Free HIPAA HIO-201 Sample Questions

Question 1

Physical access to workstations such as, whether or not patients can easily see a screen with PHI on it, is addressed by:

A. Workstation Use
B. Workstation Security
C. Sanction Policy
D. Termination Procedures
E. Facility Security Plan

Answer: B

Question 2

This transaction is typically used in two modes: update and full replacement:

A. Premium Payment.
B. Health Care Claim. 
C. First Report of Injury.
D. Health Plan Enrollment and Dis-enrollment.
E. Coordination of Benefits. 

Answer: D

Question 3

Select the correct statement regarding the administrative requirements of the HIPAA privacy rule.

A. A covered entity must designate, and document, a privacy official, security officer and a HIPAAcompliance officer
B. A covered entity must designate, and document, the same person to be both privacyofficial and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations.
C. A covered entity must implement and maintain written or electronic policies and procedures with respect to PHI that are designed to comply with HIPM standards, implementation specifications and other requirements.
D. A covered entity must train, and document the training of, at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date
E. A covered entity must retain the document required by the regulations for a period often years from the time of it's creation or the time it was last in effect, which ever is later. 

Answer: C

Question 4

Once a year, a team at ABC Hospital reviews environmental and operational changes that may have had an impact on the security of electronic PHI. This is an example of:

A. Transmission Security
B. Evaluation
C. Audit Controls
D. Integrity
E. Security Management Process

Answer: B

Question 5

Which of the following is NOT a correct statement regarding HIPAA requirements? 

A. A coveted entity must change its policies and procedures to complywith HIPPPregulations, standards, and implementation specifications. 
B. A covered entity must reasonably safeguard PHI from any intentional or unintentional use or disclosure that is in violation of the regulations.
C. A covered entity must provide a process for individuals to make complaints concerning privacy issues
D. A covered entity must document all complaints received regarding privacy issues
E. The Privacy Rule requires that the covered entity has a documented security policy. 

Answer: E