RHIT Domain 2 questions with verified answers passed
1. Who owns the health record? B
a. Patient
b. Provider who generated the information
c. Insurance company who paid for the care
recorded in the record
d. No one
2. Community Hospital is terminating its business asso-
C ciate relationship with a medical transcription
compa- ny. The transcription company has no
further need for any identifiable information that it
may have obtained in the course of its business
with the hospital. The CFO of the hospital believes
that to be HIPAA compliant,
all that is necessary is for the termination to be
in a formal letter signed by the CEO. In this
case, how should the director of HIM advise the
CFO?
a. Determine that a formal letter of termination
meets HIPAA requirements and no further action
is re- quired.
b. Confirm that a formal letter of termination
meets HIPAA requirements and no further action
is required except that the termination notice
needs to be re- tained for seven years.
c. Confirm that a formal letter of termination is
re- quired and that the transcription company
must pro- vide the hospital with a certification
that all PHI that it had in its possession has been
destroyed or returned.
d. Inform the CFO that business associate
agreements cannot be terminated.
3. What does the term access control mean? B
a. Identifying the greatest security risks
,RHIT Domain 2 questions with verified answers passed
b. Identifying which data employees should
have a right to use
c. Implementing safeguards that protect physical
me- dia
d. Restricting access to computer rooms and facilities
4. Under HIPAA, which of the following is not named as D
a covered entity?
a. Attending physician
b. Healthcare clearinghouse
c. Health plan
d. Outsourced transcription company
5. Which of the following is an organization's planned
B response to protect its information in the case of
a natural disaster?
a. Administrative controls
b. Contingency plan
c. Audit trail
d. Physical controls
6. A secretary in the Nursing Office was recently
hospi- A talized with ketoacidosis. She comes to
the HIM de- partment and requests to review her
health record. Of the options here, what is the
best course of action?
a. Allow her to review her record after obtaining
au- thorization from her.
b. Refer the patient to her physician for the
informa- tion.
c. Tell her to go through her supervisor for the
infor- mation.
,RHIT Domain 2 questions with verified answers passed
d. Tell her that hospital employees cannot access
their own medical records.
7. Which of the following provide the objective and B
scope for the HIPAA Security Rule as a whole?
a. Administrative provisions
b. General rules
c. Physical safeguards
d. Technical safeguards
8. he release of information function requires the HIMC
professional to have knowledge of:
a. Clinical coding principles
b. Database development
c. Federal and state confidentiality laws
d. Human resource management
9. A health information technician receives a
subpoena C ad testificandum. To respond to the
subpoena, which of the following should the
technician do?
a. Review the subpoena to determine what
docu- ments must be produced
b. Review the subpoena and notify the hospital
admin- istrator
c. Review the subpoena and appear at the time
and place supplied to give testimony
d. Review the subpoena and alert the hospital's
risk management department
10. Which of the following is an example of a business A
associate?
a. Contract coder
b. Environmental services department
, RHIT Domain 2 questions with verified answers passed
c. Hospital security officer
d. Employee with access to e-PHI
11. The medical record of Kathy Smith, the plaintiff,
has
D been subpoenaed for a deposition. The plaintiff's
at- torney wishes to use the records as evidence to
prove his client's case. In this situation, although
the record constitutes hearsay, it may be used as
evidence based on the:
a. Admissibility exception
b. Discovery exception
c. Direct evidence exception
d. Business records exception
12. Release of birth and death information to public C
health authorities:
a. Is prohibited without patient consent
b. Is prohibited without patient authorization
c. Is a public interest and benefit disclosure that
does not require patient authorization
d. Requires both patient consent and authorization
13. When an individual requests a copy of the PHI or
A agrees to accept summary or explanatory
informa- tion, the covered entity may:
a. Impose a reasonable cost-based fee
b. Not charge the individual
c. Impose any fee authorized by state statute
d. Charge only for the cost of the paper on which
the information is printed
14. The right of an individual to keep personal health C
information from being disclosed to anyone is a def-
1. Who owns the health record? B
a. Patient
b. Provider who generated the information
c. Insurance company who paid for the care
recorded in the record
d. No one
2. Community Hospital is terminating its business asso-
C ciate relationship with a medical transcription
compa- ny. The transcription company has no
further need for any identifiable information that it
may have obtained in the course of its business
with the hospital. The CFO of the hospital believes
that to be HIPAA compliant,
all that is necessary is for the termination to be
in a formal letter signed by the CEO. In this
case, how should the director of HIM advise the
CFO?
