AMIA Health Informatics Certification (AHIC) — Questions and Answers

Question 1: A hospital implements automated post-discharge text messages asking patients to report symptoms. This is an example of:

Electronic prior authorization
Mandatory reporting under public health law
Proactive outreach using patient-generated health data workflows (Correct answer)
Clinical documentation improvement

Correct answer: Proactive outreach using patient-generated health data workflows

Automated post-discharge symptom check texts are a proactive outreach strategy designed to capture patient-generated health data and prevent readmissions.

Question 2: What is HIPAA?

A type of insurance plan
A hospital ranking system
A medical diagnosis code
Health Insurance Portability and Accountability Act — protects patient privacy (Correct answer)

Correct answer: Health Insurance Portability and Accountability Act — protects patient privacy

HIPAA establishes national standards for protecting patient health information, ensuring privacy and security of medical records.

Question 3: A health system is migrating data from an old EHR to a new one. What process ensures that the migrated data accurately reflects the original records?

Capacity planning
Network segmentation
User acceptance testing
Data validation and reconciliation (Correct answer)

Correct answer: Data validation and reconciliation

Data validation and reconciliation compare source and target datasets to confirm completeness and accuracy of the migration.

Question 4: The SQUIRE 2.0 guidelines are used to:

Standardize patient safety event reporting to state health departments
Guide the reporting of healthcare quality improvement studies in peer-reviewed publications (Correct answer)
Set minimum EHR data quality standards for QI data extraction
Provide a framework for root cause analysis documentation

Correct answer: Guide the reporting of healthcare quality improvement studies in peer-reviewed publications

SQUIRE (Standards for QUality Improvement Reporting Excellence) 2.0 provides guidelines for reporting healthcare QI work in scientific publications, ensuring sufficient detail for others to assess and replicate the work.

Question 5: Which organization is responsible for maintaining and publishing the International Classification of Diseases (ICD)?

Centers for Medicare & Medicaid Services (CMS)
American Medical Association (AMA)
National Library of Medicine (NLM)
World Health Organization (WHO) (Correct answer)

Correct answer: World Health Organization (WHO)

The World Health Organization (WHO) owns and publishes ICD, while the US creates national clinical modifications (ICD-10-CM/PCS) for domestic use.

Question 6: What does a 'disaster recovery plan' in a healthcare information system context primarily address?

Managing staff schedules during emergencies
Redesigning the EHR user interface post-incident
Restoring IT systems and data after a disruptive event (Correct answer)
Training clinicians on emergency protocols

Correct answer: Restoring IT systems and data after a disruptive event

A disaster recovery plan outlines procedures to restore IT infrastructure and data access after events like system failures or cyberattacks.

Question 7: Which of the following is TRUE about de-identified data under HIPAA?

It is still subject to all HIPAA privacy protections
It is no longer considered PHI and is not subject to HIPAA (Correct answer)
It must be encrypted before sharing
It requires patient authorization before research use

Correct answer: It is no longer considered PHI and is not subject to HIPAA

Under HIPAA, properly de-identified data is no longer considered PHI and can be used and disclosed without the restrictions that apply to identifiable health information.

Question 8: Which federal agency oversees the ONC Health IT Certification Program?

Centers for Medicare & Medicaid Services
Food and Drug Administration
Agency for Healthcare Research and Quality
Office of the National Coordinator for Health Information Technology (Correct answer)

Correct answer: Office of the National Coordinator for Health Information Technology

ONC (Office of the National Coordinator for Health Information Technology) administers the health IT certification program established under the HITECH Act.

Question 9: What is the primary purpose of professional certification in Interoperability?

To validate competency and knowledge in the field (Correct answer)
To meet legal requirements only
To replace practical experience
To increase salary automatically

Correct answer: To validate competency and knowledge in the field

Certification validates that a professional has met established standards of knowledge and competency in Interoperability.

Question 10: In health informatics, what is the primary advantage of a Service-Oriented Architecture (SOA) over a monolithic system design?

Simpler user authentication
Modular services that can be updated independently without affecting the whole system (Correct answer)
Lower initial development cost
Reduced need for clinical workflow analysis

Correct answer: Modular services that can be updated independently without affecting the whole system

SOA breaks applications into discrete services that communicate via APIs, allowing independent deployment and scaling of individual components.

Question 11: A health informaticist is tasked with selecting a data warehouse solution. Which characteristic is MOST important for supporting complex analytical queries on large clinical datasets?

OLTP (Online Transaction Processing) optimization
Minimal storage capacity to reduce cost
Columnar storage and OLAP (Online Analytical Processing) support (Correct answer)
High write throughput for real-time charting

Correct answer: Columnar storage and OLAP (Online Analytical Processing) support

Columnar storage optimized for OLAP enables efficient aggregation and analysis of large datasets, making it ideal for clinical data warehouses.

Question 12: Which of the following best describes the role of clinical informatics in patient care?

It manages hospital finances and billing systems
It helps healthcare providers use technology to improve patient care and outcomes (Correct answer)
It focuses on scheduling patient appointments
It automates patient diagnosis

Correct answer: It helps healthcare providers use technology to improve patient care and outcomes

Clinical informatics is a specialized field that applies information science and technology to improve healthcare delivery and patient outcomes. It focuses on how technology can be used by healthcare providers to manage patient data, support clinical decision-making, and streamline workflows. This ultimately leads to more efficient, safer, and higher-quality patient care.

Question 13: Which US federal mandate requires the use of standardized terminologies (including SNOMED CT, LOINC, and RxNorm) in certified EHR technology?

ONC 21st Century Cures Act Final Rule (Correct answer)
HITECH Act Meaningful Use Stage 1
HIPAA Security Rule
Medicare Access and CHIP Reauthorization Act (MACRA)

Correct answer: ONC 21st Century Cures Act Final Rule

The ONC 21st Century Cures Act Final Rule mandates specific standardized terminologies (SNOMED CT, LOINC, RxNorm, ICD-10) for use in certified EHR technology to support interoperability.

Question 14: A hospitalized patient's EHR shows conflicting medication allergy entries from two different encounters. Which informatics principle should guide resolution?

Keep both entries to preserve history
Flag for pharmacy review only
Delete the older entry automatically
Reconcile using a single source of truth with clinical review (Correct answer)

Correct answer: Reconcile using a single source of truth with clinical review

Allergy reconciliation requires clinical review to establish a single authoritative record, preventing both under- and over-documentation of allergies.

Question 15: In master data management (MDM), which process resolves the problem of the same patient appearing as multiple records across different source systems?

Data enrichment
Schema mapping
Entity resolution (record linkage) (Correct answer)
Data profiling

Correct answer: Entity resolution (record linkage)

Entity resolution uses deterministic or probabilistic matching algorithms to identify and merge duplicate representations of the same real-world patient across systems.

Question 16: Why is continuing education important in Interoperability?

To stay current with evolving standards and practices (Correct answer)
Only for re-certification requirements
It is not important after certification
To network only

Correct answer: To stay current with evolving standards and practices

Continuing education keeps professionals updated with the latest developments, standards, and best practices in their field.

Question 17: Which metric is MOST relevant when evaluating the impact of a CDS intervention on clinical outcomes?

Alert override rate
Number of alerts generated
System uptime percentage
Change in the targeted clinical event rate (Correct answer)

Correct answer: Change in the targeted clinical event rate

The ultimate measure of CDS effectiveness is whether the targeted clinical event rate (e.g., hospital-acquired infection, adverse drug event) actually changes.

Question 18: Which statistical measure is most resistant to the influence of extreme outlier values in a clinical dataset?

Variance
Median (Correct answer)
Mean
Standard deviation

Correct answer: Median

The median is the middle value and is not affected by extreme outliers, making it more robust than the mean for skewed clinical distributions.

Question 19: Which of the following is an example of a Health Information System (HIS)?

A mobile app for patient appointment booking
A social media platform for healthcare professionals
A fitness tracker worn by patients
An electronic prescription system used by doctors (Correct answer)

Correct answer: An electronic prescription system used by doctors

A Health Information System (HIS) is a broad term encompassing various systems that manage health-related data. An electronic prescription system, which allows doctors to digitally prescribe medications, is a direct example of an HIS because it handles critical patient health information and streamlines a core healthcare process. It directly contributes to the management and flow of health data within the system.

Question 20: What is the most effective way to prevent healthcare-associated infections?

