Certified Medical Records Technician (CMRT) — Questions and Answers

Question 1: What role does coding play in medical record structure?

Coding is used only for legal purposes.
Coding supports billing and insurance claims. (Correct answer)
Coding ensures accurate medical documentation for clinical use.
Coding helps healthcare providers to track patient visits.

Correct answer: Coding supports billing and insurance claims.

Medical coding involves translating diagnoses, procedures, and medical services into standardized alphanumeric codes, such as ICD-10 or CPT codes. These codes are essential for accurate billing, processing insurance claims, and facilitating reimbursement for healthcare services. They provide a universal language for financial transactions in healthcare.

Question 2: Which HIPAA provision gives patients the right to request restrictions on how their PHI is used for treatment, payment, or operations?

Right to Amend
Right of Access
Right to Request Restrictions (Correct answer)
Right to Accounting of Disclosures

Correct answer: Right to Request Restrictions

The HIPAA Privacy Rule grants patients the right to request that a covered entity restrict uses or disclosures of PHI, though the entity is generally not required to agree.

Question 3: Which entity is responsible for enforcing HIPAA compliance?

The American Health Information Management Association (AHIMA)
The Department of Health and Human Services Office for Civil Rights (OCR) (Correct answer)
The Centers for Medicare & Medicaid Services (CMS)
The Joint Commission

Correct answer: The Department of Health and Human Services Office for Civil Rights (OCR)

The HHS Office for Civil Rights (OCR) is the primary federal agency that investigates HIPAA complaints and enforces compliance.

Question 4: Which coding system is used specifically to communicate diagnostic imaging orders and results between radiology and clinical systems?

LOINC (Logical Observation Identifiers Names and Codes) (Correct answer)
ICD-10-CM
CPT
SNOMED CT

Correct answer: LOINC (Logical Observation Identifiers Names and Codes)

LOINC provides standardized codes for lab tests and clinical observations, including radiology orders and results.

Question 5: Which regulatory requirement is UNIVERSAL across all Certified Medical Records Technician practice settings?

Using specific proprietary software systems
Maintaining current certification and meeting continuing education requirements (Correct answer)
Working exclusively during business hours
Limiting services to local jurisdictions only

Correct answer: Maintaining current certification and meeting continuing education requirements

Maintaining current certification and meeting continuing education requirements is a universal regulatory requirement. Regardless of practice setting, professionals must keep their credentials current and demonstrate ongoing competency through continuing education.

Question 6: What does encryption do in healthcare data security?

It speeds up data transmission.
It helps reduce the size of data.
It protects data from unauthorized access. (Correct answer)
It stores data in a larger file format.

Correct answer: It protects data from unauthorized access.

Encryption is a crucial security measure that transforms data into a coded format, making it unreadable to anyone without the correct decryption key. In healthcare, encryption protects sensitive patient information both at rest (stored) and in transit (transmitted), ensuring that even if unauthorized individuals gain access to the data, they cannot understand or use it. This safeguards patient confidentiality and meets regulatory requirements.

Question 7: What is the primary purpose of the 'minimum data set' (MDS) in long-term care settings?

To assess and document resident functional status for care planning and reimbursement (Correct answer)
To assign ICD-10 codes for nursing home residents
To track hospital readmission rates
To audit medication administration records

Correct answer: To assess and document resident functional status for care planning and reimbursement

The MDS is a federally mandated assessment tool used in skilled nursing facilities to evaluate resident health status and guide individualized care plans.

Question 8: What does the acronym EHR stand for in health information management?

Electronic Hospital Registry
External Health Repository
Electronic Health Record (Correct answer)
Encrypted Health Report

Correct answer: Electronic Health Record

EHR stands for Electronic Health Record, a digital version of a patient's paper chart.

Question 9: Which regulatory requirement is UNIVERSAL across all Certified Medical Records Technician practice settings?

Maintaining current certification and meeting continuing education requirements (Correct answer)
Using specific proprietary software systems
Working exclusively during business hours
Limiting services to local jurisdictions only

Correct answer: Maintaining current certification and meeting continuing education requirements

Question 10: What is the significance of access controls in medical records?

They allow patients to directly access their data.
They help control the storage capacity of the records.
They make data easier to access.
They ensure only authorized personnel can access patient information. (Correct answer)

Correct answer: They ensure only authorized personnel can access patient information.

Access controls are security measures that regulate who can view, edit, or delete patient information within medical record systems. By implementing roles and permissions, they ensure that only healthcare professionals with a legitimate need-to-know can access specific patient data. This is vital for maintaining patient confidentiality, preventing unauthorized data breaches, and complying with privacy regulations like HIPAA.

Question 11: Which federal program required eligible providers to demonstrate meaningful use of certified EHR technology to receive incentive payments?

CMS Promoting Interoperability Program (Correct answer)
ONC Cures Act Final Rule
DEA E-Prescribing Mandate
Joint Commission EHR Standards

Correct answer: CMS Promoting Interoperability Program

The CMS Promoting Interoperability Program (formerly Meaningful Use) tied EHR incentive payments to meeting specific quality and interoperability measures.

Question 12: Which coding system is used in the US to code inpatient hospital diagnoses and procedures for reimbursement under Medicare?

