Home / ISC / HCISPP

ISC HCISPP Practice Test - Questions Answers, Page 20

Question list

List of questions

Question 191

(0)

HIPAA guidelines say employers that sponsor employee group health plans must maintain privacy of which __________________ in secured locations, if kept in the office?

Question 192

(0)

Under HIPAA, Regional Health Information Organizations and Personal Health Record Vendors are considered to be:

Question 193

(0)

What administrative safeguard puts into place measures to assure that only authorized persons have access to electronic personal health information?

Question 194

(0)

Data collected without identifiers, never coded, that was never tied to an individual, thereby fully protecting health information is considered what form of data?

Question 195

(0)

Administrative Safeguards on Security Awareness related to electronic Protected Health Information (PHI) and Log-in Monitoring includes all, EXCEPT:

Question 196

(0)

Sammy applied for and received her National Provider Identifier online. What may she now do?

Question 197

(0)

Marcus, age 33, is fully competent to handle his own affairs. He is starting services with a covered entity, as defined by HIPAA, and has received a copy of the organization's privacy practices. How

Question 198

(0)

What is the title given to the group authorized by the HIPAA Privacy Rule to approve a waiver of authorization for the disclosure and/or use of personally identifiable health information?

Question 199

(0)

Breach notification exceptions are provided to all, EXCEPT:

Question 200

(0)

Handled the first bioterrorism attack in the mail. Also replaced Health Care Financing Administration.

Related questions

Which of the following statements is NOT correct?

DRAG DROP During the risk assessment phase of the project the CISO discovered that a college within the University is collecting Protected Health Information (PHI) data via an application that was developed in-house. The college collecting this data is fully aware of the regulations for Health Insurance Portability and Accountability Act (HIPAA) and is fully compliant. What is the best approach for the CISO? Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location.

If you see other staff violating privacy policies you should?

The First Blue Cross plan was given to teachers at Baylor University allowing them 21 days of hospital care at six dollars a year.

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

What is the MOST important consideration from a data security perspective when an organization plans to relocate?

Substance abuse regulations do not allow disclosure with a subpoena unless a court has issued an order following a show cause hearing.

You receive a call from staff at a local hospital stating that they need information regarding a former client of yours who is scheduled for surgery. They fax you a release of information form which only authorizes the release of medications but the person on the phone is asking for dates of treatment and diagnoses. How would you respond?

You always abide by the HIPAA privacy rule.

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

Question 191

HIPAA guidelines say employers that sponsor employee group health plans must maintain privacy of which __________________ in secured locations, if kept in the office?

Information related to lawsuits again employers

Enrollment and claim information

Workman's Compensation claims

Deidentified information

Show Answer Comment (0)

Question 192

Under HIPAA, Regional Health Information Organizations and Personal Health Record Vendors are considered to be:

Health care clearinghouses

Business associates

Covered entities

Personal health care vendors

Show Answer Comment (0)

Question 193

What administrative safeguard puts into place measures to assure that only authorized persons have access to electronic personal health information?

Log-in monitoring

Information management

Workforce security

Termination procedures

Show Answer Comment (0)

Question 194

Data collected without identifiers, never coded, that was never tied to an individual, thereby fully protecting health information is considered what form of data?

Data aggregation

Anonymous

Non-disclosed

Anonymized

Show Answer Comment (0)

Question 195

Administrative Safeguards on Security Awareness related to electronic Protected Health Information (PHI) and Log-in Monitoring includes all, EXCEPT:

Review the system's login reports at regular intervals

Prohibit the sharing of passwords among any employees, paid or unpaid

Limit the number of attempts a computer user can make at a log-in attempt

Use of software that locks the user out of the system after a certain number of unsuccessful log-in attempts are made

Show Answer Comment (0)

Question 196

Sammy applied for and received her National Provider Identifier online. What may she now do?

Have guaranteed payment by a health plan

Receive credentialing or licensing as a therapist provider

Be guaranteed enrollment as a provider in a health plan

Be identified as a unique health care provider during HIPAA transactions

Show Answer Comment (0)

Marcus, age 33, is fully competent to handle his own affairs. He is starting services with a covered entity, as defined by HIPAA, and has received a copy of the organization's privacy practices. How many signatures are going to be required on the receipt or acknowledgement form indicating Marcus received the required information?

One

Three

Four

Two

Show Answer Comment (0)

Question 198

What is the title given to the group authorized by the HIPAA Privacy Rule to approve a waiver of authorization for the disclosure and/or use of personally identifiable health information?

Cohort Group

Institutional Review Board

Privacy Board

Board of Directors

Show Answer Comment (0)

Question 199

Breach notification exceptions are provided to all, EXCEPT:

Business associates who access information by good faith, unintentional means and do not further disclose information

Unintentional, good faith access by employees of covered entities if the information was not further disclosed

If the information impacted less than 500 people within a single demographic area

Inadvertent disclosure made individual to individual within a covered entity who is authorized to access protected health information

Show Answer Comment (0)

Question 200

Handled the first bioterrorism attack in the mail. Also replaced Health Care Financing Administration.

Joint Commission

CMS

HIPPA

Show Answer Comment (0)

Total 305 questions

18 19 20 21 22

Go to page: of 31