HIPPA FINAL EXAM study guide with
complete solution
Within HIPAA how does Security differ from Privacy? - ANS Security defines safeguards for
ePHI versus Privacy which defines safeguards for PHI
Covered Entities may also use or disclose PHI without authorization in the following
circumstances EXCEPT:
A. Emergencies involving imminent threat to health or safety (to the individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the individual
E. Public health activities
F. Workers' compensation - ANS D. Medical research with information that identifies the
individual
Authorization is required for which of the following?
A. Minimum necessary disclosures of PHIB. Non-routine disclosures of PHIC. ReferralsD.
Treatment
B. Non-routine disclosures of PHI
C. Referrals
D. Treatment - ANS B. Non-routine disclosures of PHI
Penalties for non-compliance can be which of the following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal - ANS D. Civil and Criminal
Which of the following is NOT an example of physical security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption - ANS D. Data encryption
What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
, D. Apathy - ANS B. Education
Which of the following are examples of health care plans?
A. An HMO
B. The Medicaid program
C. Employer group health plans
D. All of the above - ANS D. All of the above
The Security Rule's requirements are organized into which of the following three categories:
A. Administrative, Non-Administrative, and Technical safeguards
B. Physical, Technical, and Non-Technical safeguards
C. Administrative, Physical, and Technical safeguards
D. Privacy, Security, and Electronic Transactions - ANS C. Administrative, Physical, and
Technical safeguards
Incidental Use and Disclosures refers to disclosures that are incidental to an otherwise
permitted use or disclosure.
A. True
B. False - ANS A. True
The acronym HIPAA stands for
A. Health Insurance Premium Administration Act
B. Health Information Portability and Accountability Act
C. Health Insurance Portability and Accountability Act
D. Health Information Profile Accountability Act - ANS C. Health Insurance Portability and
Accountability Act
What does PHI stand for?
A. Private Health Information
B. Privileged Health Information
C. Protected Health Information
D. Public Health Information - ANS C. Protected Health Information
What is the purpose of Physical security safeguards?
A. To provide security for physical facilities, computer systems, and associated equipment
B. To prevent unauthorized access across a communications network
C. To ensure security plans, policies, procedures, training, and contractual agreements exist
D. To protect, control, and monitor individual access to electronically stored information - ANS
A. To provide security for physical facilities, computer systems, and associated equipment
Which of these entities could be considered a business associate?
A. Billing service
B. Lawyer
C. Document and record storage company
complete solution
Within HIPAA how does Security differ from Privacy? - ANS Security defines safeguards for
ePHI versus Privacy which defines safeguards for PHI
Covered Entities may also use or disclose PHI without authorization in the following
circumstances EXCEPT:
A. Emergencies involving imminent threat to health or safety (to the individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the individual
E. Public health activities
F. Workers' compensation - ANS D. Medical research with information that identifies the
individual
Authorization is required for which of the following?
A. Minimum necessary disclosures of PHIB. Non-routine disclosures of PHIC. ReferralsD.
Treatment
B. Non-routine disclosures of PHI
C. Referrals
D. Treatment - ANS B. Non-routine disclosures of PHI
Penalties for non-compliance can be which of the following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal - ANS D. Civil and Criminal
Which of the following is NOT an example of physical security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption - ANS D. Data encryption
What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
, D. Apathy - ANS B. Education
Which of the following are examples of health care plans?
A. An HMO
B. The Medicaid program
C. Employer group health plans
D. All of the above - ANS D. All of the above
The Security Rule's requirements are organized into which of the following three categories:
A. Administrative, Non-Administrative, and Technical safeguards
B. Physical, Technical, and Non-Technical safeguards
C. Administrative, Physical, and Technical safeguards
D. Privacy, Security, and Electronic Transactions - ANS C. Administrative, Physical, and
Technical safeguards
Incidental Use and Disclosures refers to disclosures that are incidental to an otherwise
permitted use or disclosure.
A. True
B. False - ANS A. True
The acronym HIPAA stands for
A. Health Insurance Premium Administration Act
B. Health Information Portability and Accountability Act
C. Health Insurance Portability and Accountability Act
D. Health Information Profile Accountability Act - ANS C. Health Insurance Portability and
Accountability Act
What does PHI stand for?
A. Private Health Information
B. Privileged Health Information
C. Protected Health Information
D. Public Health Information - ANS C. Protected Health Information
What is the purpose of Physical security safeguards?
A. To provide security for physical facilities, computer systems, and associated equipment
B. To prevent unauthorized access across a communications network
C. To ensure security plans, policies, procedures, training, and contractual agreements exist
D. To protect, control, and monitor individual access to electronically stored information - ANS
A. To provide security for physical facilities, computer systems, and associated equipment
Which of these entities could be considered a business associate?
A. Billing service
B. Lawyer
C. Document and record storage company
