HIPAA General Workforce Compliance (DC)

First published: September 5, 2026Last verified: September 5, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (DC): a 100-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 100 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

100

questions per paper

100

questions in the bank

What this exam covers

Accounting of Disclosures4%
Administrative Safeguards4%
Administrative Safeguards - Training4%
Administrative Safeguards - Workforce Access4%
Authorization Requirements4%
Breach Definition4%
Breach Notification - Large Breaches4%
Breach Notification Timing4%
Breach Risk Assessment4%
Business Associate Agreements4%
Covered Entities & Business Associates4%
De-identification4%
Marketing and Sale of PHI4%
Notice of Privacy Practices4%
Patient Right of Access4%
Patient Right to Amend4%
Permitted Uses and Disclosures4%
PHI Definition4%
Physical Safeguards4%
Right to Request Restrictions4%
Technical Safeguards - Access Control4%
Technical Safeguards - Audit Controls4%
Technical Safeguards - Transmission Security4%
Workforce Sanctions4%
Workforce Training Timing4%

5 real sample questions

A documented process for responding to and reporting suspected or known security incidents is required under the:

A. Security incident procedures standard

B. Notice of Privacy Practices requirement

C. Minimum necessary standard

D. Right of access provision

Source: 45 CFR 164.308(a)(6)

A contingency plan under the Security Rule must address:

A. Only marketing continuity

B. Data backup, disaster recovery, and emergency mode operation planning for systems containing ePHI

C. Employee vacation scheduling

D. Patient billing dispute resolution

Source: 45 CFR 164.308(a)(7)

Facility access controls under the Security Rule are intended to:

A. Limit physical access to facilities housing ePHI systems while ensuring authorized access

B. Regulate patient co-payments

C. Determine reimbursement rates

D. Control marketing email frequency

Source: 45 CFR 164.310(a)

Device and media controls under the Security Rule address:

A. The receipt and removal of hardware and electronic media containing ePHI in and out of a facility, and their final disposition

B. Employee dress code

C. Parking lot lighting only

D. Patient meal service

Source: 45 CFR 164.310(d)(1)

Workstation security, distinct from workstation use policy, focuses on:

A. Physical safeguards restricting access to workstations that can access ePHI

B. Setting the workstation's desktop wallpaper

C. Determining which software licenses to purchase

D. Employee performance reviews

Source: 45 CFR 164.310(c)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (DC) practice test?

100 questions total, split into 3 full papers of 100 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (DC) test cover?

25 domains, with the heaviest weight on Accounting of Disclosures (4%), Administrative Safeguards (4%), and Administrative Safeguards - Training (4%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (DC) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (DC)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.