HIO-201無料問題集「HIPAA Certified HIPAA Professional」

質問 1

The Privacy Rule has broad
administrative
requirements.
Which
one of the following requirements is defined under the Privacy Rule?

（A）Use biometrics to authenticate transactions.

（B）Deploy tokens and smart cards to all medical personnel.

（C）Verify that business associates treat patient information respectfully.

（D）Document termination procedures.

（E）Designate a security officer.

正解：C 解答を投票する

質問 2

Select the correct statement regarding
the requirements for
oral communication in the HIPAA regulations.

（A）Covered entities must reasonably safeguard PHI, including oral communications, from any intentional or unintentional use or disclosure that is in violation of the Privacy Rule.

（B）Covered entities must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of de-Identified data

（C）The Privacy Rule will often
require major structural changes, such as soundproof rooms
and encryption
of telephone systems,
to provide the "reasonable safeguards" of oral communications required by the regulations.

（D）Covered entities are prohibited from marketing through oral communications. D.
The Privacy
Rule requires
covered entities
to document any
information, including oral communications, which is used or disclosed for TPO purposes.

正解：A 解答を投票する

質問 3

Once a year, a team at ABC Hospital reviews environmental and operational changes that may have had an impact on the security of electronic PHI. This is an example of:

（A）Integrity

（B）Evaluation

（C）Security Management Process

（D）Transmission Security

（E）Audit Controls

正解：B 解答を投票する

質問 4

As part of their HIPAA compliance process, a small doctor's office formally puts the office manager in charge of security related issues, This complies with which security rule standard?

（A）Access Control

（B）Security incident Procedures

（C）Security Management Process

（D）Assigned Security Responsibility

（E）Security Awareness and Training

正解：D 解答を投票する

質問 5

The security standard that has the objective of implementing
mechanisms to record and examine system activity is:

（A）Person or Entity Authentication

（B）Authorization Controls

（C）Access Control

（D）Data Authentication

（E）Audit Controls

正解：E 解答を投票する

質問 6

ANSI Xl 2 specifies the use of a (an):

（A）Envelope structure for transactions.

（B）Health plan identifier.

（C）Employer identifier.

（D）Simple flat file structure for transactions.

（E）Provider identifier.

正解：A 解答を投票する

質問 7

Physical access to workstations such as, whether or not patients can easily see a screen with PHI on it, is addressed by:

（A）Sanction Policy

（B）Workstation Security

（C）Workstation Use

（D）Facility Security Plan

（E）Termination Procedures

正解：B 解答を投票する

質問 8

Select the FALSE statement
regarding the responsibilities of providers with direct treatment relationships under HIPAA's privacy rule.

（A）Obtain a written authorization for each and every TPO event.

（B）Obtain a written authorization for any disclosure or use of PHI other than for the purposes of TPO.

（C）Establish procedures to receive complaints relating to the handling of PHI.

（D）Provide access to the PHI that it maintains to the
individual and
make reasonable efforts to correct possible errors when requested by the individual.

（E）Provide the individual with a Notice of Privacy Practices that describes the use of PHI.

正解：A 解答を投票する

質問 9

The transaction
number
assigned
to the
Payment
Order/Remittance Advice transaction is:

（A）270

（B）834

（C）278

（D）836

（E）820

正解：E 解答を投票する

質問 10

Dr. Jones, a practicing dentist, has decided to directly implement an EDI solution to comply with the HIPAA transaction rule. Dr. Jones employs a small staff of 4 persons for whom he has sponsored a health care plan. Dr. Jones has revenues of less than $1 million. Select the code set that Dr. Jones should consider supporting for his EDI system.

（A）837 - Professional

（B）834

（C）CPT4

（D）837 - Institutional

（E）CDT

正解：E 解答を投票する

質問 11

A doctor is sending a patient's lab work to a lab That is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient, In order to use or disclose PHI, the lab MUST.

（A）Request that the patient sign the lab's Notice of Privacy Practices

（B）Verify that the doctor's Notice of Privacy Practices has not expired.

（C）Do nothing more - the activity is covered by the doctor's Notice of Privacy Practices,

（D）Obtain a specific authorization from the patient.

（E）Obtain a specific authorization from the doctor.

正解：C 解答を投票する

質問 12

The Integrity security standard has one addressable
implementation
standard which is:

（A）Isolating Health care Clearing House Functions

（B）Applications and Data Criticality Analysis

（C）Mechanism to Authenticate Electronic PHI

（D）Authorization and/or Supervision

（E）Encryption

正解：C 解答を投票する

質問 13

The transaction pair used for requesting and responding to a health claim status inquiry is:

（A）837/835

（B）2701271

（C）8341834

（D）2761277

（E）2781278

正解：D 解答を投票する

質問 14

The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:

（A）Situations where the patient has already signed the covered entity's Notice of Privacy Practices.

（B）The situation where the patient has signed the Notice of Privacy Practices of the marketer.

（C）A face-to-face encounter with the sales person of a company that provides drug samples.

（D）A communication involving a promotional gift of nominal value.

（E）Situations where the marketing is for a drug or treatment could improve the health of that individual.

正解：D 解答を投票する

HIO-201 無料問題集「HIPAA Certified HIPAA Professional」

弊社を連絡する

関連リンク

トップ試験