CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental99+AL/AR/AZ +moreHealthcare & Clinical196+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification24+CAAviation & FAA Certification9Finance & Securities Licensing23IT & Cloud Certification6Project Management1Military Entrance Testing1View all sectors ›

Free Washington DC HIPAA Practice Test Online

Official exam: HIPAA General Workforce Compliance (DC)

Take a free Washington DC HIPAA practice test online: a full 100-question paper with every answer explained, no sign-up, scored by topic. The full 100-question bank and the timed simulator are $14.99 for 30 days.

First published: September 5, 2026Bank updated: September 5, 2026Published by CertQuestUSA · review process
TL;DR

HIPAA General Workforce Compliance (DC): a 100-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 100 questions each with no repeats, every question written to the regulation it comes from.

Where these questions come from

Every question in this bank cites a source -- primarily 45 CFR (100%) of this exam's citations.

Take a full practice test free. 100 real questions built to the exam's domain weights, every answer explained, no sign-up required, with a domain-by-domain score at the end.
Start diagnostic
Want the whole bank for HIPAA General Workforce Compliance (DC)? One payment of $14.99 gives you 30 days of full access to this exam. It does not renew. No account needed to buy, and there is a 7-day money-back guarantee.
Not ready yet? Take the free practice test first.
Ways to pay for the full bank
30-day pass
$14.99
about $15 a month
This exam only. Pays once, does not renew.
Monthly
$19.99
$19.99 a month
Every exam. Cancel any time.
Yearly
$143.93
about $11.99 a month
Every exam. Billed once a year.
Lifetime
$39.99
pay once
This exam only, no time limit.

See all plans and bundles

3
full papers, no repeats
100
questions per paper
100
questions in the bank
What this exam covers
5 real sample questions
A documented process for responding to and reporting suspected or known security incidents is required under the:
A. Security incident procedures standard
B. Notice of Privacy Practices requirement
C. Minimum necessary standard
D. Right of access provision
Show answer and reasoning

Correct answer: A. Security incident procedures standard

Correct. 45 CFR 164.308(a)(6) requires implementing policies and procedures to address security incidents, including identifying and responding to suspected or known incidents.

  • B: The NPP is a Privacy Rule notice document, unrelated to incident response procedures.
  • C: Minimum necessary governs the scope of PHI access/use, a separate standard.
  • D: Right of access concerns patient record requests, not incident response.
Source: 45 CFR 164.308(a)(6)
A contingency plan under the Security Rule must address:
A. Only marketing continuity
B. Data backup, disaster recovery, and emergency mode operation planning for systems containing ePHI
C. Employee vacation scheduling
D. Patient billing dispute resolution
Show answer and reasoning

Correct answer: B. Data backup, disaster recovery, and emergency mode operation planning for systems containing ePHI

Correct. 45 CFR 164.308(a)(7) requires a contingency plan covering data backup, disaster recovery, and emergency mode operation plans to protect ePHI availability.

  • A: Marketing continuity is not the subject of the contingency plan standard.
  • C: Vacation scheduling is an HR matter, not a Security Rule contingency requirement.
  • D: Billing dispute resolution is unrelated to the contingency planning standard.
Source: 45 CFR 164.308(a)(7)
Facility access controls under the Security Rule are intended to:
A. Limit physical access to facilities housing ePHI systems while ensuring authorized access
B. Regulate patient co-payments
C. Determine reimbursement rates
D. Control marketing email frequency
Show answer and reasoning

Correct answer: A. Limit physical access to facilities housing ePHI systems while ensuring authorized access

Correct. 45 CFR 164.310(a)(1) requires policies limiting physical access to electronic information systems and the facilities housing them, while ensuring properly authorized access is allowed.

  • B: Co-payments are unrelated to physical facility security.
  • C: Reimbursement rates are a payment matter, not a Security Rule physical safeguard.
  • D: Marketing email frequency is unrelated to facility access.
Source: 45 CFR 164.310(a)
Device and media controls under the Security Rule address:
A. The receipt and removal of hardware and electronic media containing ePHI in and out of a facility, and their final disposition
B. Employee dress code
C. Parking lot lighting only
D. Patient meal service
Show answer and reasoning

Correct answer: A. The receipt and removal of hardware and electronic media containing ePHI in and out of a facility, and their final disposition

Correct. 45 CFR 164.310(d)(1) requires policies for the receipt, removal, and disposal of hardware/media containing ePHI, including secure disposal and media re-use procedures.

  • B: Dress code is unrelated to device and media control requirements.
  • C: Parking lot lighting is a general facility safety issue, not a Security Rule requirement per se.
  • D: Meal service is unrelated to device/media handling.
Source: 45 CFR 164.310(d)(1)
Workstation security, distinct from workstation use policy, focuses on:
A. Physical safeguards restricting access to workstations that can access ePHI
B. Setting the workstation's desktop wallpaper
C. Determining which software licenses to purchase
D. Employee performance reviews
Show answer and reasoning

Correct answer: A. Physical safeguards restricting access to workstations that can access ePHI

Correct. 45 CFR 164.310(c) requires physical safeguards for all workstations that access ePHI, restricting access to authorized users.

  • B: Desktop wallpaper choice is not a regulated safeguard.
  • C: Software licensing decisions are a procurement matter, separate from this physical safeguard.
  • D: Performance reviews are an HR function unrelated to workstation physical security.
Source: 45 CFR 164.310(c)

Frequently asked questions

Where can I take a free Washington DC HIPAA practice test online?
Right here. CertQuestUSA's free Washington DC HIPAA practice test online is a full 100-question practice paper built to the real exam's domain weights, with every answer explained, with no sign-up and no credit card, and shows your score by topic at the end. The full 100-question bank, with every answer explained and cited to the regulation it comes from, is $14.99 for a 30-day pass that never renews.
How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (DC) practice test?
100 questions total, split into 3 full papers of 100 each with no repeats across papers.
What topics does the HIPAA General Workforce Compliance (DC) test cover?
25 domains, with the heaviest weight on Accounting of Disclosures (4%), Administrative Safeguards (4%), and Administrative Safeguards - Training (4%).
Where do CertQuestUSA's HIPAA General Workforce Compliance (DC) questions come from?
Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free HIPAA General Workforce Compliance (DC) practice test?
Yes -- one full 100-question practice paper built to the exam's domain weights, free with no sign-up, with every answer explained and a domain-by-domain score at the end.
Need the certificate itself, not just the practice?
This page is a practice test. Certified Training USA, our sister site, sells the HIPAA for the General Healthcare Workforce course with a certificate of completion.
See the course
Composing your paper...