AMIA Health Informatics Certification (AHIC) — Questions and Answers

Question 1: What is a nosocomial infection?

A childhood disease
An infection acquired in a healthcare facility (Correct answer)
A genetic condition
A respiratory infection

Correct answer: An infection acquired in a healthcare facility

Nosocomial (healthcare-associated) infections are acquired during the course of receiving medical treatment in a healthcare facility, not present at admission.

Question 2: What is the primary purpose of professional certification in Decision Support?

To meet legal requirements only
To validate competency and knowledge in the field (Correct answer)
To increase salary automatically
To replace practical experience

Correct answer: To validate competency and knowledge in the field

Certification validates that a professional has met established standards of knowledge and competency in Decision Support.

Question 3: When designing a consumer health informatics application for older adults, which design principle is MOST important?

Maximizing feature density on each screen
Defaulting to voice-only interaction
Applying accessibility standards (WCAG) with larger text, high contrast, and simplified navigation (Correct answer)
Requiring biometric authentication for all logins

Correct answer: Applying accessibility standards (WCAG) with larger text, high contrast, and simplified navigation

WCAG-based accessibility standards with larger fonts, high contrast, and simplified navigation directly address the visual and cognitive needs of older adult users.

Question 4: The Unified Medical Language System (UMLS) serves what primary purpose in health informatics?

Linking multiple biomedical vocabularies and standards to enable interoperability (Correct answer)
Replacing legacy terminology systems with a unified standard
Providing a single standardized coding system for all clinical data
Governing the use of clinical terminologies in EHR certification

Correct answer: Linking multiple biomedical vocabularies and standards to enable interoperability

The UMLS, maintained by NLM, integrates and distributes key biomedical vocabularies, enabling software to map across different terminology systems.

Question 5: Which of the following is an example of a Health Information System (HIS)?

An electronic prescription system used by doctors (Correct answer)
A fitness tracker worn by patients
A social media platform for healthcare professionals
A mobile app for patient appointment booking

Correct answer: An electronic prescription system used by doctors

A Health Information System (HIS) is a broad term encompassing various systems that manage health-related data. An electronic prescription system, which allows doctors to digitally prescribe medications, is a direct example of an HIS because it handles critical patient health information and streamlines a core healthcare process. It directly contributes to the management and flow of health data within the system.

Question 6: In clinical workflow analysis, a 'workaround' is BEST defined as:

A vendor-approved configuration change
An approved alternate care pathway
An informal practice that bypasses an intended system process (Correct answer)
A temporary downtime procedure

Correct answer: An informal practice that bypasses an intended system process

Workarounds are informal, unapproved adaptations clinicians develop when the designed system process is perceived as too burdensome or ineffective.

Question 7: Which HL7 FHIR resource type is used to represent a patient's allergy or intolerance in an interoperable clinical system?

Observation
Condition
AllergyIntolerance (Correct answer)
MedicationStatement

Correct answer: AllergyIntolerance

The FHIR AllergyIntolerance resource specifically represents patient allergy and intolerance data in a standardized, interoperable format.

Question 8: Which federal agency maintains the NCI Thesaurus, a reference vocabulary for cancer-related clinical and research data?

National Library of Medicine (NLM)
Agency for Healthcare Research and Quality (AHRQ)
Centers for Disease Control and Prevention (CDC)
National Cancer Institute (NCI) (Correct answer)

Correct answer: National Cancer Institute (NCI)

The National Cancer Institute (NCI) maintains the NCI Thesaurus, which provides standard terminology for cancer research, clinical trials, and cancer care.

Question 9: Semantic interoperability in health information exchange depends primarily on:

Consistent use of shared, standardized clinical terminologies across systems (Correct answer)
Uniform use of a single EHR vendor platform
Standardized graphical user interface design across applications
Transmission speed and network bandwidth between organizations

Correct answer: Consistent use of shared, standardized clinical terminologies across systems

Semantic interoperability requires that the meaning of exchanged data is preserved and understood consistently, which depends on shared use of standardized clinical terminologies.

Question 10: Which evaluation measure is most appropriate when a CDS predictive model's cost of missing a true positive (e.g., sepsis) is very high?

Positive predictive value
Specificity
Sensitivity (recall) (Correct answer)
F1 score only

Correct answer: Sensitivity (recall)

High sensitivity ensures that most true positive cases (e.g., sepsis) are identified, minimizing missed diagnoses even at the cost of more false positives.

