Rule requires which of
the following to describe what is maintained as part of the health record
Audit Trails and Audit Logs - correct-answer-Covered entities must perform
security audits using which of the following tools?
, 3|Page
Flashing pagers (such as ones which are used in restaurants) - correct-answer-
Which of the following is an example of a way to decrease the risk of violating
HIPAA Privacy Rules in a patient waiting area?
privacy - correct-answer-The right of an individual to have freedom from
observation or intrusion into their private affairs and rights to maintain control
over certain personal health information is defined as
healthcare operations - correct-answer-When in-house counsel is conducting the
defense of a malpractice claim, an authorization is not required because review of
the record would be covered under
Right to Request Confidential Communication - correct-answer-What is it called
under HIPAA when a patient requests medical and/or billing information be
mailed to an alternate address?
