A key date in the transaction rule timeline is:

1. A. October 16, 2003 - small health plans to begin testing without ASCA extension
2. B. October 16, 2004 - full compliance deadline for small health plans
3. C. April 16, 2004 - small health plans to begin testing with ASCA extension
4. D. April 16, 2003 - deadline to begin testing with ASCA extension
5. E. April 14, 2003; deadline to begin testing with the ASCA extension.

Correct Answer: D

Formal, documented instructions for reporting security breaches are referred to as:

1. A. Business Associate Contract
2. B. Response and Reporting
3. C. Emergency Access Procedure
4. D. Sanction policy
5. E. Risk Management

Correct Answer: B

The code set that must be used to describe or identify dentists services and procedures is:

1. A. ICD-9-CM, Volumes 1 and 2
2. B. CPT-4
3. C. CDT
4. D. ICD-9-CM, Volume 3
5. E. HCPCS

Correct Answer: C

Periodic testing and revision of contingency plans is addressed by:

1. A. Testing and Revision Procedures
2. B. Information System Activity Review
3. C. Response and Reporting
4. D. Data Backup Plan
5. E. Emergency Access Procedure

Correct Answer: A

Encryption is included as an addressable implementation specification under which security rule standard?

1. A. Information Access Management
2. B. Security Management Process
3. C. Evaluation
4. D. Transmission Security
5. E. Device and Media Controls

Correct Answer: D