Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 18

Question list

List of questions

Question 171

(0)

Part of Administrative Safeguards under HIPAA is Workforce Security measures. Which is NOT a key element of a Workforce Security Element?

Question 172

(0)

What is impact of the HITECH Act in relation to HIPAA requirements and maintaining client records electronically?

Question 173

(0)

Which is NOT one of the three major categories of Security Safeguards identified by HIPAA in the regulations?

Question 174

(0)

A therapist's client requests an accounting of disclosures of their medical record. What should that therapist do?

Question 175

(0)

Which is NOT consistent with Personnel Clearance Procedures needed to comply with HIPAA Administrative Safeguards?

Question 176

(0)

Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis. Which element is NOT part of ri

Question 177

(0)

Under the HIPAA Privacy Rule, who is NOT considered a covered entity?

Question 178

(0)

Which is NOT an element of Security Awareness Training?

Question 179

(0)

Under HIPAA Administrative Simplification, what must covered entities do in relation to submission of claims?

Question 180

(0)

As of 2010, what is different with regard to business associates and HIPAA protections?

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

You always abide by the HIPAA privacy rule.

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

Question 171

Part of Administrative Safeguards under HIPAA is Workforce Security measures. Which is NOT a key element of a Workforce Security Element?

Identification of barriers to client electronic Personal Health Information

Clearance Procedures

Termination Procedures

Authorization and Supervision

Show Answer Comment (0)

Question 172

What is impact of the HITECH Act in relation to HIPAA requirements and maintaining client records electronically?

There is a push toward paper records to prevent the hacking and electronic violation of electronic records, which is easily done without detection

Providers must now maintain client records electronically, but may continue to provide clients a paper copy when access is requested

There is no requirement to maintain client records electronically, but clients have the right to insist on electronic access to an electronic health record, if it exists

Electronic records now face intensified scrutiny, requiring practitioners to implement more sophisticated software and detailed accounting of records Your answer: Electronic records now face intensified scrutiny, requiring practitioners to implement more sophisticated software and detailed accounting of records

Show Answer Comment (0)

Question 173

Which is NOT one of the three major categories of Security Safeguards identified by HIPAA in the regulations?

Administrative

Professional

Physical

Technical

Show Answer Comment (0)

Question 174

A therapist's client requests an accounting of disclosures of their medical record. What should that therapist do?

Pull the file with the accounting of disclosures for the client

Explain that disclosures are allowed as long as the client's information is deidentified or the client consents

Refer the client to the agency's Privacy Officer

Review the client's releases of information with the client

Show Answer Comment (0)

Question 175

Which is NOT consistent with Personnel Clearance Procedures needed to comply with HIPAA Administrative Safeguards?

Current database of what personnel has access to buildings, offices, filing cabinets, computers, and databases

New employees, contractors, and unpaid staff have references checked

Appropriate exit interviews for outgoing personnel

Discretion given to who does and does not have access to secure office spaces or keys/door codes

Show Answer Comment (0)

Question 176

Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis. Which element is NOT part of risk analysis?

Developing adequate communication with all contractors, interns, and staff in relation to the agency's security policies

Assessing vulnerabilities of integrity and availability of electronic personal health information

Determining how client electronic personal health information confidentiality may be compromised

Determining barriers in existence to needed client electronic personal health information

Show Answer Comment (0)

Question 177

Under the HIPAA Privacy Rule, who is NOT considered a covered entity?

Clearinghouse

Client patient

Health practitioner

Third party

Show Answer Comment (0)

Question 178

Which is NOT an element of Security Awareness Training?

Determination that all staff will receive security training

Policy related to documentation of all security training

Procedural issues of who will terminate user access

Training on vulnerabilities of the electronic Protected Health Information policies

Show Answer Comment (0)

Question 179

Under HIPAA Administrative Simplification, what must covered entities do in relation to submission of claims?

Provide standardized format in electronic or paper form

Request permission for use of specific privacy software

Purchase and install approved privacy software

Provide standardized electronic claim formatting

Show Answer Comment (0)

Question 180

As of 2010, what is different with regard to business associates and HIPAA protections?

Business associates now must notify clients directly of privacy breaches, as if they were a covered entity

There are no significant changes in business associate practices

Covered entities have increase responsibilities to ensure the practice of business associates

Business associates are no longer required to notify clients directly of privacy breaches

Show Answer Comment (0)

Total 305 questions

16 17 18 19 20

Go to page: of 31