Proper hand hygiene (Correct answer)
Wearing gloves at all times
Taking antibiotics
Cleaning the floor

Correct answer: Proper hand hygiene

Hand hygiene (washing with soap and water or using alcohol-based hand rub) is the single most effective measure for preventing the spread of infections in healthcare settings.

Question 21: What is the CIA triad in information security?

Certified Information Auditor
Central Intelligence Agency
Cybersecurity Infrastructure Act
Confidentiality, Integrity, Availability (Correct answer)

Correct answer: Confidentiality, Integrity, Availability

The CIA triad represents three core security principles: Confidentiality (keeping data private), Integrity (data accuracy), Availability (systems accessible when needed).

Question 22: A hospital is integrating lab results from multiple EHR systems that use different LOINC codes for the same test. Which interoperability layer does this problem primarily affect?

Semantic interoperability (Correct answer)
Technical interoperability
Organizational interoperability
Legal interoperability

Correct answer: Semantic interoperability

Semantic interoperability ensures that data shared between systems carries the same meaning, requiring standardized terminologies like LOINC to be consistently applied.

Question 23: What does 'uptime' refer to in the context of healthcare information system availability metrics?

The percentage of time a system is operational and accessible (Correct answer)
The speed of data entry by clinicians
The frequency of software update deployments
The number of active users on the system

Correct answer: The percentage of time a system is operational and accessible

Uptime measures the proportion of time a system is available and functioning, often expressed as a percentage (e.g., 99.9%).

Question 24: A nurse documents a patient fall in a structured incident report system linked to the EHR. What is the PRIMARY informatics benefit of this integration?

Reduced documentation burden for physicians
Improved lab result routing
Faster billing submission
Automated adverse event analysis and safety reporting (Correct answer)

Correct answer: Automated adverse event analysis and safety reporting

EHR-integrated incident reporting enables systematic adverse event tracking, root cause analysis, and quality improvement workflows.

Question 25: Semantic interoperability in health information exchange depends primarily on:

Consistent use of shared, standardized clinical terminologies across systems (Correct answer)
Transmission speed and network bandwidth between organizations
Standardized graphical user interface design across applications
Uniform use of a single EHR vendor platform

Correct answer: Consistent use of shared, standardized clinical terminologies across systems

Semantic interoperability requires that the meaning of exchanged data is preserved and understood consistently, which depends on shared use of standardized clinical terminologies.

Question 26: Which of the following is an example of how clinical informatics can improve patient safety?

Reducing the number of administrative staff in healthcare facilities
Automating patient appointment reminders
Replacing human healthcare providers with AI
Automated alerts for potential drug interactions or allergies in EHRs (Correct answer)

Correct answer: Automated alerts for potential drug interactions or allergies in EHRs

Automated alerts within Electronic Health Records (EHRs) for potential drug interactions or patient allergies are a crucial application of clinical informatics that directly enhances patient safety. These alerts provide real-time warnings to healthcare providers, preventing medication errors that could lead to adverse reactions or harm. This proactive system significantly reduces risks associated with prescribing and administering medications.

Question 27: Which concept describes the practice of building redundant components in a health information system to prevent single points of failure?

Load balancing
Data normalization
Fault tolerance (Correct answer)
Data mining

Correct answer: Fault tolerance

Fault tolerance involves redundant components so that if one fails, the system continues operating without disruption.

Question 28: A hospital is benchmarking its surgical site infection (SSI) rates. The most appropriate external benchmark source for US hospitals would be:

State health department minimum thresholds
Individual hospital's peer-reviewed publications
Internal historical data from the past two years
CDC National Healthcare Safety Network (NHSN) data (Correct answer)

Correct answer: CDC National Healthcare Safety Network (NHSN) data

The CDC's NHSN provides standardized, nationally aggregated infection data that hospitals can use to benchmark their SSI rates against risk-stratified national data using standardized definitions.

Question 29: Which terminology system is primarily used for inpatient diagnosis and procedure coding for billing and reimbursement in the United States?

ICD-10-CM/PCS (Correct answer)
LOINC
CPT
SNOMED CT

Correct answer: ICD-10-CM/PCS

ICD-10-CM (diagnosis) and ICD-10-PCS (inpatient procedures) are mandated by CMS for hospital billing and reimbursement in the United States.

Question 30: HCPCS Level II codes extend CPT codes to cover which additional billing scenarios?

Inpatient hospital procedures not in ICD-10-PCS
Outpatient mental health and behavioral health services
International diagnosis codes not covered by ICD-10-CM
Durable medical equipment, supplies, and non-physician services billed to Medicare/Medicaid (Correct answer)

Correct answer: Durable medical equipment, supplies, and non-physician services billed to Medicare/Medicaid

HCPCS Level II codes cover items and services not included in CPT, such as durable medical equipment (DME), ambulance services, and certain drugs billed to Medicare and Medicaid.

Question 31: Under the 21st Century Cures Act, which rule specifically prohibits healthcare entities from blocking patients' access to their electronic health information?

The Interoperability and Patient Access Final Rule
The HIPAA Omnibus Rule
The Anti-Kickback Statute
The Information Blocking Rule (ONC) (Correct answer)

Correct answer: The Information Blocking Rule (ONC)

The ONC Information Blocking Rule, enacted under the 21st Century Cures Act, prohibits practices that unreasonably interfere with patient access to EHI.

Question 32: In the context of CDS lifecycle management, what does 'sunset' mean?

Retiring and deactivating a CDS rule that is no longer clinically valid or relevant (Correct answer)
Moving CDS rules to a cloud-based server
Upgrading CDS software to a new version
Publishing a CDS rule to production for the first time

Correct answer: Retiring and deactivating a CDS rule that is no longer clinically valid or relevant

Sunsetting refers to the formal retirement of a CDS rule when the underlying evidence changes or the rule is no longer appropriate for the clinical environment.

Question 33: In evidence-based CDS, what is the role of a clinical knowledge management system?

To maintain, version, and govern the rules and evidence that drive CDS recommendations (Correct answer)
To store patient imaging files
To generate patient billing codes
To authenticate users into the EHR

Correct answer: To maintain, version, and govern the rules and evidence that drive CDS recommendations

A clinical knowledge management system centralizes governance of CDS content, tracking versions, evidence sources, and approval workflows.

Question 34: The concept of 'OpenNotes' in health informatics refers to:

An open-source EHR platform developed by the VA
A federal mandate for structured data entry in clinical notes
A movement granting patients access to read their clinicians' visit notes (Correct answer)
An API standard for sharing structured data between EHRs

Correct answer: A movement granting patients access to read their clinicians' visit notes

OpenNotes is a national initiative that advocates for giving patients full access to read their clinicians' visit notes, now required under the 21st Century Cures Act.

Question 35: Which measure evaluates the proportion of actual positive cases correctly identified by a predictive model, also known as the true positive rate?

Precision
Specificity
Sensitivity (Recall) (Correct answer)
Negative predictive value

Correct answer: Sensitivity (Recall)

Sensitivity (recall) = true positives / (true positives + false negatives), measuring how completely a model identifies all actual positive cases.

Question 36: LOINC codes are primarily used to identify which type of clinical data?

Surgical procedures and CPT billing
Diagnoses and problem lists
Medications and drug interactions
Laboratory tests and clinical observations (Correct answer)

Correct answer: Laboratory tests and clinical observations

LOINC (Logical Observation Identifiers Names and Codes) is the standard for identifying laboratory tests, clinical observations, and measurements.

Question 37: Which metric best evaluates whether a CDS alert is being acted upon appropriately?

System uptime percentage
Alert override rate (Correct answer)
Number of alerts configured
Alert firing rate

Correct answer: Alert override rate

The alert override rate reveals how often clinicians bypass alerts; a high rate may indicate alert fatigue or poorly calibrated rules.

Question 38: During a health informatics project, a stakeholder requests a feature outside the approved scope. The BEST initial response is to:

Decline the request without documentation
Implement the feature immediately to satisfy the stakeholder
Log it in the change control system and assess impact (Correct answer)
Defer it to the next project phase automatically

Correct answer: Log it in the change control system and assess impact

All scope change requests must go through the formal change control process to evaluate cost, schedule, and risk impacts before approval.

Question 39: Which change management model is most commonly applied in healthcare IT implementations to address the human side of technology adoption?

