HIPAA HIO-201 Exam
Certified HIPAA Professional (Page 3 )

Updated On: 7-Feb-2026

This transaction type may be used in three ways:

1) Reply to a Health Care Claim Status Request.
2) Unsolicited notification of a health care claim status.
3) Request for additional information about a health care claim.

  1. 837.
  2. 820.
  3. 277.
  4. 835.
  5. 278.

Answer(s): C



The scope of the Privacy Rule includes:

  1. All Employers.
  2. The Washington Publishing Company
  3. Disclosure of non-identifiable demographics.
  4. Oral disclosure of PHI.
  5. The prevention of use of de-identified information.

Answer(s): D



The Privacy Rule has broad administrative requirements.
Which one of the following requirements is defined under the Privacy Rule?

  1. Designate a security officer.
  2. Document termination procedures.
  3. Use biometrics to authenticate transactions.
  4. Deploy tokens and smart cards to all medical personnel.
  5. Verify that business associates treat patient information respectfully.

Answer(s): E



The Privacy Rule interacts with Federal and State laws by:

  1. Establishing an orderly hierarchy where HIPAA applies, then other Federal law, then State law.
  2. Defining privacy to be a national interest that is best protected by Federal law
  3. Allowing State privacy laws to provide a cumulative effect lower than HIPAA.
  4. Mandating that Federal laws preempt State laws regarding privacy.
  5. Establishing a "floor" for privacy protection.

Answer(s): E



The code set that must be used to describe or identify inpatient hospital services and surgical procedures is:

  1. ICD-9-CM, Volumes land 2
  2. CPT-4
  3. CDT
  4. ICD-9-CM, Volume 3
  5. HCPCS

Answer(s): D






Post your Comments and Discuss HIPAA HIO-201 exam prep with other Community members:

Join the HIO-201 Discussion