CDT
HCPCS Level II
ICD-10-CM/PCS (Correct answer)
CPT

Correct answer: ICD-10-CM/PCS

ICD-10-CM is used for diagnosis coding while ICD-10-PCS is used for inpatient procedure coding under Medicare's MS-DRG system.

Question 13: What is a key component of healthcare data analytics?

Administrative workload reduction.
Clinical data analysis to improve outcomes. (Correct answer)
Patient feedback collection.
Patient satisfaction surveys.

Correct answer: Clinical data analysis to improve outcomes.

A key component of healthcare data analytics is the rigorous analysis of clinical data, which includes patient diagnoses, treatments, lab results, and outcomes. By examining this data, healthcare professionals can identify best practices, predict disease progression, and evaluate the effectiveness of interventions. This ultimately leads to evidence-based decision-making and improved patient health outcomes.

Question 14: A covered entity's Notice of Privacy Practices (NPP) must be provided to patients:

At first service delivery and posted in the facility (Correct answer)
Annually regardless of new service
Only upon written request
Only when the privacy policy changes

Correct answer: At first service delivery and posted in the facility

HIPAA requires covered entities to provide the NPP at first contact or service and make it available at their facilities.

Question 15: A patient requests an amendment to their medical record. Under HIPAA, the covered entity may deny the request if:

The record was not created by the covered entity (Correct answer)
The record is more than five years old
The patient disagrees with the treating provider's clinical judgment
The amendment would increase the length of the record

Correct answer: The record was not created by the covered entity

A covered entity may deny an amendment request if the information was not created by that entity, among other permissible reasons.

Question 16: Why is insurance verification important in the revenue cycle?

To speed up the billing process.
To ensure accurate patient records.
To confirm the patient's insurance coverage and prevent denials. (Correct answer)
To determine the amount of the patient's copay.

Correct answer: To confirm the patient's insurance coverage and prevent denials.

Insurance verification is a critical step in the revenue cycle because it confirms the patient's active insurance coverage and benefits before services are rendered. This proactive measure helps prevent claim denials, reduces financial surprises for patients, and ensures the healthcare provider will be reimbursed for services.

Question 17: What is the BEST way for a Certified Medical Records Technician professional to stay current with regulatory changes?

Rely solely on employer notifications
Actively monitor regulatory bodies, attend continuing education, and participate in professional associations (Correct answer)
Check regulations only during certification renewal
Depend on colleagues to share updates informally

Correct answer: Actively monitor regulatory bodies, attend continuing education, and participate in professional associations

Staying current requires a multi-faceted approach: monitoring regulatory agencies directly, attending relevant continuing education programs, and participating in professional associations that disseminate regulatory updates.

Question 18: What is the function of a data dictionary in a health information system?

Store patient demographic information
Define data elements, their formats, and acceptable values (Correct answer)
Schedule staff assignments
Generate billing statements

Correct answer: Define data elements, their formats, and acceptable values

A data dictionary documents the definitions, formats, and constraints for all data elements used in a health information system.

Question 19: What does the prefix 'peri-' mean?

Before
After
Around or surrounding (Correct answer)
Within

Correct answer: Around or surrounding

The prefix 'peri-' means around or surrounding, as in pericardium (sac surrounding the heart).

Question 20: The combining form 'dermato-' refers to:

Muscle tissue
Nervous tissue
Connective tissue
Skin (Correct answer)

Correct answer: Skin

The combining form 'dermato-' refers to the skin, as in dermatology (study of skin diseases).

Question 21: Role-based access control (RBAC) in a health information system means:

Patients can access any provider's records across the organization
System access is granted based on a user's job function, not individual identity (Correct answer)
Each user creates a unique password at least 12 characters long
All staff have equal access to all records within the system

Correct answer: System access is granted based on a user's job function, not individual identity

RBAC limits system access to the minimum PHI needed for each staff role, reducing the risk of unauthorized access.

Question 22: Why is data validation important in healthcare reporting?

To ensure the accuracy and reliability of reported data. (Correct answer)
To reduce data storage costs.
To collect patient opinions.
To track financial data only.

Correct answer: To ensure the accuracy and reliability of reported data.

Data validation is paramount in healthcare reporting to guarantee the accuracy and reliability of the information used for analysis and decision-making. Ensuring data integrity prevents errors that could lead to incorrect diagnoses, ineffective treatments, or flawed operational strategies, thereby maintaining trust and improving patient safety.

Question 23: An EHR audit log is primarily used to:

Back up patient records to a secondary server
Authenticate user passwords during login
Track who accessed, modified, or deleted records and when (Correct answer)
Encrypt PHI transmitted over networks

Correct answer: Track who accessed, modified, or deleted records and when

Audit logs record access activity, enabling organizations to detect unauthorized access, modifications, or deletions of electronic health records.

Question 24: What type of system is used in hospitals to manage orders for medications, labs, and imaging, reducing transcription errors?

ADT
LIS
CPOE (Computerized Physician Order Entry) (Correct answer)
PACS

Correct answer: CPOE (Computerized Physician Order Entry)

CPOE systems allow providers to enter orders electronically, eliminating handwriting errors and improving patient safety.

Question 25: Which federal law specifically protects the confidentiality of substance use disorder treatment records beyond standard HIPAA protections?

