1|Page
HIPPA FINAL EXAM ||VERIFIED EXAM!!!|| MOST
RECENT EXAM ACTUAL COMPLETE REAL EXAM
QUESTIONS AND CORRECT ANSWERS (VERIFIED
ANSWERS) ALREADY GRADED A+ | GUARANTEED
SUCCESS!! | NEWEST EXAM!!!
ability or means necessary to read, write, modify or
communicate data - Answer-access
actions, plus policies and procedures to manage the
selection, development, implementation and maintenance
of security measures in relation to the protection of
information. - Answer-administrative safeguard
audit trail - Answer-- data collected during the use of
electronic devices that include the who, what, when and
where.
authentication - Answer-confirmation that a person is the
one claimed
,2|Page
contingency plan - Answer-policies and procedures for
responding to an emergency /occurrence that damages
systems contain e-PHI.
e-PHI - Answer-electronic protected health information
encryption - Answer-transforming confidential plain text
into cipher text to protect it.
The required reading this week was an article titled HIPAA
Compliance Strategies.The article states: The security
breach notification provision of the HITECH Act requires
that CEs notify affected individuals, the government and
the media following a breach of unsecured information.
But providers don't have to report breaches if protected
health information (PHI) is _. - Answer-encrypted
True/False--Under HIPAA regulations, a Business
Associate IS a Covered Entity - Answer-False
Psychotherapy notes are highly protected under the
HIPAA privacy rule.
Give three examples when a CE does NOT need a written
authorization to disclose psychotherapy notes - Answer-
,3|Page
The CE who originated the notes may use them for
treatment purposes;
A CE may use or disclose for its own training;
To defend itself in legal proceedings brought by the
individual;
For DHHS audits;
To avert a serious or imminent threat to public health or
safety;
(Psychotherapy notes are never released in a general
release of MR or for continuity of care without
authorization)
is authorization needed for a pharmacy mails prescription
refill reminders to patients - - Answer-no authorization
needed
is authorization needed for the CE gives baby formula and
baby wipe samples to new mothers - - Answer-no auth
req.
is authorization needed for a CE sells the list of all
congestive heart failure patients to a company that
markets mobility scooters and the CE donates the money
, 4|Page
to its non-profit charity for heart disease - - Answer-
Requires patient auth.
is authorization needed a doctor gives samples of a
medication to a patient.- - Answer-no auth required
is authorization required for a primary care physician
refers an individual to a specialist - - Answer-no auth
required
is authorization required for a clinic sends an
announcement to all patients concerning a new doctor
who has joined the facility.- - Answer-no auth required
is authorization required for an insurance company sends
an announcement about a smoking cessation class, which
is not covered under the individual plans, but is offered at
a discount to all members.- - Answer-no auth required
is authorization required for A covered entity exchanges
patient PHI with a construction company that builds ramps
for people who are in wheelchairs. The construction
company has agreed to replace the CE's old ramps at no
HIPPA FINAL EXAM ||VERIFIED EXAM!!!|| MOST
RECENT EXAM ACTUAL COMPLETE REAL EXAM
QUESTIONS AND CORRECT ANSWERS (VERIFIED
ANSWERS) ALREADY GRADED A+ | GUARANTEED
SUCCESS!! | NEWEST EXAM!!!
ability or means necessary to read, write, modify or
communicate data - Answer-access
actions, plus policies and procedures to manage the
selection, development, implementation and maintenance
of security measures in relation to the protection of
information. - Answer-administrative safeguard
audit trail - Answer-- data collected during the use of
electronic devices that include the who, what, when and
where.
authentication - Answer-confirmation that a person is the
one claimed
,2|Page
contingency plan - Answer-policies and procedures for
responding to an emergency /occurrence that damages
systems contain e-PHI.
e-PHI - Answer-electronic protected health information
encryption - Answer-transforming confidential plain text
into cipher text to protect it.
The required reading this week was an article titled HIPAA
Compliance Strategies.The article states: The security
breach notification provision of the HITECH Act requires
that CEs notify affected individuals, the government and
the media following a breach of unsecured information.
But providers don't have to report breaches if protected
health information (PHI) is _. - Answer-encrypted
True/False--Under HIPAA regulations, a Business
Associate IS a Covered Entity - Answer-False
Psychotherapy notes are highly protected under the
HIPAA privacy rule.
Give three examples when a CE does NOT need a written
authorization to disclose psychotherapy notes - Answer-
,3|Page
The CE who originated the notes may use them for
treatment purposes;
A CE may use or disclose for its own training;
To defend itself in legal proceedings brought by the
individual;
For DHHS audits;
To avert a serious or imminent threat to public health or
safety;
(Psychotherapy notes are never released in a general
release of MR or for continuity of care without
authorization)
is authorization needed for a pharmacy mails prescription
refill reminders to patients - - Answer-no authorization
needed
is authorization needed for the CE gives baby formula and
baby wipe samples to new mothers - - Answer-no auth
req.
is authorization needed for a CE sells the list of all
congestive heart failure patients to a company that
markets mobility scooters and the CE donates the money
, 4|Page
to its non-profit charity for heart disease - - Answer-
Requires patient auth.
is authorization needed a doctor gives samples of a
medication to a patient.- - Answer-no auth required
is authorization required for a primary care physician
refers an individual to a specialist - - Answer-no auth
required
is authorization required for a clinic sends an
announcement to all patients concerning a new doctor
who has joined the facility.- - Answer-no auth required
is authorization required for an insurance company sends
an announcement about a smoking cessation class, which
is not covered under the individual plans, but is offered at
a discount to all members.- - Answer-no auth required
is authorization required for A covered entity exchanges
patient PHI with a construction company that builds ramps
for people who are in wheelchairs. The construction
company has agreed to replace the CE's old ramps at no
