LSUHSC Office of Compliance Programs (OCP) Practice Exam

These questions are part of the practice quiz. Start practicing

• Where can you find more information about HIPAA regulations and privacy practices?
• What is one important step to take if you receive an email requesting sensitive information?
• What is the primary benefit of maintaining patient confidentiality?
• What is the primary responsibility of LSUHSC-NO regarding its community?
• In a specific scenario, what must Carole do after making her report?
• What strict requirements are imposed by laws governing the use and disclosure of information at LSUHSC-NO?
• If you find a handgun in a student's backpack, what is the correct response?
• When should you report an accident that occurs in the workplace?
• What is a recommended practice when sending medical information between doctors?
• How should someone react to a known risk of a weapon on campus?
• According to LSUHSC-NO policy, if you want to keep protected information on your laptop, what must you do?
• Which of the following practices could help prevent compliance violations?
• Which of the following is not an element of an effective compliance program?
• To secure your laptop while traveling, which of these practices should you implement?
• Within what timeframe must the DA 2000 form be electronically submitted after an employee accident?
• Which factor is NOT considered in evaluating the existence of a dating violence relationship?
• What should not be included in a patient's medical record without specific authorization?
• Who designates personal protective equipment (PPE) for each task?
• What should be done if someone is aware of sexual harassment?
• Why did the University of Florida agree to pay almost $20 million in fines to HHS?
• Which action should be taken in case of an emergency situation on campus?
• During an Active Shooter event, what should you know about the first responders?
• What does PHI stand for in a healthcare context?
• How should researchers like Dr. Pertwee approach sensitive data sharing?
• What should Dr. Eccleston do before creating an online status document for ICU patients?
• What is the best practice if an email contains a link that seems suspicious?
• What should be a primary consideration when handling patient information?
• Which of the following is not an element of an effective compliance program?
• What could happen if a hospital employee sends PHI via email despite a ban?
• What should a person do if they have asked a harasser to stop, but the behavior continues?
• What is the first step after an incident where a researcher injures themselves with a needle during a procedure?
• What should be done when you have a minor incident that doesn’t result in injury?
• Which of the following are examples of state assets?
• Which of the following is a potential consequence of data breaches?
• What is a potential consequence of a breach of PHI?
• Which action is deemed unacceptable network use?
• Is there a fee for filing a protective order in court?
• What constitutes an accident according to the provided context?
• What disciplinary action may be taken against individuals found guilty of sexual harassment?
• In the context of safety practices, what does PPE stand for?
• What is the role of the supervisor in relation to occupational health and safety measures?
• Which is the correct method for Dr. Hartnell to securely send a report to Dr. Troughton?
• Which of the following actions can be classified as workplace violence?
• Is it true that information stored in cloud services always remains in the United States?
• What must healthcare providers do to ensure proper handling of sensitive patient data?
• What are the two main components that constitute PHI?
• Which viruses are of primary concern in the occupational setting?
• If a 50-pound box falls off a shelf but does not result in injury, what should you do?
• If you are a new employee classified as High Risk and desire the hepatitis B vaccination series, what should you do?
• What is a safeguard you can implement to prevent a data breach?
• What should you do after receiving a call from Payroll about an issue with your 1095-C?
• What should you do if you notice suspicious activity on the network?
• What is the appropriate action to take for reporting an emergency on campus?
• What action should be taken immediately if there is a breach of a patient's PHI?
• Which of the following passwords is considered the strongest?
• What option do victims of assault have for academic adjustments?
• What could be a consequence of ineffective communication in the workplace?
• Are both the accuser and the accused allowed to have advisors during disciplinary proceedings?
• Is it true that minor injuries such as cuts or sprains can be classified as accidents?
• When may Louisiana state assets be used for the benefit of a private organization?
• Which of the following is NOT a valid method for transmitting PHI?
• What is vishing?
• What should a healthcare provider do with extra printouts containing patient information that were printed in error?
• What actions should you avoid if you have been the victim of an assault?
• If you smell what could be natural gas, what is the first action you should take?
• What should you do if a Category 4 hurricane threatens the University but then weakens significantly?
• Who is responsible for ensuring proper testing and medical treatment is provided to the employee/student?
• Is terminating an employee for engaging in sexual harassment considered retaliation?
• You receive an Active Shooter alert on campus. When is it safe to come out of your office?
• Which of the following is a consequence of failure to adhere to federal and state laws and regulations?
• If you receive a text message about an account you didn’t enroll in, what is the recommended action?
• In what situation is a healthcare provider allowed to disclose HIV status without consent?
• When can protected health information (PHI) be disclosed without authorization?
• What secure method can Dr. Pertwee request from Dr. Tennant for sending patient data?
• In the event of a train derailment releasing toxic gas, what action should personnel at the School of Dentistry take?
• Bystander intervention is essential in preventing violence because it:
• Who should be informed if there is uncertainty regarding the PHI policy?
• What actions will the Title IX coordinator take upon receiving a sexual harassment complaint?
• Which statement is NOT true regarding the Notice of Privacy Practices (NPP)?
• Which is NOT considered a method to prevent bloodborne infections?
• What is a potential sign of workplace violence?
• If Dr. Hartnell discovers that Dr. Troughton's network does not support encryption, what should he do?
• Should a healthcare provider give follow-up treatment information to an ambulance company?
• Which action is acceptable according to HIPAA regulations when handling PHI?
• What is stalking defined as?
• What important action should Jo take to enhance her security when using a new device?
• To whom can a healthcare provider disclose patient information without obtaining patient authorization?
• To ensure you receive all text alerts from LSUHSC, what action must faculty, students, and staff take?
• When redacting a document, what is crucial to ensure successful redaction?
• Which of the following is a potential trigger for domestic violence?