ISO 9001 Quality Management
ITIL Service Transition
Kotter's 8-Step Change Model (Correct answer)
Agile Scrum framework

Correct answer: Kotter's 8-Step Change Model

Kotter's 8-Step Change Model, which emphasizes creating urgency, building coalitions, and anchoring change in culture, is widely used in healthcare IT change management.

Question 40: A project manager calculates a Cost Performance Index (CPI) of 0.85 for an EHR go-live project. This means the project is:

On budget
Over budget (Correct answer)
Under budget
Within acceptable variance

Correct answer: Over budget

A CPI below 1.0 indicates the project is spending more than planned for the work completed.

Question 41: A clinical informaticist is asked to evaluate a new AI-based CDS tool for predicting 30-day readmission. Which validation step is MOST critical before clinical deployment?

Prospectively validate the model's performance on the local patient population (Correct answer)
Verify the tool uses the latest EHR version
Confirm the tool has a mobile-friendly interface
Ensure the tool has been used in at least five other hospitals

Correct answer: Prospectively validate the model's performance on the local patient population

Prospective local validation confirms the model's predictive performance holds in the specific patient population and care environment where it will be deployed.

Question 42: De-identification of PHI under HIPAA can be achieved through which two official methods?

Tokenization and pseudonymization
Encryption and data masking
Expert determination and the Safe Harbor method (Correct answer)
Anonymization and redaction

Correct answer: Expert determination and the Safe Harbor method

HIPAA recognizes Expert Determination (statistical certification) and Safe Harbor (removal of 18 specific identifiers) as the two official de-identification methods.

Question 43: A project manager must balance the triple constraint. In a fixed-budget EHR project, if scope increases unexpectedly, the PM should consider adjusting:

Team size only
Vendor contract terms only
Schedule, quality, or both (Correct answer)
Budget only

Correct answer: Schedule, quality, or both

The triple constraint (scope, schedule, cost) means fixing one variable forces trade-offs in the others; increasing scope with fixed cost requires schedule or quality adjustments.

Question 44: Which ETL technique is most efficient when only changed records since the last extraction need to be loaded into a data warehouse?

Full load
Incremental load using change data capture (Correct answer)
Parallel bulk insert
Truncate and reload

Correct answer: Incremental load using change data capture

Change data capture (CDC) identifies and extracts only records modified since the last load, minimizing processing time and system load.

Question 45: Which study approach is most effective for Project Management material?

Passive re-reading of notes
Active recall with practice questions (Correct answer)
Studying for very long sessions without breaks
Highlighting all text

Correct answer: Active recall with practice questions

Active recall through practice questions is the most effective study method, as it strengthens memory retrieval pathways.

Question 46: Which study approach is most effective for Interoperability material?

Studying for very long sessions without breaks
Passive re-reading of notes
Highlighting all text
Active recall with practice questions (Correct answer)

Correct answer: Active recall with practice questions

Active recall through practice questions is the most effective study method, as it strengthens memory retrieval pathways.

Question 47: A health system is evaluating a new EHR. Which factor is MOST critical for long-term information system sustainability?

Vendor market share
Number of color themes in the UI
Scalability and standards compliance (Correct answer)
Proximity of the vendor's headquarters

Correct answer: Scalability and standards compliance

Scalability and adherence to open standards ensure the system can grow with organizational needs and integrate with future technologies.

Question 48: What are standard precautions in healthcare?

Only wearing gloves for known infections
Treating all blood and body fluids as potentially infectious (Correct answer)
Hand washing after patient contact only
Using masks during surgery only

Correct answer: Treating all blood and body fluids as potentially infectious

Standard precautions assume all blood and body fluids are potentially infectious, requiring consistent use of barriers (gloves, gowns, masks) and hand hygiene for all patient interactions.

Question 49: What does the term 'data lineage' refer to in a health data management context?

The ownership hierarchy of a dataset within an organization
The demographic characteristics embedded in a dataset
The version history of database schema changes
The audit trail showing where data originated and how it transformed over time (Correct answer)

Correct answer: The audit trail showing where data originated and how it transformed over time

Data lineage documents the origin, movement, and transformation of data through systems, enabling traceability and root-cause analysis of data quality issues.

Question 50: A covered entity discovers a breach affecting 600 individuals. What is the HIPAA notification deadline to the Secretary of HHS?

60 days after discovery
60 days after the end of the calendar year (Correct answer)
30 days after discovery
Within 30 days of the calendar year end

Correct answer: 60 days after the end of the calendar year

Breaches affecting fewer than 500 individuals must be reported to HHS within 60 days after the end of the calendar year in which the breach was discovered.

Question 51: Which CDS strategy is MOST effective for standardizing care for patients presenting with community-acquired pneumonia?

A real-time alert for each abnormal vital sign
An evidence-based order set triggered by a pneumonia diagnosis (Correct answer)
A post-visit audit report sent monthly to physicians
A patient portal notification about vaccination schedules

Correct answer: An evidence-based order set triggered by a pneumonia diagnosis

A disease-specific order set bundles evidence-based orders (antibiotics, oxygenation targets, blood cultures) and standardizes care at the point of admission.

Question 52: A 'concept orientation' in a clinical terminology means that:

Concepts are organized alphabetically for easy lookup
Codes are grouped by organ system or body location
All synonyms share a single preferred term in every language
Each code maps to exactly one unique clinical meaning with no ambiguity (Correct answer)

Correct answer: Each code maps to exactly one unique clinical meaning with no ambiguity

Concept orientation means each concept in the terminology has a single, unambiguous meaning, distinguishing it from older classification systems that allowed one code to represent multiple meanings.

Question 53: Which of the following is a key benefit of Health Information Exchange (HIE)?

It enables patients to access their own medical records
It improves communication between healthcare providers (Correct answer)
It helps reduce the cost of medical equipment
It automates administrative tasks like billing

Correct answer: It improves communication between healthcare providers

Health Information Exchange (HIE) enables the secure sharing of patient health information among different healthcare providers, such as hospitals, clinics, and laboratories. This interoperability significantly improves communication and coordination of care between providers. By having access to a patient's complete medical history, providers can make more informed decisions, reduce duplicate tests, and enhance patient safety.

Question 54: Which of the following is an example of a physical safeguard under the HIPAA Security Rule?

Badge-controlled access to server rooms (Correct answer)
Automatic logoff after a period of inactivity
Encryption of data stored on a laptop
Audit logs of ePHI access

Correct answer: Badge-controlled access to server rooms

Physical safeguards control physical access to facilities and equipment where ePHI is stored, such as badge-controlled entry to server rooms.

Question 55: When implementing a new health IT system, 'parallel processing' refers to:

Using two separate vendor solutions concurrently for redundancy
Processing multiple patient records in the EHR database at the same time
Training staff in parallel sessions to reduce downtime
Running the old and new systems simultaneously for a defined period to validate accuracy (Correct answer)

Correct answer: Running the old and new systems simultaneously for a defined period to validate accuracy

Parallel processing means operating both the legacy and new systems simultaneously during transition to compare outputs and validate that the new system produces accurate results before full cutover.

Question 56: RxNorm is a clinical drug terminology that provides what key function?

Assigns billing codes for pharmaceutical claims
Encodes drug allergy and adverse event reactions
Provides normalized names and unique identifiers for clinical drugs (Correct answer)
Categorizes drugs by therapeutic class for formulary management

Correct answer: Provides normalized names and unique identifiers for clinical drugs

RxNorm provides normalized names and unique identifiers (RxCUI) for clinical drugs, enabling interoperability across drug information systems.

Question 57: A clinical informaticist notices that a medication order entry system frequently times out during peak hours. What is the FIRST step in troubleshooting this performance issue?

Increase the number of end users
Disable the medication order module
Replace all server hardware immediately
Analyze system logs and monitor resource utilization (Correct answer)

Correct answer: Analyze system logs and monitor resource utilization

Analyzing logs and monitoring CPU, memory, and network utilization provides objective data to identify the root cause before making changes.

Question 58: Which of the following best describes a Business Associate Agreement (BAA) under HIPAA?

A government mandate for EHR interoperability
A contract between two competing health plans
A legal agreement requiring vendors handling PHI to meet HIPAA privacy and security standards (Correct answer)
An internal policy document for workforce training

Correct answer: A legal agreement requiring vendors handling PHI to meet HIPAA privacy and security standards

A BAA is a contract between a covered entity and a business associate that specifies how PHI will be protected in accordance with HIPAA requirements.