FERPA
The Privacy Act of 1974
The HITECH Act
42 CFR Part 2 (Correct answer)

Correct answer: 42 CFR Part 2

42 CFR Part 2 provides heightened confidentiality protections for records of patients treated for substance use disorders at federally assisted programs.

Question 26: What does the prefix 'brady-' mean in medical terminology?

Fast
Small
Slow (Correct answer)
Large

Correct answer: Slow

The prefix 'brady-' means slow, as in bradycardia (slow heart rate).

Question 27: Which federal database is the primary source for national inpatient hospital discharge statistics used for benchmarking?

ONC Certified Health IT Product List
Medicare Claims Processing Manual
Healthcare Cost and Utilization Project (HCUP) NIS (Correct answer)
SNOMED CT reference browser

Correct answer: Healthcare Cost and Utilization Project (HCUP) NIS

The HCUP National Inpatient Sample (NIS) is the largest publicly available all-payer inpatient database, widely used for national benchmarking.

Question 28: How frequently should ongoing assessments be conducted in Certified Medical Records Technician practice?

Only when required by external auditors
Once annually regardless of circumstances
At regular intervals based on established protocols and as conditions change (Correct answer)
Only when problems are reported

Correct answer: At regular intervals based on established protocols and as conditions change

Ongoing assessments should follow established protocols for regular intervals and also be conducted when conditions change. This balanced approach ensures continuous monitoring while remaining responsive to new developments.

Question 29: The suffix '-algia' in medical terminology means:

Weakness
Swelling
Hemorrhage
Pain (Correct answer)

Correct answer: Pain

The suffix '-algia' means pain, as in neuralgia (nerve pain) or myalgia (muscle pain).

Question 30: What does the prefix 'sub-' mean in medical terminology?

Across
Above
Under or below (Correct answer)
Between

Correct answer: Under or below

The prefix 'sub-' means under or below, as in subcutaneous (under the skin).

Question 31: In health IT, what is the purpose of role-based access control (RBAC)?

Restrict system access based on a user's job function (Correct answer)
Backup data automatically
Monitor network traffic
Encrypt all stored patient data

Correct answer: Restrict system access based on a user's job function

RBAC ensures users can only access the information and functions necessary for their specific role, limiting unauthorized access.

Question 32: A CMRT must de-identify a dataset for release under HIPAA's Safe Harbor method. Which of the following identifiers must be removed?

Only dates of service and provider names
All geographic data smaller than a state, dates more specific than year, and 18 other specified identifiers (Correct answer)
Only the patient name and Social Security Number
Name, address, and insurance ID only

Correct answer: All geographic data smaller than a state, dates more specific than year, and 18 other specified identifiers

Safe Harbor de-identification requires removal of all 18 HIPAA-specified identifiers including geographic subdivisions smaller than a state and dates more specific than year.

Question 33: When a CMRT professional identifies a potential regulatory violation, the CORRECT first step is to:

Wait to see if it resolves on its own
Address it only if directly affected
Discuss it casually with coworkers
Document the violation and report it through proper channels (Correct answer)

Correct answer: Document the violation and report it through proper channels

Proper documentation and reporting through established channels is the correct first step when identifying a potential violation. This ensures accountability, creates a paper trail, and allows appropriate parties to investigate and resolve the issue.

Question 34: A patient has paid out-of-pocket in full for a service and requests that the covered entity not disclose that encounter to their health plan. The covered entity must:

Honor the restriction request (Correct answer)
Deny the request as impractical
Disclose only the diagnosis, not the treatment
Consult the health plan before agreeing

Correct answer: Honor the restriction request

Under HITECH, when a patient pays out-of-pocket in full and requests restriction from their health plan, the covered entity is required to honor that restriction.

Question 35: In Certified Medical Records Technician, what is the PRIMARY purpose of conducting regular safety drills and exercises?

To ensure personnel can respond effectively in emergencies (Correct answer)
To satisfy insurance requirements only
To reduce daily workload
To evaluate employee performance reviews

Correct answer: To ensure personnel can respond effectively in emergencies

Regular safety drills ensure that all personnel are prepared to respond effectively during actual emergencies. Practice builds muscle memory, identifies gaps in emergency procedures, and improves overall response times.

Question 36: In a hybrid health record environment, which challenge is most commonly associated with managing records?

Inability to share records electronically
Excessive storage costs for paper records alone
Inconsistent data elements between paper and electronic portions (Correct answer)
Lack of physician authentication options

Correct answer: Inconsistent data elements between paper and electronic portions

Hybrid records contain both paper and electronic components, creating challenges when data captured in each medium is not synchronized or consistent.

Question 37: A facility wants to compare its surgical complication rates with peer hospitals while accounting for differences in patient severity. Which statistical technique is most appropriate?

Risk adjustment / case-mix adjustment (Correct answer)
Frequency distribution analysis
Simple percentage comparison
Chi-square test on raw complication counts

Correct answer: Risk adjustment / case-mix adjustment

Risk adjustment controls for differences in patient population severity and comorbidities so that outcome comparisons across facilities are fair and valid.

Question 38: What is the BEST way for a Certified Medical Records Technician professional to stay current with regulatory changes?

