Free HIO-201 – Certified HIPAA Professional (CHP) Practice Test Question

Select an option, then click Submit answer.

• ○

  A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

• ○

  A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

• ○

  A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

• ○

  A covered entity may require individuals to waive their rights.

• ○

  A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.
  
  

Select an option, then click Submit answer.

• ○

  Information Access Management

• ○

  Security Management Process

• ○

  Evaluation

• ○

  Transmission Security

• ○

  Device and Media Controls
  
  

Select an option, then click Submit answer.

• ○

  Effective date

• ○

  CPT-4

• ○

  CDT

• ○

  ICD-9-CM

• ○

  Enrollment date
  
  

Select an option, then click Submit answer.

• ○

  A covered entity must mitigate, to the extent practicable, any harmful effect that it becomes aware of from the use or disclosure of PHI in violation of its policies and procedures or HIPAA regulations.

• ○

  A covered must not in any way intimidate, retaliate, or discriminate against any individual or other entity, which files a complaint.

• ○

  A covered entity may not require individuals to waive their rights as a condition for treatment, payment, enrollment in a health plan, or eligibility for benefits.

• ○

  A covered entity must retain the documents required by the regulations for a period of six years.

• ○

  A covered entity must change its policies and procedures to comply with HIPAA regulations no later than three years after the change in law.
  
  

Select an option, then click Submit answer.

• ○

  A list of authorized entities, together with their access rights.

• ○

  Corroborating your identity

• ○

  The prevention of an unauthorized use of a resource.

• ○

  Proving that nothing regarding your identity has been altered.

• ○

  Being unable to deny you took part in a transaction.
  
  

Select an option, then click Submit answer.

• ○

  270.

• ○

  820.

• ○

  837.

• ○

  277.
  

• ○

  278.
  
  

Select an option, then click Submit answer.

• ○

  ICD-9-CM. Volumes 1 and 2

• ○

  CPT-4

• ○

  CDT

• ○

  ICD-9-CM, Volume 3

• ○

  HCPCS
  
  

Select an option, then click Submit answer.

• ○

  If the notice must state that the covered entity reserves the right to disclose PHI without obtaining the individuals authorization.

• ○

  The notice must prominently include an expiration date.

• ○

  The notice must describe every potential use of PHI.

• ○

  The notice must describe an individual’s rights under the rule such as to inspect, copy and amend PHI and to obtain an accounting of disclosures of PHI.

• ○

  The notice must clearly identify that the covered entity is in compliance with HIPAA regulations as of April 16, 2003.
  
  

Select an option, then click Submit answer.

• ○

  Eligibility (2701271)

• ○

  Premium Payment (2O)

• ○

  Unsolicited Claim Status (277)

• ○

  Remittance Advice (35)

• ○

  Functional Acknowledgment (997)
  
  

Select an option, then click Submit answer.

• ○

  The authorization has been revoked by the physician

• ○

  The patient remains a citizen of the United States

• ○

  The information is under the control of HHS

• ○

  The information is in the possession of a covered entity

• ○

  The information is not also available on paper forms