Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 19

Question list

List of questions

Question 181

(0)

HIPAA requires a response and reporting of security incidents. What is required when an organization has an attempted unauthorized access of protected health information?

Question 182

(0)

Under Title II of The Health Insurance Portability and Accountability Act, the administrative simplification provision:

Question 183

(0)

Question 184

(0)

Title I of The Health Insurance Portability and Accountability Act protects:

Question 185

(0)

Do the same requirements apply to both medical records and mental health records?

Question 186

(0)

HIPAA's Administrative Simplification procedures were prompted by the desire to:

Question 187

(0)

___________ is one of the main objectives of HIPAA.

Question 188

(0)

If a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, is the entity in compliance with HIPAA guidelines?

Question 189

(0)

If a client requests a restriction for disclosure of a certain part of their PHI to a health plan, the health care provider is:

Question 190

(0)

February 17, 2010 was the effective date for updated changes to HIPAA triggered by the Health Information Technology for Economic and Clinical Health Act (HITECH). As part of HITECH, what must provi

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

You always abide by the HIPAA privacy rule.

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

Question 181

HIPAA requires a response and reporting of security incidents. What is required when an organization has an attempted unauthorized access of protected health information?

HIPAA must be notified

Nothing is required of an attempted unauthorized access

The organization must respond and notify the appropriate parties

Federal authorities must be notified

Show Answer Comment (0)

Question 182

Under Title II of The Health Insurance Portability and Accountability Act, the administrative simplification provision:

Forbids individual health plans from denying coverage or imposing preexisting condition exclusions

Creates opportunities for fraud and abuse within the health care system

Requires the establishment of national standards for electronic health care transactions

Protects health insurance coverage for workers and their families

Show Answer Comment (0)

Question 183

What data-related concept identifies or characterizes entities and events in a manner that facilitates an administrative process?

Non-medical or Administrative Code Sets

Data Mapping

Medical or Clinical Code Sets

Data Elements

Show Answer Comment (0)

Question 184

Title I of The Health Insurance Portability and Accountability Act protects:

Electronic health care transactions

Client's medical records

Restrictions that a group health plan can place on benefits for preexisting conditions

Health insurance coverage for workers and their families

Show Answer Comment (0)

Question 185

Do the same requirements apply to both medical records and mental health records?

No, a client is not allowed to have access to any part of a mental health record, with or without psychotherapy notes

Generally, including conditioning enrollment in a plan on the client granting authorization for disclosure of psychotherapy notes

Yes, and client is entitled to all of the same information in both settings

Generally, psychotherapy notes are not included in the provision that allows clients to see and copy their health information

Show Answer Comment (0)

Question 186

HIPAA's Administrative Simplification procedures were prompted by the desire to:

Reduce administrative overhead in provider-payer transactions

Simplify administrative functions such as payroll and benefits

Create multiple forms for various transactions

Add more details to the processing of electronic transactions

Show Answer Comment (0)

Question 187

___________ is one of the main objectives of HIPAA.

Secrecy

Accountability

Anonymity

ComplexityCorrect

Show Answer Comment (0)

Question 188

If a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, is the entity in compliance with HIPAA guidelines?

No. HIPAA is law while DMA guidelines are not law, and require less than HIPAA

Yes. HIPAA is federal law and DMA is state law, which is usually more restrictive, and the more restrictive standard should be met.

No. HIPAA law is federal and DMA law is state, so HIPAA supersedes DMA law.

Yes. DMA's guidelines are stricter and will supersede those minimum standards of HIPAA.

Show Answer Comment (0)

Question 189

If a client requests a restriction for disclosure of a certain part of their PHI to a health plan, the health care provider is:

Required to agree to the requested restriction if the disclosure is for treatment or payment, is not required by law, and if the information is specifically related to a health care item or service that the client has paid for in full

Required to agree only if the client specifies why he/she wants the restriction

Required to agree only if the client specifies who he/she wants the restriction to apply to

Required to agree to the requested restriction

Show Answer Comment (0)

Question 190

February 17, 2010 was the effective date for updated changes to HIPAA triggered by the Health Information Technology for Economic and Clinical Health Act (HITECH). As part of HITECH, what must providers who have clients who opt to self-pay do when those clients request the provider not inform their health care insurance provider?

The provider has the option to not disclose the information to the health care insurance provider

The provider must disclose the information anyway to the heath care insurance provider

The provider must not disclose the information to the health care insurance provider

The provider must have the client sign a waiver freeing the provider from the compulsion to report to the provider

Show Answer Comment (0)

Total 305 questions

17 18 19 20 21

Go to page: of 31