HIPAA Certified HIPAA Professional - HIO-201 Exam Practice Test

A. A covered entity must have and apply sanction against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

B. A covered entity must designate, and document,
a privacy officer, and a HIPAA compliance officer,

C. A covered entity does not need to train all members of its workforce whose functions are affected by a change in policy or procedure

D. A covered entity must require the individual to sign the Notice of Privacy Practices prior to delivering any treatment related service,

E. A covered entity may require individuals to waive their rights.

A. Security requirements.

B. Is another name for the Security Rule.

C. Representation of all health care claims.

D. Privacy requirements.

E. Encrypting all information for use over a P1<1.

A. Emergency Mode Operations Plan

B. Data Backup Plan

C. Disaster Recovery Plan

D. Facility Access Controls

E. Security Incident Procedures

A. "Use" refers to utilizing, examining, or analyzing IIHI within the covered entity

B. "Use" refers to the movement
of de-identified
information
within an organization.

C. "Use" refers to adding, modifying and deleting the PHI by other covered entities.

D. "Use" refers to the movement of information outside the entity holding the information.

E. 'Use" refers to the release, transfer, or divulging of IIHI between various covered entities.

A. Access Control

B. Transmission Security

C. Person or Entity Authentication

D. integrity

E. Audit Control

A. A covered entity must designate, and document, the same person to be both privacy official and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations.

B. A covered entity must implement and maintain written or electronic policies and procedures with respect to P1-Il that are designed to comply with HIPAA standards, implementation specifications and other requirements.

C. A covered entity must retain the document required by the regulations for a period often years from the time of it's creation or the time it was last in effect, which ever is later

D. A covered entity must designate, and document, a privacy official, security officer and a HIPA8 compliance officer

E. A covered entity must train, and document the training of. at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date.

A. Response and Reporting

B. Termination Procedures

C. Automatic Logoff

D. Emergency Access Procedure

E. Contingency Operations

A. Authorization and/or Supervision

B. Isolating Health care Clearing House Functions

C. Mechanism to Authenticate Electronic PHI

D. Encryption

E. Applications and Data Criticality Analysis

A. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

B. A covered entity must provide maximum
safeguards
for
PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit
incidental uses and disclosures
made
pursuant to permitted
or required use or disclosure.

C. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

D. A covered entity may require individuals to waive their rights.

E. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.