HIPAA and Privacy Act Training (DHA-US001) Test Questions with
Answers Graded A+
Select all that apply: In which of the following circumstances
must an individual be given the opportunity to agree or object to
the use and disclosure of their PHI? - ANSWER -Both A Technical safeguards are: - ANSWER -Information
and C technology and the associated policies and procedures that are
used to protect and control access to ePHI
-Before PHI directly relevant to a person's involvement with the
individual's care or payment of health care is shared with that
person
A Privacy Impact Assessment (PIA) is an analysis of how
- Before their information is included in a facility directory information is handled: - ANSWER -All of the above
Which of the following statements about the HIPAA Security A breach as defined by the DoD is broader than a HIPAA breach
Rule are true? - ANSWER -All of the above (or breach defined by HHS). - ANSWER -True
A covered entity (CE) must have an established complaint Which of the following are breach prevention best practices? -
process. - ANSWER -True ANSWER -All of the above
The e-Government Act promotes the use of electronic An incidental use or disclosure is not a violation of the HIPAA
government services by the public and improves the use of Privacy Rule if the covered entity (CE) has: - ANSWER -All
information technology in the government. - ANSWER - of the above
True
Under the Privacy Act, individuals have the right to request
When must a breach be reported to the U.S. Computer amendments of their records contained in a system of records. -
Emergency Readiness Team? - ANSWER -Within 1 hour ANSWER -True
of discovery
Which HHS Office is charged with protecting an individual
Which of the following statements about the Privacy Act are patient's health information privacy and security through the
true? - ANSWER -All of the above enforcement of HIPAA? - ANSWER -Office for Civil Rights
(OCR)
What of the following are categories for punishing violations of
federal health care laws? - ANSWER -All of the above Physical safeguards are: - ANSWER -Physical measures,
including policies and procedures that are used to protect
electronic information systems and related buildings and
equipment, from natural and environmental hazards, and
Which of the following are common causes of breaches? - unauthorized intrusion
ANSWER -All of the above
Which of the following would be considered PHI? -
Which of the following are fundamental objectives of information ANSWER -An individual's first and last name and the
security? - ANSWER -All of the above medical diagnosis in a physician's progress report
If an individual believes that a DoD covered entity (CE) is not The minimum necessary standard: - ANSWER -All of the
complying with HIPAA, he or she may file a complaint with the: - above
ANSWER -All of the above
1/2
Answers Graded A+
Select all that apply: In which of the following circumstances
must an individual be given the opportunity to agree or object to
the use and disclosure of their PHI? - ANSWER -Both A Technical safeguards are: - ANSWER -Information
and C technology and the associated policies and procedures that are
used to protect and control access to ePHI
-Before PHI directly relevant to a person's involvement with the
individual's care or payment of health care is shared with that
person
A Privacy Impact Assessment (PIA) is an analysis of how
- Before their information is included in a facility directory information is handled: - ANSWER -All of the above
Which of the following statements about the HIPAA Security A breach as defined by the DoD is broader than a HIPAA breach
Rule are true? - ANSWER -All of the above (or breach defined by HHS). - ANSWER -True
A covered entity (CE) must have an established complaint Which of the following are breach prevention best practices? -
process. - ANSWER -True ANSWER -All of the above
The e-Government Act promotes the use of electronic An incidental use or disclosure is not a violation of the HIPAA
government services by the public and improves the use of Privacy Rule if the covered entity (CE) has: - ANSWER -All
information technology in the government. - ANSWER - of the above
True
Under the Privacy Act, individuals have the right to request
When must a breach be reported to the U.S. Computer amendments of their records contained in a system of records. -
Emergency Readiness Team? - ANSWER -Within 1 hour ANSWER -True
of discovery
Which HHS Office is charged with protecting an individual
Which of the following statements about the Privacy Act are patient's health information privacy and security through the
true? - ANSWER -All of the above enforcement of HIPAA? - ANSWER -Office for Civil Rights
(OCR)
What of the following are categories for punishing violations of
federal health care laws? - ANSWER -All of the above Physical safeguards are: - ANSWER -Physical measures,
including policies and procedures that are used to protect
electronic information systems and related buildings and
equipment, from natural and environmental hazards, and
Which of the following are common causes of breaches? - unauthorized intrusion
ANSWER -All of the above
Which of the following would be considered PHI? -
Which of the following are fundamental objectives of information ANSWER -An individual's first and last name and the
security? - ANSWER -All of the above medical diagnosis in a physician's progress report
If an individual believes that a DoD covered entity (CE) is not The minimum necessary standard: - ANSWER -All of the
complying with HIPAA, he or she may file a complaint with the: - above
ANSWER -All of the above
1/2
