Medicare and Medicaid programs were created for population groups regarded as.

1. A. Elderly
2. B. Vulnerable
3. C. Underinsured
4. D. Politically above

Correct Answer: B

The HIPPA task force must inventory the organization's systems, processes, policies, procedures and data to determine which elements are critical to patient care and central to the organizations business. All must be inventoried and listed by

1. A. by priority as well as encryption levels, authenticity, storage-devices, availability, reliability, access and us
2. B. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used.
3. C. by priority and cost as well as availability, reliability, access and us
4. D. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used.
5. E. by priority as well availability, reliability, access and us
6. F. The person responsible for criticality analysis must remain mission-focused but need not document all the criteria used.
7. G. by priority as well as availability, reliability, access and us
8. H. The person responsible for criticality analysis must remain mission-focused and carefully document all the criteria used.

Correct Answer: D

A company whose Information Technology (IT) services are being delivered from a Tier 4 data center, is preparing a companywide Business Continuity Planning (BCP). Which of the following failures should the IT manager be concerned with?

1. A. Application
2. B. Storage
3. C. Power
4. D. Network

Correct Answer: C

An international medical organization with headquarters in the United States (US) and branches in France wants to test a drug in both countries. What is the organization allowed to do with the test subject’s data?

1. A. Aggregate it into one database in the US
2. B. Process it in the US, but store the information in France
3. C. Share it with a third party
4. D. Anonymize it and process it in the US

Correct Answer: C

Under the HIPAA Privacy Rule, who is NOT considered a covered entity?

1. A. Clearinghouse
2. B. Client patient
3. C. Health practitioner
4. D. Third party

Correct Answer: B
A health care provider, health plan, and a clearinghouse are all considered covered entities. HIPAA compliance is required of all covered entities.