Question 59: A CDS rule library uses the FHIR PlanDefinition resource. What does this resource primarily describe?

A patient's problem list
A shareable, computable representation of a clinical protocol or decision support rule (Correct answer)
An insurance pre-authorization workflow
The EHR's database schema

Correct answer: A shareable, computable representation of a clinical protocol or decision support rule

FHIR PlanDefinition encodes shareable clinical knowledge such as protocols, order sets, and CDS rules in a computable format.

Question 60: Which type of system integration connects applications directly to each other without a central broker, creating a complex 'spaghetti' architecture?

Enterprise Service Bus (ESB)
Point-to-point integration (Correct answer)
API gateway integration
Microservices architecture

Correct answer: Point-to-point integration

Point-to-point integration directly links each pair of systems, which becomes difficult to maintain as the number of systems grows.

Question 61: What role does ethics play in Project Management practice?

It only matters for legal compliance
It only applies to managers
Ethics is optional in professional settings
It guides professional conduct and protects stakeholders (Correct answer)

Correct answer: It guides professional conduct and protects stakeholders

Professional ethics provide frameworks for responsible decision-making, ensuring practitioners act in the best interest of those they serve.

Question 62: In health IT project management, 'gold plating' refers to:

Adding unauthorized features beyond approved scope (Correct answer)
Using premium-tier vendors for critical systems
Spending budget reserves on enhancements
Applying extra quality checks to deliverables

Correct answer: Adding unauthorized features beyond approved scope

Gold plating occurs when the team adds features or enhancements not requested by stakeholders, consuming time and resources without approved value.

Question 63: Which NQF concept ensures that a quality measure is worth the cost and burden of measurement by evaluating if the measure addresses an important gap in care?

Usability and use
Scientific acceptability
Importance to measure and report (Correct answer)
Feasibility

Correct answer: Importance to measure and report

The NQF's 'Importance to measure and report' criterion evaluates whether a measure addresses a significant opportunity for improvement and whether the measure would meaningfully affect patient care and outcomes.

Question 64: Which approach to EHR implementation involves replacing the existing system all at once on a specific go-live date?

Parallel running
Big bang implementation (Correct answer)
Pilot testing only
Phased rollout

Correct answer: Big bang implementation

A big bang implementation switches from the old system to the new one simultaneously across all departments on a single go-live date.

Question 65: The Health Insurance Portability and Accountability Act (HIPAA) Security Rule applies specifically to which type of information?

Electronic protected health information (ePHI) (Correct answer)
De-identified patient data sets
Paper-based medical records only
All patient information in any format

Correct answer: Electronic protected health information (ePHI)

The HIPAA Security Rule applies specifically to electronic protected health information (ePHI), requiring administrative, physical, and technical safeguards.

Question 66: Which unintended consequence is most commonly reported after deploying a new CDS alert for venous thromboembolism (VTE) prophylaxis?

Reduction in patient falls
Improved nurse-physician communication
Alert fatigue leading to high override rates without clinical review (Correct answer)
Decreased pharmacy workload

Correct answer: Alert fatigue leading to high override rates without clinical review

Frequent VTE prophylaxis alerts often contribute to alert fatigue, causing clinicians to override them without adequate review, undermining the alert's purpose.

Question 67: Which of the following is a key principle of governance in health IT systems?

Ensuring the security, privacy, and appropriate use of patient data (Correct answer)
Limiting access to patient data to only top healthcare administrators
Reducing the role of technology in healthcare decision-making
Allowing healthcare organizations to use unregulated data sources

Correct answer: Ensuring the security, privacy, and appropriate use of patient data

Governance in health IT systems refers to the framework of policies, procedures, and responsibilities that ensure the effective and ethical management of health information. A key principle is to safeguard patient data by ensuring its security, privacy, and appropriate use. This builds trust, protects patient rights, and complies with regulatory requirements like HIPAA, which are crucial for the integrity of healthcare delivery.

Question 68: In a Hadoop ecosystem, which component is responsible for distributed storage of large health datasets across commodity hardware nodes?

Apache Kafka
HDFS (Hadoop Distributed File System) (Correct answer)
Apache Hive
Apache Spark

Correct answer: HDFS (Hadoop Distributed File System)

HDFS splits large files into blocks and replicates them across multiple nodes, providing fault-tolerant distributed storage for big data workloads.

Question 69: What is phishing?

A backup system
A network scanning tool
A social engineering attack using fraudulent communications to steal sensitive data (Correct answer)
A type of firewall

Correct answer: A social engineering attack using fraudulent communications to steal sensitive data

Phishing uses deceptive emails, websites, or messages that appear legitimate to trick victims into revealing passwords, credit cards, or personal information.

Question 70: A quality improvement team wants to identify all patients with poorly controlled Type 2 diabetes in a clinic population. Which informatics tool is BEST suited?

Patient satisfaction survey
Population health management registry with HbA1c filtering (Correct answer)
Lab interface engine reconfiguration
Individual chart audit

Correct answer: Population health management registry with HbA1c filtering

A population health registry allows systematic identification and tracking of patients meeting specific clinical criteria, such as elevated HbA1c, across an entire panel.

Question 71: In the context of HL7 CDA and FHIR, 'value set binding' means:

Hardcoding a single code into a document template
Encrypting coded data to protect PHI during transmission
Specifying which set of codes from a terminology is valid for a given data element (Correct answer)
Translating codes from one terminology to another at runtime

Correct answer: Specifying which set of codes from a terminology is valid for a given data element

Value set binding in HL7 standards specifies the allowed coded values (from one or more terminologies) for a particular data element, ensuring semantic interoperability.

Question 72: Which encryption standard is commonly recommended for protecting ePHI in transit in U.S. healthcare?

TLS (Transport Layer Security) (Correct answer)
DES (Data Encryption Standard)
MD5 hashing
Base64 encoding

Correct answer: TLS (Transport Layer Security)

TLS is the standard protocol for encrypting data in transit, protecting ePHI from interception during transmission.

Question 73: Under HIPAA, which of the following is considered a 'business associate' requiring a formal agreement?

A hospital employee who accesses EHR for treatment purposes
A state health department receiving data for public health reporting
A billing company that processes PHI on behalf of a covered entity (Correct answer)
A patient's family member who helps manage medical records

Correct answer: A billing company that processes PHI on behalf of a covered entity

A business associate is any entity that creates, receives, maintains, or transmits PHI on behalf of a covered entity, such as a billing company.

Question 74: Under the HIPAA Security Rule, which safeguard category requires covered entities to implement workforce training and access management procedures?

Technical safeguards
Organizational safeguards
Administrative safeguards (Correct answer)
Physical safeguards

Correct answer: Administrative safeguards

Administrative safeguards encompass policies and procedures for workforce conduct, training, access authorization, and incident response under the HIPAA Security Rule.

Question 75: What is the most effective way to prevent healthcare-associated infections?

Wearing gloves at all times
Taking antibiotics
Proper hand hygiene (Correct answer)
Cleaning the floor

Correct answer: Proper hand hygiene

Hand hygiene (washing with soap and water or using alcohol-based hand rub) is the single most effective measure for preventing the spread of infections in healthcare settings.

Question 76: The Value Set Authority Center (VSAC) is the authoritative repository for value sets used in which US health IT program?

FDA adverse event reporting system (FAERS)
HIPAA transaction code sets
CMS Merit-based Incentive Payment System (MIPS)
ONC Certified EHR Technology (CEHRT) quality measures (Correct answer)

Correct answer: ONC Certified EHR Technology (CEHRT) quality measures

VSAC, maintained by NLM, is the authoritative source for value sets referenced in ONC-certified EHR quality measures and clinical quality measures (CQMs).

Question 77: In SNOMED CT, a 'poly-hierarchical' structure means that:

Child concepts cannot inherit attributes from parent concepts
A concept can have multiple parents within the hierarchy (Correct answer)
Concepts are organized in a flat non-hierarchical list
Each concept belongs to exactly two parent categories

Correct answer: A concept can have multiple parents within the hierarchy

SNOMED CT is poly-hierarchical, meaning a single concept can have multiple parents (e.g., 'pneumococcal pneumonia' is a child of both 'pneumonia' and 'pneumococcal infection').

Question 78: A radiology department uses a system to store and retrieve medical images. What is this system called?