Question 11: In health IT governance, a Steering Committee is primarily responsible for which function?

Conducting HIPAA audits
Managing the help desk ticket queue
Writing code for clinical systems
Prioritizing and approving IT investments aligned with organizational strategy (Correct answer)

Correct answer: Prioritizing and approving IT investments aligned with organizational strategy

An IT Steering Committee provides governance by prioritizing IT investments, approving projects, and ensuring alignment with organizational strategic goals.

Question 12: Which federal law establishes patients' rights to access, inspect, and obtain copies of their protected health information?

The Affordable Care Act
HIPAA Privacy Rule (45 CFR § 164.524) (Correct answer)
The Electronic Signatures in Global and National Commerce Act
The Americans with Disabilities Act

Correct answer: HIPAA Privacy Rule (45 CFR § 164.524)

The HIPAA Privacy Rule at 45 CFR § 164.524 grants patients the right to access and obtain copies of their own PHI held by covered entities.

Question 13: In health information systems, what does 'high availability' (HA) architecture typically require?

Turning off non-essential services during peak hours
Redundant servers and automatic failover mechanisms (Correct answer)
Restricting access to a small number of users
A single powerful server with maximum RAM

Correct answer: Redundant servers and automatic failover mechanisms

HA architecture uses redundant components and failover automation so the system remains accessible even when individual components fail.

Question 14: Which of the following methods is commonly used to ensure the accuracy of healthcare data?

Data validation and cleaning (Correct answer)
Predictive analytics
Data encryption
Machine learning algorithms

Correct answer: Data validation and cleaning

Data validation and cleaning are essential methods for ensuring the accuracy and reliability of healthcare data. Data validation involves checking data against predefined rules and constraints to identify errors or inconsistencies at the point of entry. Data cleaning then addresses these identified errors, removes duplicates, and fills in missing information, making the data fit for analysis and use in clinical decision-making.

Question 15: Which study approach is most effective for Interoperability material?

Highlighting all text
Active recall with practice questions (Correct answer)
Studying for very long sessions without breaks
Passive re-reading of notes

Correct answer: Active recall with practice questions

Active recall through practice questions is the most effective study method, as it strengthens memory retrieval pathways.

Question 16: The HITECH Act enhanced HIPAA by doing which of the following?

Eliminating patient access rights to medical records
Strengthening enforcement, increasing penalties, and extending HIPAA obligations to business associates (Correct answer)
Creating a new federal health records system
Replacing HIPAA entirely with new privacy law

Correct answer: Strengthening enforcement, increasing penalties, and extending HIPAA obligations to business associates

HITECH strengthened HIPAA by increasing civil penalties, requiring breach notifications, and directly applying HIPAA security requirements to business associates.

Question 17: The role of a Chief Privacy Officer (CPO) in a healthcare organization primarily involves which responsibility?

Approving all IT system purchases
Managing the hospital's marketing campaigns
Conducting clinical quality improvement reviews
Overseeing compliance with privacy laws and policies protecting patient information (Correct answer)

Correct answer: Overseeing compliance with privacy laws and policies protecting patient information

The CPO is responsible for developing and enforcing organizational privacy policies, ensuring compliance with HIPAA and other privacy laws, and managing privacy risk.

Question 18: What is the correct order for donning PPE?

Gown, mask, eye protection, gloves (Correct answer)
Any order is acceptable
Mask, gloves, gown, eye protection
Gloves, gown, mask, eye protection

Correct answer: Gown, mask, eye protection, gloves

The correct donning sequence is gown first, then mask/respirator, eye protection/face shield, and gloves last. This prevents contamination during application.

Question 19: During EHR implementation planning, the project team identifies that a key vendor may not deliver on time. This risk should be documented in the:

Risk register (Correct answer)
Issue log
Work breakdown structure
Project charter

Correct answer: Risk register

The risk register is used to record identified risks, their probability, impact, and planned responses before they become issues.

Question 20: A hospital uses a cloud-based EHR vendor. To comply with HIPAA, the hospital must:

Execute a Business Associate Agreement (BAA) with the cloud vendor (Correct answer)
Encrypt all data before sending it to the cloud vendor without any formal agreement
Avoid using cloud services entirely for PHI storage
Obtain patient consent for every data transfer to the cloud

Correct answer: Execute a Business Associate Agreement (BAA) with the cloud vendor

Any cloud vendor handling PHI on behalf of a covered entity is a business associate and must sign a BAA before PHI is processed or stored.

