ISC2 HCISPP Exam - Topic 4 Question 5 Discussion

Actual exam question for ISC2's HCISPP exam

Question #: 5
Topic #: 4

Covered entities (certain health care providers, health plans, and health care clearinghouses) are not required to comply with the HIPPA Privacy Rule until the compliance date. Covered entities may, of course, decide to:

Aunvoluntarily protect patient health information before this date

Bvoluntarily protect patient health information before this date

Cafter taking permission, voluntarily protect patient health information before this date

Dcompulsorily protect patient health information before this date

Show Suggested Answer

Suggested Answer: B

by Shawna at May 06, 2022, 10:33 PM

Limited Time Offer

25%

Off

Get Premium HCISPP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wei

4 months ago

Not sure why they wouldn't just comply right away.

upvoted 0 times

...

Candra

4 months ago

Voluntary protection is definitely the way to go!

upvoted 0 times

...

Pamella

4 months ago

Wait, they can protect it involuntarily? That sounds off.

upvoted 0 times

...

Lindsey

4 months ago

I totally agree, it's a good practice!

upvoted 0 times

...

Mila

5 months ago

Covered entities can choose to protect info early.

upvoted 0 times

...

Earnestine

5 months ago

I don't think they can be forced to protect information before the compliance date, so D seems wrong. I’m leaning towards B as the best option.

upvoted 0 times

...

Glendora

5 months ago

I vaguely recall something about needing patient permission to protect their information, but I can't remember if that applies here. Maybe it's C?

upvoted 0 times

...

Hermila

5 months ago

I feel like this question is similar to one we did in class about voluntary compliance. I think the answer is B, but I’m not completely confident.

upvoted 0 times

...

Francoise

5 months ago

I think I remember that covered entities can choose to protect patient information even before the compliance date, but I'm not sure if it's mandatory or just a good practice.

upvoted 0 times

...

Floyd

5 months ago

This question seems pretty straightforward. I think the due diligence exemption was meant to apply to companies researching business mergers, so I'll go with option B.

upvoted 0 times

...

Angelica

5 months ago

I've got a good strategy for this. I'll focus on the DHCP configuration details, like the host declaration and the fixed-address directive, to determine the correct option.

upvoted 0 times

...

Dana

5 months ago

Hmm, I'm a bit unsure about this one. I know there are a few different ways to remove a table, but I can't remember the exact syntax off the top of my head.

upvoted 0 times

...

Jesusita

5 months ago

I'm a little confused by this question. I know code review is important, but I'm not sure where it fits into the version control workflow. I'll have to review my notes and try to figure this out.

upvoted 0 times

...

Shawnee

5 months ago

Okay, I've got a good handle on the connectivity options now. I think the best approach is to consider the security and performance requirements for accessing Azure, and then match that to the appropriate connectivity solution.

upvoted 0 times

...