PACS (Picture Archiving and Communication System) (Correct answer)
EHR
LIS (Laboratory Information System)
ADT (Admission, Discharge, Transfer) system

Correct answer: PACS (Picture Archiving and Communication System)

PACS stores, retrieves, manages, and transmits digital medical images such as X-rays, CT scans, and MRIs.

Question 79: A health informatics project manager is preparing a project status report. Which metric BEST indicates whether the project will finish on time?

Return on Investment (ROI)
Net Present Value (NPV)
Cost Performance Index (CPI)
Schedule Performance Index (SPI) (Correct answer)

Correct answer: Schedule Performance Index (SPI)

The SPI (EV/PV) measures schedule efficiency; an SPI below 1.0 indicates the project is behind its planned schedule.

Question 80: Which workflow change most effectively reduces wrong-patient medication errors in a hospital EHR?

Restricting medication orders to pharmacists
Mandatory paper cosign for all orders
Positive patient identification before order entry (Correct answer)
Removing patient photos from EHR to reduce bias

Correct answer: Positive patient identification before order entry

Positive patient identification (e.g., scanning wristband barcode) before order entry is the leading informatics intervention to prevent wrong-patient errors.

Question 81: What does informed consent require?

Verbal agreement only
Family approval only
Explaining the procedure, risks, benefits, and alternatives to the patient (Correct answer)
Getting any signature on a form

Correct answer: Explaining the procedure, risks, benefits, and alternatives to the patient

Informed consent requires that patients understand the proposed procedure, its risks and benefits, alternatives, and have the opportunity to ask questions before agreeing.

Question 82: What is the primary purpose of a health IT governance charter?

To serve as the official EHR user manual
To document all software bugs in a system
To define the authority, scope, and responsibilities of the IT governance body (Correct answer)
To satisfy Joint Commission accreditation requirements

Correct answer: To define the authority, scope, and responsibilities of the IT governance body

A governance charter formally establishes the mandate, structure, roles, and decision-making authority of a governance committee or board.

Question 83: Which standard is primarily used to encode clinical diagnoses in US ambulatory care settings for billing and reporting purposes?

ICD-10-CM (Correct answer)
SNOMED CT
RxNorm
LOINC

Correct answer: ICD-10-CM

ICD-10-CM (International Classification of Diseases, 10th Revision, Clinical Modification) is the US standard for diagnosis coding in clinical and billing documentation.

Question 84: A patient portal feature that allows patients to schedule appointments, request refills, and message providers primarily supports which informatics goal?

Revenue cycle optimization
Population health surveillance
Clinical decision support
Patient engagement and self-management (Correct answer)

Correct answer: Patient engagement and self-management

Patient portals with transactional features are designed to increase patient engagement and support active participation in self-management of health.

Question 85: Which of the following is a key goal of data analytics in healthcare?

To improve patient outcomes through data-driven decisions (Correct answer)
To store patient data in physical records
To reduce the number of healthcare workers
To replace doctors with artificial intelligence

Correct answer: To improve patient outcomes through data-driven decisions

A key goal of data analytics in healthcare is to leverage insights derived from vast amounts of health data to improve patient outcomes. By analyzing trends, identifying risk factors, and evaluating treatment effectiveness, healthcare organizations can make data-driven decisions to optimize care delivery, enhance preventive measures, and personalize treatments. This ultimately leads to better health for patients and more efficient healthcare systems.

Question 86: Which clinical vocabulary standard uses a description logic–based formalism and is considered the most semantically rich for representing clinical concepts?

CPT-4
ICD-10-CM
LOINC
SNOMED CT (Correct answer)

Correct answer: SNOMED CT

SNOMED CT uses description logic (EL++) to define concepts and their relationships, giving it the richest semantic expressivity among standard clinical terminologies.

Question 87: What does 'alert fatigue' primarily lead to in clinical settings?

Slower EHR login times
Clinicians ignoring or overriding alerts indiscriminately, including important ones (Correct answer)
Increased documentation burden
Reduced system interoperability

Correct answer: Clinicians ignoring or overriding alerts indiscriminately, including important ones

Alert fatigue causes clinicians to bypass warnings automatically, increasing the risk that a clinically significant alert will be dismissed without review.

Question 88: Under federal anti-kickback statutes, EHR donation arrangements between hospitals and physicians are permitted under a specific safe harbor. What key condition must be met?

Donations are only permitted for rural physicians
The EHR must be certified by a state health department
The physician recipient must not be in a position to make referrals to the donating entity (Correct answer)
The physician must pay full market value for the EHR

Correct answer: The physician recipient must not be in a position to make referrals to the donating entity

The EHR donation safe harbor requires that the physician recipient not be in a position to make or influence referrals to the donor entity, among other conditions.

Question 89: A health informatics project manager notices scope creep occurring mid-project. Which document should be updated first to formally control the change?

Risk register
Communications plan
Change control log (Correct answer)
Stakeholder register

Correct answer: Change control log

The change control log formally documents and tracks all scope changes through the integrated change control process.

Question 90: What does SNOMED CT stand for?

Standard Nomenclature of Medical — Clinical Terminology
Systematized Network of Medical — Clinical Taxonomy
Systematized Nomenclature of Medicine — Clinical Terms (Correct answer)
Standard Nomenclature of Medicine — Clinical Terms

Correct answer: Systematized Nomenclature of Medicine — Clinical Terms

SNOMED CT stands for Systematized Nomenclature of Medicine — Clinical Terms, the most comprehensive multilingual clinical healthcare terminology in the world.

Question 91: What is the relationship between theory and practice in Decision Support?

Theory provides the foundation; practice applies it to real situations (Correct answer)
Practice is unnecessary if you know theory
Theory is unnecessary
They are completely separate

Correct answer: Theory provides the foundation; practice applies it to real situations

Theory provides the conceptual foundation and principles, while practice involves applying those concepts to real-world situations. Both are essential for competence.

Question 92: A clinical informatics team is evaluating the effectiveness of a new EHR-based medication reconciliation alert. Which metric would BEST measure the alert's clinical impact?

Number of alert suppression requests submitted by clinicians
Percentage of alerts acknowledged within 60 seconds
Rate of medication discrepancy resolution following alert (Correct answer)
Alert firing rate per 1,000 orders

Correct answer: Rate of medication discrepancy resolution following alert

Measuring the rate of medication discrepancy resolution directly assesses whether the alert is achieving its intended clinical outcome of improving medication safety.

Question 93: Why is continuing education important in Project Management?

Only for re-certification requirements
To stay current with evolving standards and practices (Correct answer)
It is not important after certification
To network only

Correct answer: To stay current with evolving standards and practices

Continuing education keeps professionals updated with the latest developments, standards, and best practices in their field.

Question 94: Which study approach is most effective for Interoperability material?

Highlighting all text
Passive re-reading of notes
Studying for very long sessions without breaks
Active recall with practice questions (Correct answer)

Correct answer: Active recall with practice questions

Active recall through practice questions is the most effective study method, as it strengthens memory retrieval pathways.

Question 95: The role of a Chief Privacy Officer (CPO) in a healthcare organization primarily involves which responsibility?

Approving all IT system purchases
Managing the hospital's marketing campaigns
Overseeing compliance with privacy laws and policies protecting patient information (Correct answer)
Conducting clinical quality improvement reviews

Correct answer: Overseeing compliance with privacy laws and policies protecting patient information

The CPO is responsible for developing and enforcing organizational privacy policies, ensuring compliance with HIPAA and other privacy laws, and managing privacy risk.

Question 96: Post-coordination in SNOMED CT refers to the ability to:

Update and retire outdated concept codes in the terminology
Combine multiple codes at the point of use to express complex clinical meanings (Correct answer)
Map SNOMED CT concepts to equivalent ICD-10 codes
Assign preferred terms after clinical documentation is complete

Correct answer: Combine multiple codes at the point of use to express complex clinical meanings

Post-coordination allows clinicians to combine pre-existing SNOMED CT concepts (e.g., body site + finding + laterality) to represent complex clinical situations not captured by a single code.

Question 97: What is the primary risk associated with using unsecured personal mobile devices to access ePHI (BYOD)?

