Which racial/ethnic group has the highest rate of uninsurance?

1. A. White
2. B. Hispanic
3. C. Asian or pacific islander
4. D. Black or African American

Correct Answer: B

Handled the first bioterrorism attack in the mail. Also replaced Health Care Financing Administration.

1. A. Joint Commission
2. B. CMS
3. C. HIPPA

Correct Answer: B

As of 2010, what is different with regard to business associates and HIPAA protections?

1. A. Business associates now must notify clients directly of privacy breaches, as if they were a covered entity
2. B. There are no significant changes in business associate practices
3. C. Covered entities have increase responsibilities to ensure the practice of business associates
4. D. Business associates are no longer required to notify clients directly of privacy breaches

Correct Answer: A
As of 2010, business associates must notify clients directly of privacy breaches, as if they were a covered entity.

Which of the following is considered the last line defense in regard to a Governance, Risk managements, and
compliance (GRC) program?

1. A. Internal audit
2. B. Internal controls
3. C. Board review
4. D. Risk management

Correct Answer: B

Are there penalties under HIPPA?

1. A. No penalties
2. B. HIPPA calls for severe civil and criminal penalties for noncompliance, including: -- fines up to $25k for multiple violations of the same standard in a calendar year -- fines up to $250k and/or imprisonment up to 10 years for knowing misuse of individually identifiable health information.
3. C. HIPPA calls for severe civil and criminal penalties for noncompliance, includes: -- fines up to 50k for multiple violations of the same standard in a calendar year -- fines up to $500k and/or imprisonment up to 10 years for knowing misuse of individually identifiable health information
4. D. HIPPA calls for severe civil and criminal penalties for noncompliance, including: -- fines up to $100 for multiple violations of the same standard in a calendar year -- fines up to $750k and/or imprisonment up to 20 years for knowing misuse of individually identifiable health information

Correct Answer: B