Depend on colleagues to share updates informally
Rely solely on employer notifications
Check regulations only during certification renewal
Actively monitor regulatory bodies, attend continuing education, and participate in professional associations (Correct answer)

Correct answer: Actively monitor regulatory bodies, attend continuing education, and participate in professional associations

Question 39: The suffix '-ology' means:

Surgical incision
Condition of
Removal of
Study or science of (Correct answer)

Correct answer: Study or science of

The suffix '-ology' means the study or science of a subject, as in cardiology (study of the heart).

Question 40: Which interoperability framework allows patients and providers to access health data across different EHR systems using modern web APIs?

FHIR (Fast Healthcare Interoperability Resources) (Correct answer)
CCD
SNOMED CT
ICD-10

Correct answer: FHIR (Fast Healthcare Interoperability Resources)

FHIR is the modern HL7 standard using RESTful APIs that enables seamless data exchange between EHR systems.

Question 41: What is 'shoulder surfing' in the context of health information security?

Viewing a computer screen or document without authorization by looking over someone's shoulder (Correct answer)
A method of encrypting data during electronic transmission
A technique for recovering lost health records from backup media
An attack that floods a network with traffic to cause downtime

Correct answer: Viewing a computer screen or document without authorization by looking over someone's shoulder

Shoulder surfing is a physical security threat where an unauthorized person views sensitive information by observing a worker's screen or paper documents.

Question 42: How can Electronic Health Records (EHR) improve data content and structure?

EHRs help in creating paper-based records.
EHRs enhance the speed and accuracy of patient information management. (Correct answer)
EHRs are used only for administrative tasks.
EHRs replace all medical staff roles.

Correct answer: EHRs enhance the speed and accuracy of patient information management.

Electronic Health Records (EHRs) improve data content and structure by providing standardized templates, controlled vocabularies, and automated data entry features. This reduces manual errors, ensures consistency, and makes patient information readily accessible and organized. The digital format also allows for faster retrieval, sharing, and analysis of data, leading to more efficient and accurate patient information management.

Question 43: What is the primary purpose of a Clinical Decision Support (CDS) system within an EHR?

Store billing codes
Provide alerts and recommendations to guide clinical care (Correct answer)
Manage employee schedules
Replace physician diagnoses

Correct answer: Provide alerts and recommendations to guide clinical care

CDS systems analyze patient data and provide real-time alerts, reminders, and recommendations to improve clinical decision-making.

Question 44: What does 'genealogy' of a health record refer to in HIM practice?

The version history of an electronic document
The patient's ancestry recorded in demographics
Tracking the movement and custody history of a record (Correct answer)
Tracing the patient's family medical history

Correct answer: Tracking the movement and custody history of a record

Record genealogy (also called chain of custody) tracks where a record has been, who has accessed it, and how it has moved or been modified over time.

Question 45: Which health record component is legally required to be obtained before any surgical procedure and documents that the patient was informed of risks and alternatives?

Anesthesia record
Informed consent (Correct answer)
Pre-procedure assessment
Operative report

Correct answer: Informed consent

Informed consent documents that the patient was provided with information about the procedure, its risks, benefits, and alternatives, and voluntarily agreed to proceed.

Question 46: What is a key benefit of implementing a document management system (DMS) in a health information department?

Automatically generates ICD-10 codes
Enables electronic storage, retrieval, and workflow routing of health records (Correct answer)
Eliminates the need for release of information policies
Replaces physician documentation requirements

Correct answer: Enables electronic storage, retrieval, and workflow routing of health records

A DMS allows HIM departments to scan, index, store, and route paper and electronic documents efficiently within the EHR workflow.

Question 47: Which of the following would most likely cause a claim to be denied for 'timely filing'?

Submitting a claim within 30 days of service for a Medicaid patient
Using an outdated fee schedule
Submitting a claim after the payer's contractual deadline has passed (Correct answer)
Filing a corrected claim without a correction indicator

Correct answer: Submitting a claim after the payer's contractual deadline has passed

Timely filing denials occur when a claim is submitted after the payer's contractual or regulatory deadline, which varies by payer.

Question 48: Which type of health information exchange (HIE) model allows organizations to query a central repository for patient data?

Point-to-point HIE
Federated HIE
Hybrid HIE
Centralized HIE (Correct answer)

Correct answer: Centralized HIE

In a centralized HIE model, all participating organizations send data to and query from a single central repository.

Question 49: In CMRT practice, what happens when regulations are updated or changed?

Previous certifications are automatically revoked
Existing professionals are permanently grandfathered in
Professionals must update their knowledge and practices to meet new requirements (Correct answer)
Changes apply only to new professionals entering the field

Correct answer: Professionals must update their knowledge and practices to meet new requirements

When regulations change, all professionals must update their knowledge and practices to comply with new requirements. While transition periods may exist, compliance with current regulations is mandatory for all practitioners regardless of when they were certified.

Question 50: Which document initiated by the payer informs the provider of how a claim was adjudicated and any payment made?

Certificate of Medical Necessity
Advance Beneficiary Notice (ABN)
Remittance advice (ERA/EOB) (Correct answer)
Coordination of Benefits form

Correct answer: Remittance advice (ERA/EOB)

The remittance advice (electronic ERA or paper EOB) details claim adjudication decisions, payment amounts, and adjustment reason codes.