• Which of the following statements about domestic violence is true?
• During what time period must official business accidents be reported using the DA 2041 form?
• What should you do when the fire alarm goes off in your building?
• What principle underlies the importance of protecting PHI in healthcare settings?
• The Patient Protection and Affordable Care Act requires healthcare providers billing Medicare and Medicaid to have an effective compliance program in place. What is the nature of this requirement?
• If an auditor you’ve never met requests you to copy files to their thumb drive, what is the best course of action?
• What occurs next after a privacy breach involving a stolen, unencrypted laptop?
• Which statement about data breaches is NOT true?
• What is a primary purpose of the Privacy Rule?
• Which of the following is a sign that an email could be a phishing attempt?
• Why did the LSU Board of Supervisors require all the health sciences centers to develop compliance programs in 1998?
• If unsure about how to handle PHI, what should a hospital employee do?
• What is the PRIMARY measure for prevention of hepatitis B in the occupational setting?
• In the event of a data breach, what should you prioritize?
• If a minor injury occurs in the classroom, what documentation is necessary?
• What action should you avoid if you receive a suspicious email from the "IT Department" asking for login credentials?
• Upon noticing a strange email sent from your account, what should you do?
• What constitutes a potential violation of the Privacy Rule?
• Which of the following signifies a high-risk classification in an occupational context?
• Which behaviors are early warning signs of potential workplace violence?
• In the event a student sustains a minor injury in class, what form must be completed?
• Which action may result in increased scrutiny from federal regulators?
• What should an individual do when witnessing workplace harassment?
• What is the best method for securely managing multiple user IDs and passwords?
• In a healthcare setting, what is a critical component of maintaining confidentiality?
• When is a patient's authorization to release information generally required?
• After accidentally sticking yourself with a needle while handling a Recombinant DNA solution, what is the first step you should take?
• When an individual is debarred or excluded, what are they unable to receive payment from?
• Why is "highlighting in black" considered a poor method for redaction?
• An exposure incident refers to which type of event?
• Can a patient request the removal of specific information from their medical record?
• Which of the following would be considered a federal funding consequence for non-compliance?
• If you receive a bomb threat phone call, what is the recommended action?
• Universal precautions are the practice of treating which of the following as if they are known to be infectious?
• Which of the following is an appropriate alternative to sending PHI via email?
• If someone witnesses sexual harassment, what is the appropriate action?
• In the event of a neighbor arriving in the ER after a car crash, what should you do?
• If an employee stubs their toe, should University Police be called to respond?
• Why should a victim consider undergoing a forensic medical exam?
• What should you do if a physician insists on receiving PHI via email?
• Which professional approach can help mitigate incidents of violence?
• What should victims of sexual assault be informed about?
• What is the best course of action when a hospital policy forbids sending Protected Health Information (PHI) via email?
• What is the easiest way to enhance the security of your password?
• Which behavior can lead to disciplinary action regarding data privacy?
• Biosafety level (BSL) ___ practices are followed when working with blood and OPIM.
• What is the most important step to prevent a data breach when transitioning to a new position?
• If you were involved in an automobile accident while on official business, when should you submit the DA 2041 form?
• Who qualifies as a responsible employee in the context of reporting sexual harassment?
• What must a patient do to access or copy their protected health information (PHI)?
• You can begin the process of filing for a protective order by going online. Is this statement true or false?
• Sexual harassment can occur in which of the following contexts?
• Which of the following is NOT a method for reporting a crime using your cell phone?
• What should you do if you receive an email with a header suggesting it's from the HR Department, but the email address doesn't end with your organization's domain?
• What action should you take if a contractor slips and sprains their ankle during a campus tour?
• Should Incident/Accident Reporting forms be submitted electronically via the State Office of Risk Management website?
• Which approach is most effective in preventing data breaches when using your laptop off-site?
• What is the primary purpose of the HIPAA regulations?
• Which of the following options best describes the role of the Compliance Office/Privacy Officer?
• Who should you contact if you want to discuss an issue confidentially?
• Who can inflict workplace violence?
• What is a common reason for an organization to be audited?
• What is the potential risk of not checking device settings upon purchase?
• What should a healthcare worker do if exposed to blood or other potentially infectious materials?
• What measure should be taken before leaving your workplace with confidential information?
• What rights do victims of sexual assault have regarding their academic situation?
• What is the minimum duration for washing hands properly?
• What is the ultimate defense against malware according to compliance best practices?
• Which group is primarily responsible for overseeing compliance programs in health sciences centers?
• If a patient wants to access their medical record, what must they provide in order to do so?
• You receive a suspicious package with no return address. What should you do?
• Which is a primary goal of HIPAA?
• Which behavior is encouraged when reporting incidents on campus?
• When asked for sensitive information by a colleague, what should be your response?
• What should the surgeon and radiologist have done in the cafeteria to comply with the Privacy Rule while discussing a case?
• Under HIPAA, what risk does sending PHI via unsecured emails pose?
• Why is it important to adhere to policies regarding PHI?
• What does OPIM stand for in relation to universal precautions?
• What should you do when you suspect your email account has been compromised?
• When sharing sensitive information, what precaution must be taken according to LSUHSC compliance?
• Which factor would indicate that an email might be a phishing attempt?
• What is the minimum necessary standard in the context of PHI disclosure?
• What should someone do if they witness a crime happening?
• Why is understanding cloud service settings important for users?
• Why is it essential to check default settings on a new device?
• Which of the following actions can lead to debarment?
• If an employee had an accident that required a doctor's visit, is completing the Office of Workers Compensation DA 1973 form the only reporting action required?
• What does the term "in the cloud" refer to in technology?
• If your LSUHSC-NO issued laptop containing PHI has been stolen, what is your next step?