CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental98+AL/AR/AZ +moreHealthcare & Clinical183+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification17Aviation & FAA Certification9Finance & Securities Licensing19View all sectors ›

HIPAA General Workforce Compliance (NH)

First published: September 5, 2026Last verified: September 5, 2026Reviewed by the CertQuestUSA team
TL;DR

HIPAA General Workforce Compliance (NH): a 100-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 100 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Start diagnostic
3
full papers, no repeats
100
questions per paper
100
questions in the bank
What this exam covers
5 real sample questions
Under the HIPAA Privacy Rule, which of the following is classified as a 'covered entity'?
A. A health plan that pays claims for enrollees
B. A cloud hosting company that stores encrypted backups for a hospital but never views the data
C. A janitorial contractor that cleans a medical office after hours
D. A patient's family member who helps manage the patient's care
Source: 45 CFR 160.103
A medical transcription service that receives dictated patient notes from a hospital to produce written records is best classified as a:
A. Covered entity
B. Business associate
C. Hybrid entity
D. Health care clearinghouse
Source: 45 CFR 160.103
Which entity is NOT a HIPAA covered entity even though it may handle health information?
A. A hospital that bills Medicare electronically
B. A dental office that submits electronic claims to insurers
C. An employer's human resources department maintaining its own personnel files
D. A pharmacy that transmits claims electronically
Source: 45 CFR 160.103
A subcontractor hired by a business associate to perform data storage involving PHI is:
A. Exempt from HIPAA because it has no direct relationship with the covered entity
B. Itself a business associate, subject to the same requirements as the entity that hired it
C. Only regulated if it is paid more than $10,000 annually
D. Automatically considered part of the covered entity
Source: 45 CFR 160.103; 164.308(b)
Which of the following is protected health information (PHI) under HIPAA?
A. A hospital's aggregate quarterly infection-rate statistics with no patient identifiers
B. A de-identified dataset stripped of all 18 HIPAA identifiers
C. An individually identifiable medical record maintained by a health care provider
D. Employment records held by an employer in its role as employer
Source: 45 CFR 160.103

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (NH) practice test?
100 questions total, split into 3 full papers of 100 each with no repeats across papers.
What topics does the HIPAA General Workforce Compliance (NH) test cover?
25 domains, with the heaviest weight on Accounting of Disclosures (4%), Administrative Safeguards (4%), and Administrative Safeguards - Training (4%).
Where do CertQuestUSA's HIPAA General Workforce Compliance (NH) questions come from?
Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free diagnostic for HIPAA General Workforce Compliance (NH)?
Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Composing your paper...