Question 51: In the context of revenue cycle management, what is 'charge capture'?

Submitting charges to the state Medicaid office
Auditing charts to detect upcoding
Collecting patient out-of-pocket payments at discharge
Recording all billable services rendered during a patient encounter (Correct answer)

Correct answer: Recording all billable services rendered during a patient encounter

Charge capture is the process of recording every billable service, procedure, and supply provided so it can be translated into billable codes.

Question 52: OASIS data is collected primarily for which patient population?

Long-term care nursing home residents
Ambulatory surgery center patients
Inpatient acute care patients
Home health agency patients (Correct answer)

Correct answer: Home health agency patients

The Outcome and Assessment Information Set (OASIS) is a CMS-mandated data collection tool for Medicare/Medicaid patients receiving home health services.

Question 53: A CMRT is asked to identify patients who meet criteria for a quality measure using structured EHR data. Which type of query tool is most commonly used for this?

Clinical Quality Language (CQL) logic within a measure engine (Correct answer)
ICD-10 encoder look-up tool
Manual chart review with paper abstraction forms
Free-text keyword search of physician notes

Correct answer: Clinical Quality Language (CQL) logic within a measure engine

CQL is a standardized, human-readable query language used to express electronic clinical quality measure (eCQM) logic against structured EHR data.

Question 54: What is HIPAA and why is it important in healthcare?

It is a healthcare system for tracking insurance.
It is a law to protect patient privacy and ensure data security. (Correct answer)
It is a healthcare certification process.
It is an organization that sets medical billing standards.

Correct answer: It is a law to protect patient privacy and ensure data security.

HIPAA, the Health Insurance Portability and Accountability Act, is a landmark U.S. federal law enacted in 1996. Its primary purpose is to establish national standards for the protection of sensitive patient health information (PHI) by setting rules for its use, disclosure, and security. HIPAA ensures patient privacy, promotes data security, and allows individuals greater control over their health information.

Question 55: When a CMRT professional identifies a potential regulatory violation, the CORRECT first step is to:

Address it only if directly affected
Discuss it casually with coworkers
Wait to see if it resolves on its own
Document the violation and report it through proper channels (Correct answer)

Correct answer: Document the violation and report it through proper channels

Question 56: What is a breach of confidentiality in healthcare?

When a patient refuses treatment.
When a healthcare provider follows standard procedures.
When patient data is correctly entered into the system.
When a healthcare provider shares patient information without consent. (Correct answer)

Correct answer: When a healthcare provider shares patient information without consent.

A breach of confidentiality in healthcare occurs when protected health information (PHI) is impermissibly used or disclosed in a way that compromises its security or privacy. This includes sharing patient information with individuals not authorized to receive it, without the patient's explicit consent or a legal justification. Such breaches can lead to significant legal penalties and erode patient trust.

Question 57: What does the prefix 'ante-' mean?

Before or in front of (Correct answer)
After
Below
Against

Correct answer: Before or in front of

The prefix 'ante-' means before or in front of, as in antepartum (before birth).

Question 58: The prefix 'leuko-' refers to:

Blue
White (Correct answer)
Red
Yellow

Correct answer: White

The prefix 'leuko-' means white, as in leukocytes (white blood cells).

Question 59: Which documentation practice BEST demonstrates regulatory compliance for CMRT certified professionals?

Filing documents only when audited
Relying on memory for routine procedures
Keeping informal handwritten notes
Maintaining organized, dated, and signed records of all activities, training, and incidents (Correct answer)

Correct answer: Maintaining organized, dated, and signed records of all activities, training, and incidents

Organized, dated, and signed records demonstrate systematic compliance with regulatory requirements. Proper documentation serves as evidence during audits, protects against liability, and shows a pattern of consistent adherence to standards.

Question 60: Which factor MOST significantly affects the quality of technical outcomes in CMRT practice?

The time of day the procedure is performed
The brand of equipment being used
The practitioner's training, preparation, and attention to detail (Correct answer)
The speed at which procedures are completed

Correct answer: The practitioner's training, preparation, and attention to detail

The quality of technical outcomes depends primarily on the practitioner's level of training, thorough preparation, and careful attention to detail. While equipment matters, the professional's competence is the most significant factor.

Question 61: How can healthcare organizations protect patient data during transmission?

By using secure communication protocols and encryption. (Correct answer)
By limiting access to the data.
By reducing the volume of data shared.
By storing data in paper files.

Correct answer: By using secure communication protocols and encryption.

Protecting patient data during transmission is critical to prevent interception by unauthorized parties. Healthcare organizations achieve this by employing secure communication protocols, such as Transport Layer Security (TLS) or Virtual Private Networks (VPNs), which encrypt data as it travels across networks. Encryption scrambles the data, rendering it unreadable if intercepted, thereby safeguarding patient confidentiality.

Question 62: What is the role of accounts receivable in revenue cycle management?

To track and manage outstanding payments. (Correct answer)
To reduce the total amount owed.
To process insurance claims.
To monitor patient care services.

Correct answer: To track and manage outstanding payments.

