ISC2 HCISPP Exam Questions Instant Access

Question 1

Which of the following is the MOST significant benefit to implementing a third-party federated identity architecture?

AAttribute assertions as agencies can request a larger set of attributes to fulfill service delivery

BData decrease related to storing personal information

CReduction in operational costs to the agency

DEnable business objectives so departments can focus on mission rather than the business of identity management

Answer : C

Question 2

What data-related concept identifies or characterizes entities and events in a manner that facilitates an administrative process?

ANon-medical or Administrative Code Sets

BData Mapping

CMedical or Clinical Code Sets

DData Elements

Answer : A

Non-medical or Administrative Code Sets identify or characterize entities and events in a manner that facilitates an administrative process.

Question 3

An international medical organization with headquarters in the United States (US) and branches in France

wants to test a drug in both countries. What is the organization allowed to do with the test subject's data?

AAggregate it into one database in the US

BProcess it in the US, but store the information in France

CShare it with a third party

DAnonymize it and process it in the US

Answer : C

Question 4

Health Information Rights although your health record is the physical property of the healthcare practitioner or facility that compiled it, the information belongs to you. You do not have the right to:

Aobtain a paper copy of the notice of information practices upon request inspect and obtain a copy of your health record as provided for in 45 CFR 164.524

Brequest a restriction on certain uses and disclosures of your information outside the terms as provided by 45 CFR 164.522

Camend your health record as provided in 45 CFR 164.528 obtain an accounting of disclosures of your health information as provided in 45 CFR 164.528

Drevoke your authorization to use or disclose health information except to the extent that action has already been taken

Answer : B

Question 5

Which of the following is an overarching goal of Healthy People 2010?

ADecrease health care costs

BCreate a more coordinated health care system

CEstablish a national health insurance program

DIncrease quality and years of healthy life

Answer : D

Question 6

The primary objectives of a healthcare system include all of the following except:

AEnabling all citizens to receive healthcare services

BDelivering healthcare services that are cost-effective

CDelivering healthcare services using the most current technology, regardless of cost

DDelivering healthcare services that meet established standards of quality

Answer : C

Question 7

If a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, is the entity in compliance with HIPAA guidelines?

ANo. HIPAA is law while DMA guidelines are not law, and require less than HIPAA

BYes. HIPAA is federal law and DMA is state law, which is usually more restrictive, and the more restrictive standard should be met.

CNo. HIPAA law is federal and DMA law is state, so HIPAA supersedes DMA law.

DYes. DMA's guidelines are stricter and will supersede those minimum standards of HIPAA.

Answer : A

If a medical entity is in compliance with the Division of Medical Assistance's (DMA's) Health Data Marketing Guidelines, they are not in compliance with HIPAA guidelines because HIPAA is law while DMA

guidelines are not, requiring less than HIPAA.

ISC2 HealthCare Information Security and Privacy Practitioner HCISPP Exam Questions