Increased risk of data breach through lost, stolen, or compromised personal devices (Correct answer)
Non-compliance with Joint Commission accreditation standards
Slower network performance on the hospital Wi-Fi
Reduced battery life on clinical devices

Correct answer: Increased risk of data breach through lost, stolen, or compromised personal devices

BYOD introduces significant breach risk because personal devices may lack organizational security controls and can be lost or stolen.

Question 98: Which property of a well-designed clinical terminology ensures that concepts maintain consistent meaning over time, even as new versions are released?

Poly-hierarchy
Concept permanence (Correct answer)
Hierarchical structure
Non-redundancy

Correct answer: Concept permanence

Concept permanence (from Cimino's desiderata) means that once a concept is assigned a code, that code retains its meaning permanently and is never reused for a different concept.

Question 99: A General Equivalence Mapping (GEM) crosswalk between ICD-9-CM and ICD-10-CM is used to:

Guarantee one-to-one clinical equivalence between old and new codes
Facilitate translation of codes to support data analytics, reporting, and system migration (Correct answer)
Replace manual coding by automating code assignment from clinical notes
Automatically upgrade all historical claims data to ICD-10 for reimbursement

Correct answer: Facilitate translation of codes to support data analytics, reporting, and system migration

GEM crosswalks provide approximate mappings to support analytics, quality reporting, and system transitions, but do not guarantee clinical equivalence due to structural differences between the two systems.

Question 100: Which principle of user-centered design is MOST important when configuring an EHR order entry interface for emergency department physicians?

Maximizing the number of fields per screen
Using identical workflows for all clinical specialties
Prioritizing administrative data entry over clinical data
Minimizing cognitive load through streamlined, context-aware design (Correct answer)

Correct answer: Minimizing cognitive load through streamlined, context-aware design

Emergency physicians work under time pressure, so EHR interfaces must minimize cognitive load with streamlined, context-sensitive workflows tailored to acute care.

Question 101: A provider copies and pastes a prior visit note into today's encounter without updating clinical findings. This practice is known as:

Template-based documentation
Note bloat or cloning (Correct answer)
Structured data entry
Forward documentation

Correct answer: Note bloat or cloning

Cloning or copy-forward documentation creates 'note bloat,' introduces inaccurate or outdated information, and poses patient safety and legal risks.

Question 102: The Unified Medical Language System (UMLS) serves what primary purpose in health informatics?

Replacing legacy terminology systems with a unified standard
Providing a single standardized coding system for all clinical data
Governing the use of clinical terminologies in EHR certification
Linking multiple biomedical vocabularies and standards to enable interoperability (Correct answer)

Correct answer: Linking multiple biomedical vocabularies and standards to enable interoperability

The UMLS, maintained by NLM, integrates and distributes key biomedical vocabularies, enabling software to map across different terminology systems.

Question 103: A healthcare organization wants to share patient data with a research institution. Under HIPAA, which mechanism allows this without individual patient authorization?

Verbal consent from the department chair
Routine business associate agreement
A Data Use Agreement (DUA) for a limited data set (Correct answer)
A standard vendor contract

Correct answer: A Data Use Agreement (DUA) for a limited data set

A Data Use Agreement allows covered entities to share a limited data set (which excludes most direct identifiers) with researchers without individual patient authorization.

Question 104: Which SQL window function calculates a running total without collapsing rows into a single aggregate result?

HAVING SUM(...)
DISTINCT COUNT
SUM() OVER (ORDER BY ...) (Correct answer)
GROUP BY with SUM

Correct answer: SUM() OVER (ORDER BY ...)

SUM() OVER (ORDER BY ...) is a window function that computes a cumulative sum while retaining each individual row in the result set.

Question 105: In health IT governance, a Steering Committee is primarily responsible for which function?

Prioritizing and approving IT investments aligned with organizational strategy (Correct answer)
Managing the help desk ticket queue
Conducting HIPAA audits
Writing code for clinical systems

Correct answer: Prioritizing and approving IT investments aligned with organizational strategy

An IT Steering Committee provides governance by prioritizing IT investments, approving projects, and ensuring alignment with organizational strategic goals.

Question 106: Which concept describes the phenomenon where a predictive model performs well on training data but poorly on new, unseen patient data due to learning noise rather than true patterns?

Multicollinearity
Regularization
Overfitting (Correct answer)
Underfitting

Correct answer: Overfitting

Overfitting occurs when a model memorizes training data noise, resulting in high training accuracy but poor generalization to new data.

Question 107: A health system wants to share de-identified data for research under the HIPAA Safe Harbor method. Which of the following must be removed?

ICD-10 diagnosis codes
Geographic data at the state level
Aggregate cost data by DRG
All 18 specified PHI identifiers including ZIP codes and dates (Correct answer)

Correct answer: All 18 specified PHI identifiers including ZIP codes and dates

HIPAA Safe Harbor requires removal of all 18 specific identifiers, including geographic subdivisions smaller than a state, dates other than year, and contact information.

Question 108: How can clinical informatics contribute to improving the patient experience in a hospital setting?

By ensuring all treatments are standardized for every patient
By reducing the involvement of healthcare professionals in patient care
By automating administrative tasks and reducing wait times (Correct answer)
By eliminating the need for physical records

Correct answer: By automating administrative tasks and reducing wait times

Clinical informatics can significantly improve the patient experience by optimizing operational efficiency within a hospital. Automating administrative tasks, such as registration, scheduling, and record-keeping, reduces manual effort and errors, which in turn helps to decrease patient wait times and streamline their journey through the healthcare system. This leads to a more positive and less frustrating experience for patients.

Question 109: What is the correct order for donning PPE?

Any order is acceptable
Gloves, gown, mask, eye protection
Mask, gloves, gown, eye protection
Gown, mask, eye protection, gloves (Correct answer)

Correct answer: Gown, mask, eye protection, gloves

The correct donning sequence is gown first, then mask/respirator, eye protection/face shield, and gloves last. This prevents contamination during application.

Question 110: In health information systems, what does the term 'interoperability' primarily refer to?

Encrypting patient data at rest
The ability of different systems to exchange and use information (Correct answer)
Storing data in a single centralized repository
Restricting access to authorized personnel only

Correct answer: The ability of different systems to exchange and use information

Interoperability refers to the ability of different health IT systems to exchange, interpret, and use shared data effectively.

Question 111: Which database model is most commonly used in modern EHR systems for storing structured clinical data?

Object-oriented model
Network model
Hierarchical model
Relational model (Correct answer)

Correct answer: Relational model

Relational databases using SQL are the dominant model in EHR systems due to their support for structured queries and ACID compliance.

Question 112: Which of the following best describes the purpose of the Common Rule (45 CFR Part 46) in health informatics research?

It sets minimum cybersecurity standards for academic medical centers
It governs reimbursement for clinical informatics consultants
It standardizes EHR data exchange formats for research institutions
It protects human research subjects by establishing requirements for informed consent and IRB review (Correct answer)

Correct answer: It protects human research subjects by establishing requirements for informed consent and IRB review

The Common Rule is the federal policy for the protection of human research subjects, requiring IRB oversight and informed consent for most federally funded research involving human participants.

Question 113: What is the correct order for donning PPE?

Gown, mask, eye protection, gloves (Correct answer)
Any order is acceptable
Mask, gloves, gown, eye protection
Gloves, gown, mask, eye protection

Correct answer: Gown, mask, eye protection, gloves

The correct donning sequence is gown first, then mask/respirator, eye protection/face shield, and gloves last. This prevents contamination during application.

Question 114: What does informed consent require?

Getting any signature on a form
Family approval only
Verbal agreement only
Explaining the procedure, risks, benefits, and alternatives to the patient (Correct answer)

Correct answer: Explaining the procedure, risks, benefits, and alternatives to the patient

Informed consent requires that patients understand the proposed procedure, its risks and benefits, alternatives, and have the opportunity to ask questions before agreeing.

Question 115: A health informatics team implements a data lake to store raw clinical, claims, and genomic data. What distinguishes a data lake from a traditional data warehouse?

Data lakes enforce schema-on-write; warehouses use schema-on-read
Data lakes store only structured data; warehouses store unstructured data
Data lakes require relational tables; warehouses support flat files
Data lakes use schema-on-read and store data in its raw native format (Correct answer)

Correct answer: Data lakes use schema-on-read and store data in its raw native format

Data lakes store raw data in any format (structured, semi-structured, unstructured) and apply schema at query time (schema-on-read), unlike warehouses that enforce schema-on-write.