The role of accounts receivable (AR) in revenue cycle management is to track and manage all outstanding payments owed to the healthcare facility for services provided. Effective AR management ensures timely collection of these payments, which is vital for the organization's cash flow and financial stability.

Question 63: Which federal law mandated the adoption of certified EHR technology by eligible healthcare providers in the US?

HITECH Act (Correct answer)
Stark Law
ACA
HIPAA

Correct answer: HITECH Act

The HITECH Act of 2009 incentivized adoption of certified EHR technology through the Meaningful Use program.

Question 64: In the ICD-10-CM alphabetic index, what should a coder do after locating a code to verify it is correct?

Always verify the code in the tabular list before final assignment (Correct answer)
Check only if it is a 7-character code
Assign the code directly from the index
Cross-reference only if the code has a note

Correct answer: Always verify the code in the tabular list before final assignment

The alphabetic index provides a starting point only; coders must always verify and confirm the final code assignment in the tabular list.

Question 65: What is the purpose of a HIPAA Business Associate Agreement (BAA)?

To authorize a patient to receive their own records
To legally bind vendors who access PHI to comply with HIPAA safeguards (Correct answer)
To document a covered entity's internal privacy policy
To grant patients access to their designated record set

Correct answer: To legally bind vendors who access PHI to comply with HIPAA safeguards

A BAA is a contract requiring business associates who handle PHI on behalf of a covered entity to follow HIPAA requirements.

Question 66: Which risk management approach is MOST effective for CMRT professionals when evaluating potential workplace hazards?

Reactive analysis after incidents occur
Proactive hazard identification and assessment (Correct answer)
Relying solely on historical accident data
Delegating all safety decisions to management

Correct answer: Proactive hazard identification and assessment

Proactive hazard identification and assessment allows professionals to identify and mitigate risks before incidents occur, which is far more effective than reactive approaches that only address problems after they happen.

Question 67: What is the PRIMARY reason for regulatory compliance in the Certified Medical Records Technician profession?

To create additional paperwork for documentation
To justify higher service fees
To avoid penalties and fines only
To protect public safety, ensure quality standards, and maintain professional integrity (Correct answer)

Correct answer: To protect public safety, ensure quality standards, and maintain professional integrity

Regulatory compliance serves the broader purpose of protecting public safety, ensuring consistent quality standards, and maintaining the integrity of the profession. While avoiding penalties is a benefit, the primary motivation is safeguarding the public interest.

Question 68: Which combining form refers to the kidney?

Nephro- (Correct answer)
Encephalo-
Dermato-
Gastro-

Correct answer: Nephro-

The combining form 'nephro-' refers to the kidney, as in nephrology (study of kidney diseases).

Question 69: The suffix '-plasty' in medical terminology means:

Study of
Disease of
Inflammation of
Surgical repair or reconstruction (Correct answer)

Correct answer: Surgical repair or reconstruction

The suffix '-plasty' means surgical repair or reconstruction, as in rhinoplasty (surgical repair of the nose).

Question 70: Which step in the revenue cycle involves verifying a patient's insurance eligibility BEFORE services are rendered?

Remittance posting
Pre-authorization
Claims submission
Pre-registration/eligibility verification (Correct answer)

Correct answer: Pre-registration/eligibility verification

Pre-registration and eligibility verification confirm coverage details before the patient receives care, reducing claim denials.

Question 71: What is the PRIMARY reason for regulatory compliance in the Certified Medical Records Technician profession?

To avoid penalties and fines only
To create additional paperwork for documentation
To justify higher service fees
To protect public safety, ensure quality standards, and maintain professional integrity (Correct answer)

Correct answer: To protect public safety, ensure quality standards, and maintain professional integrity

Question 72: A patient's record contains documentation from three different providers that disagree on the patient's allergy status. This is an example of a problem with data:

Confidentiality
Consistency (Correct answer)
Accessibility
Availability

Correct answer: Consistency

When the same data element (allergy status) has conflicting values across different sources in a record, it represents a data consistency (or integrity) problem.

Question 73: A hospital bills Medicare for an inpatient stay. Under which payment system is reimbursement calculated?

Per diem rate schedule
Ambulatory Payment Classification (APC)
Diagnosis-Related Group (DRG) (Correct answer)
Resource-Based Relative Value Scale (RBRVS)

Correct answer: Diagnosis-Related Group (DRG)

Medicare reimburses inpatient hospital stays using the Inpatient Prospective Payment System (IPPS), which assigns a fixed payment based on the patient's DRG.

Question 74: When assessment results for a Certified Medical Records Technician evaluation are inconclusive, the BEST practice is to:

Delay reporting until results are favorable
Discard the results and start over completely
Report the results as definitive anyway
Conduct additional assessment using alternative methods (Correct answer)

Correct answer: Conduct additional assessment using alternative methods

Inconclusive results require additional assessment using alternative methods to gather more data. This triangulation approach helps clarify findings without compromising the integrity of the assessment process.

Question 75: Under HIPAA, psychotherapy notes are treated differently from other medical records because:

They can be disclosed to law enforcement without any restrictions
They are not considered PHI
They must be retained for a minimum of 25 years
They require specific patient authorization for most disclosures, separate from the general authorization (Correct answer)

Correct answer: They require specific patient authorization for most disclosures, separate from the general authorization

Psychotherapy notes held separately from the medical record receive special protection and generally require patient authorization even for disclosures that are otherwise permissible.