a. Determine that a formal letter of termination
meets HIPAA requirements and no further action
is re- quired.
b. Confirm that a formal letter of termination
meets HIPAA requirements and no further action
is required except that the termination notice
needs to be re- tained for seven years.
c. Confirm that a formal letter of termination is
re- quired and that the transcription company
must pro- vide the hospital with a certification
that all PHI that it had in its possession has been
destroyed or returned.
d. Inform the CFO that business associate
agreements cannot be terminated.
3. What does the term access control mean? B
a. Identifying the greatest security risks
,RHIT Domain 2 questions with verified answers passed
b. Identifying which data employees should
have a right to use
c. Implementing safeguards that protect physical
me- dia
d. Restricting access to computer rooms and facilities
4. Under HIPAA, which of the following is not named as D
a covered entity?
a. Attending physician
b. Healthcare clearinghouse
c. Health plan
d. Outsourced transcription company
5. Which of the following is an organization's planned
B response to protect its information in the case of
a natural disaster?
a. Administrative controls
b. Contingency plan
c. Audit trail
d. Physical controls
6. A secretary in the Nursing Office was recently
hospi- A talized with ketoacidosis. She comes to
the HIM de- partment and requests to review her
health record. Of the options here, what is the
best course of action?
a. Allow her to review her record after obtaining
au- thorization from her.
b. Refer the patient to her physician for the
informa- tion.
c. Tell her to go through her supervisor for the
infor- mation.
,RHIT Domain 2 questions with verified answers passed
d. Tell her that hospital employees cannot access
their own medical records.
7. Which of the following provide the objective and B
scope for the HIPAA Security Rule as a whole?
a. Administrative provisions
b. General rules
c. Physical safeguards
d. Technical safeguards
8. he release of information function requires the HIMC
professional to have knowledge of:
a. Clinical coding principles
b. Database development
c. Federal and state confidentiality laws
d. Human resource management
9. A health information technician receives a
subpoena C ad testificandum. To respond to the
subpoena, which of the following should the
technician do?
a. Review the subpoena to determine what
docu- ments must be produced
b. Review the subpoena and notify the hospital
admin- istrator
c. Review the subpoena and appear at the time
and place supplied to give testimony
d. Review the subpoena and alert the hospital's
risk management department
10. Which of the following is an example of a business A
associate?
a. Contract coder
b. Environmental services department
, RHIT Domain 2 questions with verified answers passed
c. Hospital security officer
d. Employee with access to e-PHI
11. The medical record of Kathy Smith, the plaintiff,
has
D been subpoenaed for a deposition. The plaintiff's
at- torney wishes to use the records as evidence to
prove his client's case. In this situation, although
the record constitutes hearsay, it may be used as
evidence based on the:
a. Admissibility exception
b. Discovery exception
c. Direct evidence exception
d. Business records exception
12. Release of birth and death information to public C
health authorities:
a. Is prohibited without patient consent
b. Is prohibited without patient authorization
c. Is a public interest and benefit disclosure that
does not require patient authorization
d. Requires both patient consent and authorization
13. When an individual requests a copy of the PHI or
A agrees to accept summary or explanatory
informa- tion, the covered entity may:
a. Impose a reasonable cost-based fee
b. Not charge the individual
c. Impose any fee authorized by state statute
d. Charge only for the cost of the paper on which
the information is printed
14. The right of an individual to keep personal health C
information from being disclosed to anyone is a def-
