HIO-201 Free Practice Test

Select the correct statement regarding the "Minimum Necessary" standard in the HIPAA regulations.

1. A. In some circumstances a coveted entity is permitted, but not required, to rely on the judgment of the party requesting the disclosure as to the minimum amount of information necessary for the intended purpos
2. B. Some examples of these requesting parties are: another covered entity or a public official.
3. C. The privacy rule prohibits use, disclosure, or requests for an entire medical record.
4. D. Non-Covered entities need to redesign their facility to meet the requirement for minimum necessary uses.
5. E. The minimum necessary standard requires covered entities to prohibit maintenance of medical charts at bedside and to require that X-ray light boards be totally isolated.
6. F. If there is a request for more than the minimum necessary PHI, the privacy rule requires a covered entity to deny the disclosure of information after recording the event in the individual's case file.

Correct Answer: A

Formal, documented instructions for reporting security breaches are referred to as:

1. A. Business Associate Contract
2. B. Response and Reporting
3. C. Emergency Access Procedure
4. D. Sanction policy
5. E. Risk Management

Correct Answer: B

The transaction pair used for requesting and responding to a health claim status inquiry is:

1. A. 270/271
2. B. 276/277
3. C. 278/278
4. D. 834/834
5. E. 837/835

Correct Answer: B

The transaction number assigned to the Payment Order/Remittance Advice transaction is:

1. A. 270
2. B. 835
3. C. 278
4. D. 820
5. E. 834

Correct Answer: D

The Security Rule requires that the covered entity identifies a security official who is responsible for the development and implementation of the policies and procedures. This is addressed under which security standard?:

1. A. Security Incident Procedures
2. B. Response and Reporting
3. C. Assigned Security Responsibility
4. D. Termination Procedures
5. E. Facility Access Controls

Correct Answer: C