Question 76: Which root word refers to the heart?

Cardio- (Correct answer)
Nephro-
Pneumo-
Hepato-

Correct answer: Cardio-

The root 'cardio-' refers to the heart, as in cardiology (study of the heart).

Question 77: What term describes the ability of different health information systems to work together and exchange data seamlessly?

Interoperability (Correct answer)
Scalability
Redundancy
Portability

Correct answer: Interoperability

Interoperability is the ability of health IT systems to exchange, interpret, and use data across organizational and vendor boundaries.

Question 78: The suffix '-itis' in a medical term indicates:

Disease of
Visualization of
Inflammation (Correct answer)
Surgical removal

Correct answer: Inflammation

The suffix '-itis' means inflammation, such as in appendicitis (inflammation of the appendix).

Question 79: In EHR implementation, what does 'go-live' refer to?

The vendor contract signing date
The point when system testing begins
The training completion date
The date the new system becomes operational for end users (Correct answer)

Correct answer: The date the new system becomes operational for end users

Go-live is the transition date when the new EHR system becomes the active, operational system replacing previous workflows.

Question 80: When correcting an error in a paper health record, the acceptable method is to:

Draw a single line through the error, date, and initial it (Correct answer)
Tear out the page and rewrite the entry
Use correction fluid (white-out) to cover the error
Erase the error completely

Correct answer: Draw a single line through the error, date, and initial it

A single line through the error with date and initials preserves the original entry while clearly marking the correction, maintaining record integrity.

Question 81: Why is maintaining data integrity important in medical records?

To increase the number of patients in the system.
To avoid legal penalties and ensure accurate patient treatment. (Correct answer)
To make the records look professional.
To ensure the hospital has enough data storage.

Correct answer: To avoid legal penalties and ensure accurate patient treatment.

Maintaining data integrity ensures that medical record information is accurate, consistent, and reliable throughout its entire lifecycle. This is crucial for patient safety, as incorrect or incomplete data can lead to serious medical errors and inappropriate treatment decisions. Furthermore, regulatory bodies like HIPAA mandate data integrity, imposing significant legal penalties for non-compliance.

Question 82: What does an ADT (Admission, Discharge, Transfer) system primarily track in a hospital?

Patient movement and location throughout the facility (Correct answer)
Insurance authorizations
Lab test results
Medication dispensing

Correct answer: Patient movement and location throughout the facility

ADT systems track patient registration, bed assignments, and transfers to maintain accurate census and location data.

Question 83: What does the term 'clean claim' mean in revenue cycle management?

A claim that has been paid in full by the payer
A claim that passed internal audit review
A claim submitted without any coding errors or missing information (Correct answer)
A claim with no outstanding patient balance

Correct answer: A claim submitted without any coding errors or missing information

A clean claim contains all required information, has no errors, and can be adjudicated by the payer without additional information requests.

Question 84: The medical term 'tachycardia' means:

Fast heart rate (Correct answer)
Absent heart rate
Irregular heart rate
Slow heart rate

Correct answer: Fast heart rate

Tachycardia is derived from 'tachy-' (fast) and '-cardia' (heart condition), meaning an abnormally fast heart rate.

Question 85: What is the function of the National Provider Identifier (NPI) in revenue cycle management?

It uniquely identifies healthcare providers on all HIPAA standard transactions (Correct answer)
It encrypts protected health information during claim transmission
It authenticates the patient's insurance eligibility in real time
It assigns a reimbursement rate to each provider specialty

Correct answer: It uniquely identifies healthcare providers on all HIPAA standard transactions

The NPI is a unique 10-digit identifier required on all HIPAA electronic transactions to identify the rendering, billing, and referring providers.

Question 86: Which method ensures that PHI is unreadable to unauthorized parties if a laptop is lost or stolen?

Installing antivirus software
Enabling automatic screen lock after 10 minutes
Full-disk encryption (Correct answer)
Password protection alone

Correct answer: Full-disk encryption

Full-disk encryption renders data on a lost or stolen device unreadable without the decryption key, which is why HIPAA guidelines recognize it as a key safeguard.

Question 87: What is the role of audit trails in healthcare data security?

They track and record access to sensitive data. (Correct answer)
They help in billing and reimbursement.
They prevent unauthorized access.
They provide patient care records.

Correct answer: They track and record access to sensitive data.

Audit trails are chronological records of system activities, documenting who accessed what data, when, and from where. In healthcare, they are crucial for security as they provide an immutable log of all interactions with patient records. This allows organizations to detect suspicious activity, investigate potential breaches, and demonstrate compliance with regulatory requirements like HIPAA.

Question 88: Which documentation practice BEST demonstrates regulatory compliance for CMRT certified professionals?

Filing documents only when audited
Relying on memory for routine procedures
Maintaining organized, dated, and signed records of all activities, training, and incidents (Correct answer)
Keeping informal handwritten notes

Correct answer: Maintaining organized, dated, and signed records of all activities, training, and incidents

Question 89: In CMRT practice, what happens when regulations are updated or changed?

