HIO-201 HIPAA Exam Questions and Free Practice Test

Question 31

Select the FALSE statement regarding the administrative requirements of the HIPAA privacy rule.

A. A coveted entity must mitigate, to the extent practicable, any harmful effect that it becomes aware of from the use or disclosure of PHI in violation of its policies and procedures or HIPAA regulations.

B. A covered must not in any way intimidate, retaliate, or discriminate against any individual or other entity, which files a compliant.

C. A covered entity may not require individuals to waive their rights as a condition for treatment, payment, enrollment in a health plan, or eligibility for benefits

D. A covered entity must retain the documents required by the regulations for a period of six years.

E. A covered entity must change its policies andprocedures to comply with HIPAAregulations no later than three years after the change in law.

Correct Answer:E

Question 32

Ensuring that physical access to electronic information systems and the facilities in which they are housed is limited, is addressed under which security rule standard?

A. Security Management Process

B. Transmission Security

C. Person or Entity Authentication

D. Facility Access Controls

E. Information Access Management

Correct Answer:D

Question 33

When using the Health Care Eligibility Request/Response (270/271), if a provider submits certain minimum information and the patent/subscriber is in their database, the payer must generate a response. Which of the following is one of the minimum information fields?

A. Patient's country of birth

B. Patient's pet name

C. Patient's weight

D. Patient's address

E. Patient's date of birth

Correct Answer:E

Question 34

Which of the following is NOT a HIPAA national health care identifier?

A. National Provider Identifier (NPI)

B. Social Security Number (SSN)

C. National Health Plan Identifier (PlanID)

D. National Employer Identifier for Health Care (EIN)

E. National Health Identifier for Individuals (NHII)

Correct Answer:B

Question 35

Select the correct statement regarding code sets and identifiers.

A. A covered entity must use the applicable code set that is valid at the time the transaction is initiated.

B. April 14, 2003 is the compliance date for implementation of the National Provider Identifier.

C. CMS is responsible for updating the CPT-4 code set.

D. An organization that assigns NPIs is referred to as National Provider for Identifiers.

E. HHS assigns the Employer Identification Number (EIN), which has been selected as the National Provider Identifier for Health Care.

Correct Answer:A

Question 36

A business associate must agree to:

A. Report to the covered entity any security incident of which it becomes aware

B. Ensure the complete safety of all electronic protected health information

C. Compensate the covered entity for penalties incurred because of the business associate's security incidents.

D. Register as a business associate with HHS

E. Submit to periodic audits by HHS of critical systems containing electronic protected health information

Correct Answer:A

START HIO-201 EXAM