Question 116: Which US law gives patients the right to request amendments to their health records and receive an accounting of disclosures?

The Americans with Disabilities Act (ADA)
The Affordable Care Act Section 1557
HIPAA Privacy Rule (Correct answer)
The Information Blocking Rule

Correct answer: HIPAA Privacy Rule

The HIPAA Privacy Rule grants patients the right to inspect, copy, amend, and receive an accounting of disclosures of their protected health information.

Question 117: What is the correct order for donning PPE?

Gown, mask, eye protection, gloves (Correct answer)
Mask, gloves, gown, eye protection
Gloves, gown, mask, eye protection
Any order is acceptable

Correct answer: Gown, mask, eye protection, gloves

The correct donning sequence is gown first, then mask/respirator, eye protection/face shield, and gloves last. This prevents contamination during application.

Question 118: What is a key feature of a Clinical Decision Support System (CDSS)?

It generates appointment reminders for patients
It assists healthcare providers in making evidence-based clinical decisions (Correct answer)
It stores patient medical records securely
It helps healthcare providers select the best insurance plans for patients

Correct answer: It assists healthcare providers in making evidence-based clinical decisions

A Clinical Decision Support System (CDSS) is designed to assist healthcare providers in making informed, evidence-based clinical decisions at the point of care. It integrates medical knowledge with patient-specific data to provide alerts, reminders, and recommendations regarding diagnoses, treatments, and preventive care. This support helps improve the quality and safety of patient care by guiding providers toward best practices.

Question 119: What is the primary purpose of a Master Patient Index (MPI) in a healthcare information system?

To store medication formulary data
To manage billing and claims submission
To uniquely identify and link patient records across systems (Correct answer)
To schedule physician appointments

Correct answer: To uniquely identify and link patient records across systems

An MPI maintains a unique identifier for each patient to prevent duplicate records and link data across disparate systems.

Question 120: A clinical data warehouse team wants to track slowly changing attributes such as a patient's insurance plan over time without losing historical values. Which SCD type should they use?

SCD Type 0 (retain original)
SCD Type 1 (overwrite)
SCD Type 2 (add new row) (Correct answer)
SCD Type 3 (add new column)

Correct answer: SCD Type 2 (add new row)

SCD Type 2 inserts a new row with effective and expiration dates each time an attribute changes, preserving full history of all prior values.

Question 121: Which data visualization type is most appropriate for displaying the distribution of length-of-stay values across a patient population?

Histogram (Correct answer)
Line graph
Pie chart
Scatter plot

Correct answer: Histogram

A histogram groups continuous values into bins and displays frequency, making it ideal for visualizing the distribution shape of a metric like length of stay.

Question 122: A hospital's QI dashboard shows sepsis bundle compliance has been consistently above 95% for six months. The QI team should NEXT:

Increase the compliance target to 99%
Investigate why 5% remain non-compliant using FMEA
Shift focus to sustaining performance and monitoring for decline (Correct answer)
Discontinue measurement since the goal is achieved

Correct answer: Shift focus to sustaining performance and monitoring for decline

Once a QI goal is achieved and sustained, the team should transition to monitoring and maintaining performance gains while potentially spreading the intervention elsewhere.

Question 123: A health system wants to predict patient readmission risk. Which machine learning approach is most appropriate when labeled outcome data is available?

Unsupervised clustering
Association rule mining
Reinforcement learning
Supervised classification (Correct answer)

Correct answer: Supervised classification

Supervised classification uses labeled historical data (readmitted vs. not) to train a model that predicts outcomes for new patients.

Question 124: In an Agile health IT project, the Product Owner is responsible for:

Facilitating sprint ceremonies
Reporting project status to executives
Managing the development team's daily work
Prioritizing the product backlog to maximize value (Correct answer)

Correct answer: Prioritizing the product backlog to maximize value

The Product Owner owns and prioritizes the backlog, ensuring the team works on the highest-value features aligned with clinical and business needs.

Question 125: What is a nosocomial infection?

A genetic condition
A respiratory infection
An infection acquired in a healthcare facility (Correct answer)
A childhood disease

Correct answer: An infection acquired in a healthcare facility

Nosocomial (healthcare-associated) infections are acquired during the course of receiving medical treatment in a healthcare facility, not present at admission.

Question 126: What is the primary purpose of professional certification in Decision Support?

To meet legal requirements only
To replace practical experience
To increase salary automatically
To validate competency and knowledge in the field (Correct answer)

Correct answer: To validate competency and knowledge in the field

Certification validates that a professional has met established standards of knowledge and competency in Decision Support.

Question 127: Which standard governs the messaging format for exchanging clinical documents between health information systems in the US?

SNOMED CT
HL7 v2/v3 and FHIR (Correct answer)
DICOM
IEEE 802.11

Correct answer: HL7 v2/v3 and FHIR

HL7 (Health Level Seven) standards including v2, v3, and FHIR define messaging formats for clinical data exchange.

Question 128: What is the primary function of a Health Information Management (HIM) system?

To ensure the healthcare organization's physical security
To track employee performance in healthcare facilities
To handle the storage, retrieval, and sharing of patient data (Correct answer)
To manage patient appointments and billing records

Correct answer: To handle the storage, retrieval, and sharing of patient data

The primary function of a Health Information Management (HIM) system is to oversee the entire lifecycle of patient health information, from creation and storage to retrieval and secure sharing. HIM professionals ensure the accuracy, completeness, confidentiality, and accessibility of patient data, which is crucial for quality patient care, legal compliance, and operational efficiency. While HIM may interact with billing and appointments, its core focus is on the integrity and management of health records.

Question 129: In healthcare IT governance, what is the primary role of a steering committee for an information system project?

Training end users on system features
Providing strategic oversight and prioritizing resources across projects (Correct answer)
Writing application code
Maintaining server hardware

Correct answer: Providing strategic oversight and prioritizing resources across projects

A steering committee provides executive-level governance, aligning IT projects with organizational strategy and allocating resources.

Question 130: A hospital's legacy system uses a proprietary data format. To integrate it with a new EHR, a middleware component is used to translate data formats. What is this component called?

Interface engine (Correct answer)
Load balancer
Firewall
Content delivery network

Correct answer: Interface engine

An interface engine (or integration engine) translates and routes messages between systems using different formats and protocols.

Question 131: What are standard precautions in healthcare?

Using masks during surgery only
Only wearing gloves for known infections
Treating all blood and body fluids as potentially infectious (Correct answer)
Hand washing after patient contact only

Correct answer: Treating all blood and body fluids as potentially infectious

Standard precautions assume all blood and body fluids are potentially infectious, requiring consistent use of barriers (gloves, gowns, masks) and hand hygiene for all patient interactions.

Question 132: In the context of EHR data architecture, what is 'data normalization' designed to minimize?

System downtime
Data redundancy and update anomalies (Correct answer)
User authentication errors
Network latency

Correct answer: Data redundancy and update anomalies

Normalization organizes relational database tables to reduce redundancy and dependency, preventing inconsistencies during updates.

Question 133: Which of the following is an example of a health IT policy designed to improve interoperability?

Promoting the use of standardized coding systems like ICD-10 for diagnoses (Correct answer)
Limiting the sharing of health information to within a single healthcare facility
Reducing the adoption of electronic health records
Requiring all healthcare providers to use paper-based records

Correct answer: Promoting the use of standardized coding systems like ICD-10 for diagnoses

Interoperability in health IT refers to the ability of different information systems, devices, and applications to access, exchange, integrate, and cooperatively use data in a coordinated manner. Promoting the use of standardized coding systems like ICD-10 for diagnoses is a direct example of a policy designed to improve interoperability. These standards ensure that health information is uniformly classified and understood across various systems, facilitating seamless data exchange and communication among healthcare providers.

Question 134: Which federal initiative established the foundation for patient access to their own electronic health data in the US?

MACRA Final Rule
HITECH Meaningful Use Stage 3
The Blue Button Initiative (Correct answer)
The Stark Law Amendment

Correct answer: The Blue Button Initiative

The Blue Button Initiative, launched by the VA and adopted broadly, enables patients to download and share their own health records electronically.

Question 135: Which approach is MOST aligned with 'closing the loop' in CDS effectiveness monitoring?