Existing professionals are permanently grandfathered in
Professionals must update their knowledge and practices to meet new requirements (Correct answer)
Previous certifications are automatically revoked
Changes apply only to new professionals entering the field

Correct answer: Professionals must update their knowledge and practices to meet new requirements

Question 90: In a health information system, what is a master patient index (MPI) primarily used for?

Managing pharmacy inventory
Tracking insurance claims
Scheduling surgical procedures
Uniquely identifying patients across the facility (Correct answer)

Correct answer: Uniquely identifying patients across the facility

The MPI is a database that uniquely identifies each patient to prevent duplicate records and ensure accurate patient matching.

Question 91: What is the purpose of the CC/MCC subclassification in the MS-DRG system?

Group cases by age and sex
Classify hospital-acquired conditions
Identify the admitting diagnosis
Adjust payment to reflect increased resource use due to complications or comorbidities (Correct answer)

Correct answer: Adjust payment to reflect increased resource use due to complications or comorbidities

CC (Complication or Comorbidity) and MCC (Major Complication or Comorbidity) designations increase MS-DRG weight and reimbursement when present as secondary diagnoses.

Question 92: The medical term 'dyspnea' refers to:

Abnormal urination
Absence of speech
Painful swallowing
Difficult or labored breathing (Correct answer)

Correct answer: Difficult or labored breathing

Dyspnea comes from 'dys-' (difficult, painful) and '-pnea' (breathing), meaning difficult or labored breathing.

Question 93: Which type of analytic approach predicts future patient outcomes based on historical data patterns?

Diagnostic analytics
Predictive analytics (Correct answer)
Descriptive analytics
Prescriptive analytics

Correct answer: Predictive analytics

Predictive analytics uses statistical models and machine learning on historical data to forecast future events such as readmissions or deterioration.

Question 94: Which of the following is a 'technical safeguard' required by the HIPAA Security Rule?

Implementing encryption for PHI transmitted over open networks (Correct answer)
Locking server room doors
Shredding paper records containing PHI
Training workforce members on privacy policies

Correct answer: Implementing encryption for PHI transmitted over open networks

Technical safeguards include encryption, access controls, audit controls, and integrity controls that protect electronic PHI through technology.

Question 95: The combining form 'hepato-' refers to which organ?

Heart
Lung
Spleen
Liver (Correct answer)

Correct answer: Liver

The combining form 'hepato-' refers to the liver, as in hepatitis (inflammation of the liver).

Question 96: What is the role of data analytics in healthcare?

To forecast healthcare costs.
To track healthcare provider performance.
To monitor patient satisfaction.
To analyze healthcare data for decision-making. (Correct answer)

Correct answer: To analyze healthcare data for decision-making.

Data analytics in healthcare involves examining large datasets to identify trends, patterns, and insights that can inform decision-making. This includes analyzing clinical outcomes, operational efficiency, and financial performance. By leveraging data analytics, healthcare organizations can improve patient care, optimize resource allocation, and enhance public health initiatives.

Question 97: How do medical records contribute to patient care?

Medical records are not used by healthcare providers.
Medical records are only used after the patient's death.
Medical records ensure informed decision-making and continuity of care. (Correct answer)
Medical records are only used for billing.

Correct answer: Medical records ensure informed decision-making and continuity of care.

Medical records provide a comprehensive and accurate history of a patient's health, including diagnoses, treatments, medications, and allergies. This detailed information enables healthcare providers to make informed clinical decisions, develop appropriate treatment plans, and avoid adverse events. They also facilitate seamless communication and coordination among different providers, ensuring continuity of care as patients move through various healthcare settings.

Question 98: Under the Uniform Hospital Discharge Data Set (UHDDS), which of the following is a required data element?

Expected payer/source of payment (Correct answer)
Patient's religious affiliation
Patient's employment status
Patient's marital history

Correct answer: Expected payer/source of payment

Expected payer/source of payment is one of the core UHDDS data elements required for all inpatient discharges to support billing and health statistics.

Question 99: Under HIPAA, which of the following is a permissible disclosure of PHI without patient authorization?

Disclosing records to a coroner or medical examiner (Correct answer)
Providing records to a marketing company to target health products
Sending records to a family member who requests them verbally
Sharing records with the patient's employer upon employer request

Correct answer: Disclosing records to a coroner or medical examiner

HIPAA permits disclosures to coroners and medical examiners for purposes such as identifying a deceased person or determining cause of death.

Question 100: What is the difference between structured and unstructured data in medical records?

Structured data is stored in a database, while unstructured data is stored in physical files.
Unstructured data is less important in medical records.
Structured data is organized, and unstructured data is not organized or formatted for easy retrieval. (Correct answer)
There is no real difference.

Correct answer: Structured data is organized, and unstructured data is not organized or formatted for easy retrieval.

Structured data is organized into a predefined format, often in databases with specific fields, making it easily searchable and analyzable (e.g., lab results, medication lists). Unstructured data, conversely, lacks a predefined format and includes free-text notes, images, or audio recordings, which are not easily processed by traditional data management tools. Both are important, but their organization and ease of retrieval differ significantly.

Certified Medical Records Technician (CMRT)

The CMRT certification validates an individual's proficiency in managing patient health information, including coding, record keeping, and data security.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds