HCISPP ISC2 Practice Questions

Question #1 (Topic: Demo Questions)

A covered healthcare provider which a direct treatment relationship with an individual need not:

A.

provide the notice no later than the date of the firstservice delivery, including service delivered electronically

B.

have the notice available at the service delivery site for individuals to request andkeep

C.

get a acknowledgement of the notice from each individual on stamped paper

D.

post the notice in a clear and prominent location where it is reasonable to expect individuals seeking service from the covered healthcare provider to be able to read it

Correct Answer: C

Explanation not available for this question.

Question #2 (Topic: Demo Questions)

Which of the following is the BEST reason for writing an information security policy?

A.

Tosupport information security governance

B.

Toreduce the number of audit findings

C.

Todeter attackers

D.

Toimplement effective information security controls

Correct Answer: A

Explanation not available for this question.

Question #3 (Topic: Demo Questions)

Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

A.

poor governance over security processes and procedures

B.

immature security controls and procedures

C.

variances against regulatory requirements

D.

unanticipated increases in security incidents and threats

Correct Answer: A

Explanation not available for this question.

Question #4 (Topic: Demo Questions)

How many major concepts are associated with the privacy rule?

A.

One

B.

Two

C.

Three

Correct Answer: B

Explanation not available for this question.

Question #5 (Topic: Demo Questions)

You always abide by the HIPAA privacy rule.

A. True

B. False

Next Question

Correct Answer: B

Explanation not available for this question.

ISC2 HCISPP - HealthCare Information Security and Privacy Practitioner Certification Exam

A covered healthcare provider which a direct treatment relationship with an individual need not:

provide the notice no later than the date of the firstservice delivery, including service delivered electronically

have the notice available at the service delivery site for individuals to request andkeep

get a acknowledgement of the notice from each individual on stamped paper

post the notice in a clear and prominent location where it is reasonable to expect individuals seeking service from the covered healthcare provider to be able to read it

Correct Answer: C

Which of the following is the BEST reason for writing an information security policy?

Tosupport information security governance

Toreduce the number of audit findings

Todeter attackers

Toimplement effective information security controls

Correct Answer: A

Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

poor governance over security processes and procedures

immature security controls and procedures

variances against regulatory requirements

unanticipated increases in security incidents and threats

Correct Answer: A

How many major concepts are associated with the privacy rule?

One

Two

Three

Correct Answer: B

You always abide by the HIPAA privacy rule.

Correct Answer: B