1|Page
HIPPA FINAL EXAM QUESTIONS AND ANSWERS
2025
Within HIPAA how does Security differ from Privacy? -
.....ANSWER... ✔✔ Security defines safeguards for
ePHI versus Privacy which defines safeguards for PHI
Covered Entities may also use or disclose PHI without
authorization in the following circumstances EXCEPT:
A. Emergencies involving imminent threat to health or
safety (to the individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the
individual
E. Public health activities
F. Workers' compensation - .....ANSWER... ✔✔ D.
Medical research with information that identifies the
individual
Authorization is required for which of the following?
,2|Page
A. Minimum necessary disclosures of PHIB. Non-routine
disclosures of PHIC. ReferralsD. Treatment
B. Non-routine disclosures of PHI
C. Referrals
D. Treatment - .....ANSWER... ✔✔ B. Non-routine
disclosures of PHI
Penalties for non-compliance can be which of the
following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal - .....ANSWER... ✔✔ D. Civil and
Criminal
Which of the following is NOT an example of physical
security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption - .....ANSWER... ✔✔ D. Data
encryption
, 3|Page
What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
D. Apathy - .....ANSWER... ✔✔ B. Education
Which of the following are examples of health care
plans?
A. An HMO
B. The Medicaid program
C. Employer group health plans
D. All of the above - .....ANSWER... ✔✔ D. All of the
above
The Security Rule's requirements are organized into
which of the following three categories:
A. Administrative, Non-Administrative, and Technical
safeguards
B. Physical, Technical, and Non-Technical safeguards
C. Administrative, Physical, and Technical safeguards
D. Privacy, Security, and Electronic Transactions -
.....ANSWER... ✔✔ C. Administrative, Physical, and
Technical safeguards
HIPPA FINAL EXAM QUESTIONS AND ANSWERS
2025
Within HIPAA how does Security differ from Privacy? -
.....ANSWER... ✔✔ Security defines safeguards for
ePHI versus Privacy which defines safeguards for PHI
Covered Entities may also use or disclose PHI without
authorization in the following circumstances EXCEPT:
A. Emergencies involving imminent threat to health or
safety (to the individual or the public)
B. Where required by law
C. Law enforcement
D. Medical research with information that identifies the
individual
E. Public health activities
F. Workers' compensation - .....ANSWER... ✔✔ D.
Medical research with information that identifies the
individual
Authorization is required for which of the following?
,2|Page
A. Minimum necessary disclosures of PHIB. Non-routine
disclosures of PHIC. ReferralsD. Treatment
B. Non-routine disclosures of PHI
C. Referrals
D. Treatment - .....ANSWER... ✔✔ B. Non-routine
disclosures of PHI
Penalties for non-compliance can be which of the
following types?
A. Civil and Accidental
B. Criminal and Incidental
C. Accidental and Purposeful
D. Civil and Criminal - .....ANSWER... ✔✔ D. Civil and
Criminal
Which of the following is NOT an example of physical
security?
A. Lock file cabinets
B. Lock office doors
C. Locked media storage cases
D. Data encryption - .....ANSWER... ✔✔ D. Data
encryption
, 3|Page
What is a key to success for HIPAA compliance?
A. Managerial expertise
B. Education
C. Organizational structure
D. Apathy - .....ANSWER... ✔✔ B. Education
Which of the following are examples of health care
plans?
A. An HMO
B. The Medicaid program
C. Employer group health plans
D. All of the above - .....ANSWER... ✔✔ D. All of the
above
The Security Rule's requirements are organized into
which of the following three categories:
A. Administrative, Non-Administrative, and Technical
safeguards
B. Physical, Technical, and Non-Technical safeguards
C. Administrative, Physical, and Technical safeguards
D. Privacy, Security, and Electronic Transactions -
.....ANSWER... ✔✔ C. Administrative, Physical, and
Technical safeguards