Sending alert emails to IT when the system goes down
Tracking whether recommended actions (e.g., VTE prophylaxis ordered) were completed after an alert fired (Correct answer)
Counting total alert volumes weekly
Archiving all overridden alerts in a separate database

Correct answer: Tracking whether recommended actions (e.g., VTE prophylaxis ordered) were completed after an alert fired

Closing the loop means verifying that the clinically recommended action was actually taken after the CDS alert fired, measuring true behavioral impact.

Question 136: What is the primary purpose of an Electronic Health Record (EHR) system in healthcare?

To schedule patient appointments
To store and manage patient health information digitally (Correct answer)
To automate billing processes
To manage healthcare staff schedules

Correct answer: To store and manage patient health information digitally

The primary purpose of an Electronic Health Record (EHR) system is to create a comprehensive, digital version of a patient's paper chart. This system allows for the secure storage, management, and sharing of all patient health information, including medical history, diagnoses, medications, and test results. While EHRs can integrate with billing and scheduling, their core function is centered on patient data.

Question 137: What is the primary purpose of professional certification in Interoperability?

To validate competency and knowledge in the field (Correct answer)
To increase salary automatically
To replace practical experience
To meet legal requirements only

Correct answer: To validate competency and knowledge in the field

Certification validates that a professional has met established standards of knowledge and competency in Interoperability.

Question 138: An informatics team implements a clinical decision support rule to reduce inappropriate opioid prescribing. Six months later, providers report alert fatigue. Which strategy BEST addresses this while maintaining safety?

Increase alert specificity by refining triggers to reduce non-actionable alerts (Correct answer)
Add mandatory override comments to all opioid alerts
Remove all CDS alerts related to opioids to eliminate fatigue
Convert alerts from interruptive to passive display only

Correct answer: Increase alert specificity by refining triggers to reduce non-actionable alerts

Increasing alert specificity—ensuring alerts fire only when clinically meaningful—reduces alert fatigue while preserving the safety benefit of CDS by eliminating low-value interruptions.

Question 139: Which of the following is a key difference between a tethered PHR and an untethered PHR?

Tethered PHRs require insurance authorization; untethered PHRs do not
Tethered PHRs use FHIR; untethered PHRs use HL7 v2
Tethered PHRs are controlled by patients; untethered PHRs are controlled by providers
Tethered PHRs are connected to a specific provider's EHR; untethered PHRs are independent platforms (Correct answer)

Correct answer: Tethered PHRs are connected to a specific provider's EHR; untethered PHRs are independent platforms

A tethered PHR is linked to and populated by a specific provider's EHR system (e.g., a patient portal), while an untethered PHR is an independent platform patients manage independently.

Question 140: Which study approach is most effective for Decision Support material?

Passive re-reading of notes
Active recall with practice questions (Correct answer)
Studying for very long sessions without breaks
Highlighting all text

Correct answer: Active recall with practice questions

Active recall through practice questions is the most effective study method, as it strengthens memory retrieval pathways.

Question 141: Social determinants of health (SDOH) screening tools integrated into patient portals primarily help organizations accomplish which goal?

Automating insurance eligibility verification
Identifying unmet social needs to close care gaps and improve population health (Correct answer)
Reducing imaging utilization
Generating quality measure documentation for HEDIS

Correct answer: Identifying unmet social needs to close care gaps and improve population health

SDOH screening integrated into portals enables identification of food insecurity, housing instability, and other social needs to connect patients with community resources.

Question 142: Which federal agency maintains the NCI Thesaurus, a reference vocabulary for cancer-related clinical and research data?

Agency for Healthcare Research and Quality (AHRQ)
National Library of Medicine (NLM)
Centers for Disease Control and Prevention (CDC)
National Cancer Institute (NCI) (Correct answer)

Correct answer: National Cancer Institute (NCI)

The National Cancer Institute (NCI) maintains the NCI Thesaurus, which provides standard terminology for cancer research, clinical trials, and cancer care.

Question 143: When an organization maps its local coding system to a standard terminology like SNOMED CT, this process is called:

Concept harmonization
Vocabulary normalization audit
Local-to-standard mapping (interface terminology mapping) (Correct answer)
Terminology binding

Correct answer: Local-to-standard mapping (interface terminology mapping)

Interface terminology mapping translates locally used terms or codes to standardized concepts, enabling data exchange and aggregation across different systems using standard terminologies.

Question 144: Which layer of the OSI model handles end-to-end communication and reliability, commonly associated with TCP in healthcare networks?

Network layer
Data Link layer
Session layer
Transport layer (Correct answer)

Correct answer: Transport layer

The Transport layer (Layer 4) manages end-to-end data delivery and reliability, with TCP providing connection-oriented communication.

Question 145: CPT (Current Procedural Terminology) codes are maintained by which organization?

Centers for Medicare & Medicaid Services (CMS)
American Medical Association (AMA) (Correct answer)
Centers for Disease Control and Prevention (CDC)
American Health Information Management Association (AHIMA)

Correct answer: American Medical Association (AMA)

CPT codes are owned and maintained by the American Medical Association (AMA) and are used primarily for outpatient procedure billing.

Question 146: Which framework is commonly used to evaluate health information technology usability from the patient perspective?

HIMSS EMRAM
Nielsen's 10 Usability Heuristics adapted for patient-facing tools (Correct answer)
IHE Connectathon testing
CMS Star Rating methodology

Correct answer: Nielsen's 10 Usability Heuristics adapted for patient-facing tools

Nielsen's 10 Usability Heuristics are widely adapted to evaluate the usability of patient-facing health IT applications and portals.

Question 147: When evaluating the total cost of ownership (TCO) for a health information system, which cost is often underestimated?

Initial software licensing fees
Vendor contract negotiation fees
Ongoing maintenance, training, and support costs over the system lifecycle (Correct answer)
Hardware procurement costs

Correct answer: Ongoing maintenance, training, and support costs over the system lifecycle

Ongoing costs including maintenance, upgrades, training, and support frequently exceed initial licensing costs over a system's lifetime.

Question 148: Which data type would LOINC codes MOST commonly be used to represent in a clinical system?

Medication drug names
Laboratory test names and results (Correct answer)
Procedure billing codes
Diagnoses and problems

Correct answer: Laboratory test names and results

LOINC (Logical Observation Identifiers Names and Codes) is the standard terminology for laboratory tests, clinical observations, and measurements.

Question 149: Which governance body is typically responsible for reviewing and approving new CDS rules before deployment in a health system?

A clinical informatics or pharmacy-and-therapeutics committee (Correct answer)
The billing department
The IT help desk
The state department of health

Correct answer: A clinical informatics or pharmacy-and-therapeutics committee

Clinical informatics or P&T committees provide multidisciplinary oversight to evaluate the clinical validity, safety, and workflow impact of CDS rules before go-live.

Question 150: Which federal law establishes patients' rights to access, inspect, and obtain copies of their protected health information?

HIPAA Privacy Rule (45 CFR § 164.524) (Correct answer)
The Affordable Care Act
The Electronic Signatures in Global and National Commerce Act
The Americans with Disabilities Act

Correct answer: HIPAA Privacy Rule (45 CFR § 164.524)

The HIPAA Privacy Rule at 45 CFR § 164.524 grants patients the right to access and obtain copies of their own PHI held by covered entities.

Question 151: The primary purpose of a training needs assessment (TNA) before a health IT go-live is to:

Estimate software licensing costs
Negotiate vendor service level agreements
Determine network infrastructure requirements
Identify knowledge and skill gaps to design role-specific training programs (Correct answer)

Correct answer: Identify knowledge and skill gaps to design role-specific training programs

A TNA identifies what staff already know versus what they need to know, enabling targeted, role-specific training rather than one-size-fits-all instruction.

Question 152: National Drug Codes (NDC) are used primarily for which purpose in healthcare information systems?

Billing Medicare Part B for outpatient drug administration
Identifying specific packaged drug products for dispensing and inventory (Correct answer)
Encoding drug allergy alerts in clinical decision support
Classifying drugs by pharmacological category in formularies

Correct answer: Identifying specific packaged drug products for dispensing and inventory

NDC codes identify specific drug products by labeler, product, and package size, making them essential for pharmacy dispensing systems and inventory management.

AMIA Health Informatics Certification (AHIC)

The AHIC is a professional certification from AMIA that validates competency across health informatics domains including clinical systems, data governance, and health decision-making. It is designed for health IT professionals who apply informatics principles in healthcare settings.

150

Questions

240 min

Time Limit

75%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds