HCISPP Free Practice Test

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

1. A. Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery
2. B. Data decrease related to storing personal information
3. C. Reduction in operational costs to the agency
4. D. Enable business objectives so departments can focus on mission rather than the business of identity management

Correct Answer: C

This Hospital makes up 60% of hospitals in the United States. It is owned by religious or volunteer groups and is not for profit.

1. A. Teaching
2. B. Volunteer
3. C. Government

Correct Answer: B

Employers often advocate on behalf of their employees in benefit disputes and appeals, answer QUESTION NO:s with regard to the health plan, and generally help them navigate their health benefits. Is this type of assistance allowed under the regulation?

1. A. The final rule does nothing to hinder or prohibit plan sponsors from advocating on behalf of group health plan participants or providing assistance in understanding their health plans.
2. B. The final rule prohibits plan sponsors from advocating on behalf of group health plan participants or providing assistance in understanding their health plans
3. C. The final rule does hinder but does not prohibit plan sponsors from advocating on behalf of group health plan participants or providing assistance in understanding their health plans
4. D. The final rule does no advocating on behalf of group health plan participants or provide assistance in understanding their health plan.

Correct Answer: A

Marcus is responsible for security management within a HIPAA-covered entity. He is reviewing administrative safeguards and examining the organization's risk analysis. Which element is NOT part of risk analysis?

1. A. Developing adequate communication with all contractors, interns, and staff in relation to the agency's security policies
2. B. Assessing vulnerabilities of integrity and availability of electronic personal health information
3. C. Determining how client electronic personal health information confidentiality may be compromised
4. D. Determining barriers in existence to needed client electronic personal health information

Correct Answer: A
Developing communication is not a function of risk analysis.

Protected health information is anything that connects a patient to his or her health information.

1. A. True
2. B. False

Correct Answer: A