This transaction type is a "response" transaction that may include information such as accepted/rejected claim, approved claim(s) pre-payment, or approved claim(s) post- payment:

1. A. 270.
2. B. 820
3. C. 837.
4. D. 277.
5. E. 278.

Correct Answer: D

The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:

1. A. Situations where the marketing is for a drug or treatment could improve the health of that individual.
2. B. Situations where the patient has already signed the covered entity's Notice of Privacy Practices.
3. C. A face-to-face encounter with the sales person of a company that provides drug samples
4. D. A communication involving a promotional gift of nominal value.
5. E. The situation where the patient has signed the Notice of Privacy Practices of the marketer.

Correct Answer: D

Workstation Use falls under which Security Rule area?

1. A. Person or Entity Authentication
2. B. Technical Safeguards
3. C. Administrative Safeguards
4. D. Physical Safeguards
5. E. Transmission Security

Correct Answer: D

Policies and procedures that address the final disposition of electronic PHI (including the media on which is stored) is address by this required implementation specification.

1. A. Media Re-use
2. B. Termination Procedures
3. C. Risk Management
4. D. Maintenance Records
5. E. Disposal

Correct Answer: E

The key objective of a contingency plan is that the entity must establish and implement policies and procedures to ensure the:

1. A. Creation and modification of health information during and after an emergency.
2. B. Integrity of health information during and after an emergency.
3. C. Accountability of health information during and after an emergency.
4. D. Vulnerability of health information during and after an emergency.
5. E. Non-repudiation of the entity.

Correct Answer: B