Question 21: Which of the following laws regulates the privacy and security of patient health information in the United States?

The Public Health Service Act
The Federal Food, Drug, and Cosmetic Act
The Health Insurance Portability and Accountability Act (HIPAA) (Correct answer)
The Affordable Care Act (ACA)

Correct answer: The Health Insurance Portability and Accountability Act (HIPAA)

The Health Insurance Portability and Accountability Act (HIPAA) is a landmark federal law enacted in 1996 that sets national standards for the protection of sensitive patient health information. It establishes rules for the privacy, security, and integrity of medical records, ensuring patient data is handled responsibly. While the other acts are significant, HIPAA specifically governs health information privacy and security.

Question 22: CPT (Current Procedural Terminology) codes are maintained by which organization?

Centers for Disease Control and Prevention (CDC)
Centers for Medicare & Medicaid Services (CMS)
American Health Information Management Association (AHIMA)
American Medical Association (AMA) (Correct answer)

Correct answer: American Medical Association (AMA)

CPT codes are owned and maintained by the American Medical Association (AMA) and are used primarily for outpatient procedure billing.

Question 23: What is the primary purpose of a HIPAA Security Risk Assessment?

To audit billing codes for compliance
To identify and evaluate potential vulnerabilities to ePHI confidentiality, integrity, and availability (Correct answer)
To verify that all staff have completed privacy training
To train staff on phishing awareness

Correct answer: To identify and evaluate potential vulnerabilities to ePHI confidentiality, integrity, and availability

A security risk assessment systematically identifies threats and vulnerabilities to ePHI to guide the implementation of appropriate safeguards.

Question 24: In a health information exchange (HIE), the 'opt-in' consent model means:

Patients must affirmatively agree before their data is shared through the HIE (Correct answer)
Providers must opt in to participate in the exchange
Only government-authorized data elements may be shared
Patients are automatically included unless they actively withdraw consent

Correct answer: Patients must affirmatively agree before their data is shared through the HIE

An opt-in model requires explicit patient consent before their health information is shared, giving patients more control over their data.

Question 25: LOINC codes are primarily used to identify which type of clinical data?

Surgical procedures and CPT billing
Laboratory tests and clinical observations (Correct answer)
Diagnoses and problem lists
Medications and drug interactions

Correct answer: Laboratory tests and clinical observations

LOINC (Logical Observation Identifiers Names and Codes) is the standard for identifying laboratory tests, clinical observations, and measurements.

Question 26: What does informed consent require?

Explaining the procedure, risks, benefits, and alternatives to the patient (Correct answer)
Getting any signature on a form
Family approval only
Verbal agreement only

Correct answer: Explaining the procedure, risks, benefits, and alternatives to the patient

Informed consent requires that patients understand the proposed procedure, its risks and benefits, alternatives, and have the opportunity to ask questions before agreeing.

Question 27: Which layer of the OSI model handles end-to-end communication and reliability, commonly associated with TCP in healthcare networks?

Transport layer (Correct answer)
Session layer
Data Link layer
Network layer

Correct answer: Transport layer

The Transport layer (Layer 4) manages end-to-end data delivery and reliability, with TCP providing connection-oriented communication.

Question 28: In the context of EHR optimization, 'alert fatigue' refers to:

Clinicians overriding or ignoring alerts due to excessive, irrelevant notifications (Correct answer)
System performance degradation during peak alert generation
Patients receiving too many automated health reminders
Hardware notification overload on clinical workstations

Correct answer: Clinicians overriding or ignoring alerts due to excessive, irrelevant notifications

Alert fatigue occurs when clinicians routinely override or ignore clinical decision support alerts because the volume of low-value alerts desensitizes them to important warnings.

Question 29: What is the relationship between theory and practice in Decision Support?

They are completely separate
Theory is unnecessary
Theory provides the foundation; practice applies it to real situations (Correct answer)
Practice is unnecessary if you know theory

Correct answer: Theory provides the foundation; practice applies it to real situations

Theory provides the conceptual foundation and principles, while practice involves applying those concepts to real-world situations. Both are essential for competence.

AMIA Health Informatics Certification (AHIC)

The AHIC is a professional certification from AMIA that validates competency across health informatics domains including clinical systems, data governance, and health decision-making. It is designed for health IT professionals who apply informatics principles in healthcare settings.

Questions

35 min

Time Limit

75%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds