HIO-201 Practice Questions

A.  

Security Incident Procedures

B.  

Integrity

C.  

Person or Entity Authentication

D.  

Assigned Security Responsibility

E.  

Business Associate Contracts and other Arrangements

A.  

270

B.  

835

C.  

837 - Professional

D.  

CPT-4

E.  

UB-92

A.  

Title IX: Employer sponsored group health plans.

B.  

Title III: Tax-related Health Provisions.

C.  

Title II: Administrative Simplification.

D.  

Title I: Health Care Insurance Access, Portability, and Renewability.

E.  

Title V: Revenue Offsets.

A.  

Security Awareness and Training

B.  

Security Incident Procedure

C.  

Information Access Management

D.  

Security Management Process

E.  

Contingency Plan

A.  

De-identified information is IIHI that has had all individually (patient) identifiable information removed.

B.  

Oil may be used only with the authorization of the individual.

C.  

Oil remains PHI.

D.  

The only approved method of de-id entitle at ion is to have a person with “appropriate knowledge and experience” de-identify the IIHI.

E.  

All PHI use and disclosure requirements do not apply to re-identified DII.

A.  

Accountants

B.  

Hospital employees

C.  

A covered entity's internal IT department

D.  

CEO of the covered entity

E.  

The covered entity's billing service department

A.  

The types of financial information to be disclosed.

B.  

The specific individuals or entities to which disclosure would be made.

C.  

The types of persons who would receive PHI.

D.  

The conditions that would not apply to disclosure of PHI

E.  

The criteria for reviewing requests for routine disclosure of PHI.

A.  

277.

B.  

278.

C.  

271.

D.  

82.

E.  

270.

A.  

"Disclosure" refers lo employing IIHI within a covered entity.

B.  

"Disclosure" refers to utilizing, examining, or analyzing IIHI within a covered entity.

C.  

"Disclosure" refers to the release, transfer, or divulging of IIHI to another covered entity.

D.  

"Disclosure" refers to the movement of information within an organization.

E.  

"Disclosure" refers to the sharing of information within the covered entity.

A.  

A coveted entity must change its policies and procedures to complywith HIPPPregulations, standards, and implementation specifications.

B.  

A covered entity must reasonably safeguard PHI from any intentional or unintentional use or disclosure that is in violation of the regulations.

C.  

A covered entity must provide a process for individuals to make complaints concerning privacy issues.

D.  

A covered entity must document all complaints received regarding privacy issues.

E.  

The Privacy Rule requires that the covered entity has a documented security policy.