ISC HealthCare Information Security and Privacy Practitioner

QUESTION NO: 1
May a health plan require a provider to use a health care clearinghouse to conduct a HIPPA-covered transaction, or must the health plan acquire the ability to conduct the transaction directly with those providers capable of conducting direct transactions?

A. A health plan may conduct its covered transactions through a clearinghouse, and may require a provider to conduct covered transactions with it through a clearinghouse. But the incremental cost of doing so must be borne by the health plan. It is a cost-benefit decision on the part of the health plan whether to acquire the ability to conduct HIPPA transactions directly with other entities, or to require use of a clearinghouse. B. A health plan may after taking specific permission from HIPPA authorities conduct its covered transactions through a clearinghouse C. A health plan may not conduct it's covered transactions through a clearinghouse D. is not as per HIPPA allowed to require provider to conduct covered transactions with it through a clearinghouse

Correct Answer: A

QUESTION NO: 2
What type of hospital is an Government Hospital?

A. For Profit B. Not For Profit

Correct Answer: B

QUESTION NO: 3
Vertical integration refers to an organization model that under one ownership.

A. Provides the necessary facility for all levels of care B. Provides the necessary staff for this full spectrum of care C. Contains all levels of care, from primary to tertiary D. All of the above.

Correct Answer: D

QUESTION NO: 4
Which of the following is a true statement about both the amount and quality of medical services available:

A. minimal medical services is needed for increasing quality of care because it reduces misdiagnoses B. the quantity and quality of care are not related C. medical services can be overused or underused which can both be detrimental to the quality of care D. an increase in medical services also increases the quality of care because it provides greater access to care

Correct Answer: C

QUESTION NO: 5
Which of the following is a PRIMARY benefit of using a formalized security testing report format and structure?

A. Technical teams will understand the testing objectives, testing strategies applied, and business risk associated with each vulnerability B. Management teams will understand the testing objectives and reputational risk to the organization C. Executive audiences will understand the outcomes of testing and most appropriate next steps for corrective actions to be taken D. Technical and management teams will better understand the testing objectives, results of each test phase, and potential impact levels

Correct Answer: D

QUESTION NO: 6
Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

A. Enable business objectives so departments can focus on mission rather than the business of identity management B. Data decrease related to storing personal information C. Attribute assertions as agencies can request a larger set of attributes to fulfill service delivery D. Reduction in operational costs to the agency

Correct Answer: D

QUESTION NO: 7
When responding to a client's request for information about the disclosure of his/her protected health information, which is NOT required?

A. A description of what information was sent B. Disclosures for treatment, payment, or health care operations C. The purpose of the disclosure D. The dates of disclosure and to whom the information was sent

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
The form of payment that is based specifically on the individual components of health care is.

A. Per Diem payment. B. Fee-for-service reimbursement. C. Reimbursement by episode of illness. D. Capitation payment.

Correct Answer: B

QUESTION NO: 9
What time period was the polio vaccine licensed?

A. Modern B. Medieval C. Ancient

Correct Answer: A

QUESTION NO: 10
Which of the following disaster recovery test plans will be MOST effective while providing minimal risk?

A. Read-through B. Simulation C. Full interruption D. Parallel

Correct Answer: B

QUESTION NO: 11
The HIPPA task force must inventory the organization's systems, processes, policies, procedures and data to determine which elements are critical to patient care and central to the organizations business. All must be inventoried and listed by

A. by priority and cost as well as availability, reliability, access and use. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used. B. by priority as well availability, reliability, access and use. The person responsible for criticality analysis must remain mission-focused but need not document all the criteria used. C. by priority as well as encryption levels, authenticity, storage-devices, availability, reliability, access and use. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used. D. by priority as well as availability, reliability, access and use. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used.

Correct Answer: D

QUESTION NO: 12
Which is NOT consistent with Personnel Clearance Procedures needed to comply with HIPAA Administrative Safeguards?

A. Appropriate exit interviews for outgoing personnel B. Discretion given to who does and does not have access to secure office spaces or keys/door codes C. New employees, contractors, and unpaid staff have references checked D. Current database of what personnel has access to buildings, offices, filing cabinets, computers, and databases

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 13
Reimbursement is associated with which of the quad functions?

A. Payment B. Delivery C. Insurance D. Financing

Correct Answer: B

QUESTION NO: 14
Which of the following represents the GREATEST risk to data confidentiality?

A. Network redundancies are not implemented B. Security awareness training is not completed C. Backup tapes are generated unencrypted D. Users have administrative privileges

Correct Answer: C

QUESTION NO: 15
Avicenna was known for what?

A. Cannon of Medicine B. Bacteria C. Penicillin

Correct Answer: A

ISC HealthCare Information Security and Privacy Practitioner - HCISPP Exam Questions