Question 1

Select the correct statement regarding the Notice of Privacy Practices.

Accepted Answer

Direct Treatment Providers are required to make a good faith effort to obtain a patient's written acknowledgment of the Notice of Privacy Practices, but it does not need to be notarized.

Question 2

Which of the following is NOT a correct statement regarding HIPAA requirements?

Accepted Answer

The Privacy Rule under HIPAA does not specifically require a documented security policy; it focuses on the protection of PHI and privacy practices. Security policies are more directly addressed under the HIPAA Security Rule.

Question 3

HIPAA establishes a civil monetary penalty for violation of the Administrative Simplification provisions. The penalty may not be more than:

Accepted Answer

The Health Insurance Portability and Accountability Act (HIPAA) sets a civil monetary penalty of up to $25,000 per person per violation of a single standard for a calendar year for violations of the Administrative Simplification provisions.

Question 4

Physical access to workstations such as, whether or not patients can easily see a screen with PHI on it, is addressed by:

Accepted Answer

Workstation Security addresses the physical safeguards to ensure that unauthorized individuals cannot access workstations that contain PHI.

Question 5

Which of the following is a required implementation specification associated with the Contingency Plan Standard?

Accepted Answer

The Emergency Mode Operation Plan is a required implementation specification under the Contingency Plan Standard, which is part of the HIPAA Security Rule. It ensures that critical business processes continue during and after an emergency.

Question 6

Select the best example of a business associate (if they had access to PHI).

Accepted Answer

Accountants are considered business associates if they have access to PHI because they are external entities providing services to the covered entity, unlike internal departments or employees.

Question 7

An Electronic Medical Record (EMR):

Accepted Answer

An Electronic Medical Record (EMR) is a digital version of a patient's paper chart and contains the medical and treatment history of the patients in one practice.

Question 8

Which HIPAA Title is fueling initiatives within organizations to address health care priorities in the areas of transactions, privacy, and security'?

Accepted Answer

Title II of HIPAA addresses the administrative simplification provisions, which include standards for transactions, privacy, and security of health information.

Question 9

Select the best statement regarding the definition of a business associate of a covered entity. A business associate is:

Accepted Answer

A business associate is a person or entity that performs functions or activities on behalf of, or provides certain services to, a covered entity that involve the use or disclosure of protected health information (PHI).

Question 10

Select the correct statement regarding the requirements of HIPAA regulations.

Accepted Answer

HIPAA regulations require covered entities to have and apply sanctions against workforce members who fail to comply with privacy policies and procedures.

Question 11

Formal, documented instructions for reporting security breaches are referred to as:

Accepted Answer

Response and Reporting refers to the formal, documented instructions for reporting security breaches, outlining the steps to be taken when a breach occurs.

Question 12

Workstation Use falls under which Security Rule area?

Accepted Answer

Workstation Use is part of Physical Safeguards, which involves policies and procedures to manage the physical protection of workstations and the data they handle.

Question 13

Select the best statement regarding de-identified information (DII).

Accepted Answer

De-identified information is individually identifiable health information (IIHI) that has had all patient identifiable information removed, making it no longer considered protected health information (PHI).

Question 14

The security standard that has the objective of implementing mechanisms to record and examine system activity is:

Accepted Answer

Audit Controls are designed to record and examine system activity to ensure security and compliance.

Question 15

Within the context of a transaction set, the fields that comprise a hierarchical level are referred to as a(n):

Accepted Answer

Within a transaction set, loops represent groups of related segments that repeat a defined number of times. The fields that make up each loop are hierarchical in nature, with some fields only existing within others. Therefore, loops are the fields that comprise a hierarchical level within a transaction set. The other answer choices are not accurate descriptions of this concept.

Question 16

A key date in the transaction rule timeline is:

Accepted Answer

The answer of A key date in the transaction rule...

Question 17

Select the FALSE statement regarding violations of the HIPAA Privacy rule.

Accepted Answer

The answer of Select the FALSE statement regarding violations of...

Question 18

One mandatory requirement for the Notice of Privacy Practices set by HIPAA regulations is:

Accepted Answer

The Notice of Privacy Practices must inform individuals of their rights under HIPAA, including the rights to inspect, copy, amend their PHI, and obtain an accounting of disclosures.

Question 19

Select the best statement regarding the definition of the term "use" as used by the HIPAA regulations.

Accepted Answer

"Use" in HIPAA refers to the handling of individually identifiable health information (IIHI) within the covered entity, including utilizing, examining, or analyzing it.

Question 20

The transaction number assigned to the Payment Order/Remittance Advice transaction is:

Accepted Answer

The transaction number 820 is commonly associated with Payment Order/Remittance Advice in electronic data interchange (EDI) standards.

Exam 1: Certified HIPAA Professional (CHP)