RHIA Domain 2 Test Questions with
Correct Answers
Which of the following measures should a health care facility incorporate into its
institution-wide security plan to protect the confidentiality of the patient record?
use of unique computer passwords, key cares, or biometric identification
All of these answers apply.
locked access to data processing and record areas
verification of employee identification - Answer-all of these answers apply
Spoliation is the term that refers to the wrongful destruction of evidence or the failure to
preserve property, which addresses which of the following methods of discovery?
deposition
interrogatories
request for admissions
e-discovery - Answer-e-discovery
Mary processed a request for information and mailed it out last week. Today, the
requestor, an attorney, called and said that all of the requested information was not
provided. Mary pulls the documentation, including the authorization and what was sent.
She believes that she sent everything that was required based on what was requested.
She confirms this with her supervisor. The requestor still believes that some extra
documentation is required. Given the above information, which of the following
statements is true?
- Mary is required to release the extra documentation because the requestor knows
what is needed.
- Mary is not required to release the additional information because her administrator
agrees with her.
- Mary is required to release the extra documentation because, in the customer service
program for the facility, the customer is always right.
- Mary is not required to release the extra documentation bec - Answer-- Mary is not
required to release the extra documentation because the facility has the right to interpret
a request and apply the minimum standard rule.
, You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, the written answers to questions you have been asked to
provide are known as a(n)
interrogatory.
deposition.
physical and mental examination.
court order. - Answer-interrogatory.
Elements of a breach notification should include all of the following EXCEPT
a description of what occurred, including the date of the breach and the date the breach
was discovered.
steps individuals should take in order to protect themselves.
the name of the individual within the entity responsible for the breach so that a civil
claim can be filed against the individual.
what the entity is doing to investigate, mitigate, and prevent future occurrences. -
Answer-the name of the individual within the entity responsible for the breach so that a
civil claim can be filed against the individual.
When patients are able to obtain a copy of their health record, this is an example of
which of the following?
a required standard
a patient right
a preemption
an addressable requirement - Answer-a patient right
Before we can go any further with our risk analysis, we need to determine what
systems/information need to be protected. This step is known as
Correct Answers
Which of the following measures should a health care facility incorporate into its
institution-wide security plan to protect the confidentiality of the patient record?
use of unique computer passwords, key cares, or biometric identification
All of these answers apply.
locked access to data processing and record areas
verification of employee identification - Answer-all of these answers apply
Spoliation is the term that refers to the wrongful destruction of evidence or the failure to
preserve property, which addresses which of the following methods of discovery?
deposition
interrogatories
request for admissions
e-discovery - Answer-e-discovery
Mary processed a request for information and mailed it out last week. Today, the
requestor, an attorney, called and said that all of the requested information was not
provided. Mary pulls the documentation, including the authorization and what was sent.
She believes that she sent everything that was required based on what was requested.
She confirms this with her supervisor. The requestor still believes that some extra
documentation is required. Given the above information, which of the following
statements is true?
- Mary is required to release the extra documentation because the requestor knows
what is needed.
- Mary is not required to release the additional information because her administrator
agrees with her.
- Mary is required to release the extra documentation because, in the customer service
program for the facility, the customer is always right.
- Mary is not required to release the extra documentation bec - Answer-- Mary is not
required to release the extra documentation because the facility has the right to interpret
a request and apply the minimum standard rule.
, You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, the written answers to questions you have been asked to
provide are known as a(n)
interrogatory.
deposition.
physical and mental examination.
court order. - Answer-interrogatory.
Elements of a breach notification should include all of the following EXCEPT
a description of what occurred, including the date of the breach and the date the breach
was discovered.
steps individuals should take in order to protect themselves.
the name of the individual within the entity responsible for the breach so that a civil
claim can be filed against the individual.
what the entity is doing to investigate, mitigate, and prevent future occurrences. -
Answer-the name of the individual within the entity responsible for the breach so that a
civil claim can be filed against the individual.
When patients are able to obtain a copy of their health record, this is an example of
which of the following?
a required standard
a patient right
a preemption
an addressable requirement - Answer-a patient right
Before we can go any further with our risk analysis, we need to determine what
systems/information need to be protected. This step is known as
