NHA Certified Electronic Health Records Specialist (CEHRS) — Questions and Answers
Question 1: Which type of study design is most appropriate for evaluating whether an EHR intervention reduced hospital-acquired infections?
- Before-and-after quasi-experimental study (Correct answer)
- Case series
- Cross-sectional survey
- Ecological correlation study
Correct answer: Before-and-after quasi-experimental study
A before-and-after (pre-post) design compares outcomes before and after implementation of an intervention in the same population.
Question 2: Which denial management strategy involves reprocessing a claim with additional documentation sent directly to the payer?
- Write-off submission
- Claim appeal (Correct answer)
- Adjustment request
- Charge reversal
Correct answer: Claim appeal
A claim appeal formally challenges a payer's adverse determination by submitting additional clinical or billing documentation to request reconsideration.
Question 3: How long must covered entities generally retain HIPAA-related documentation such as policies and procedures?
- 10 years from creation
- 6 years from creation or last effective date (Correct answer)
- 3 years from creation or last effective date
- Indefinitely
Correct answer: 6 years from creation or last effective date
HIPAA requires covered entities to retain documentation of policies, procedures, and actions for 6 years from the date of creation or last effective date.
Question 4: Under Stage 3 Meaningful Use, what is required for the Clinical Decision Support (CDS) objective?
- Use CDS alerts for at least 50% of patient encounters
- Implement at least one CDS intervention
- Enable CDS for all diagnoses in the EHR
- Implement five CDS interventions with drug interaction checking enabled (Correct answer)
Correct answer: Implement five CDS interventions with drug interaction checking enabled
Stage 3 requires implementing at least five CDS interventions related to four or more clinical quality measures, with drug-drug and drug-allergy interaction checks enabled.
Question 5: What is the advantage of using 'preference lists' in EHR medication ordering?
- They eliminate the need for pharmacist review
- They automatically select the cheapest formulary alternative
- They surface a provider's most frequently used medications first, speeding up order entry (Correct answer)
- They prevent providers from ordering any medication not on the list
Correct answer: They surface a provider's most frequently used medications first, speeding up order entry
Preference lists personalize the ordering interface by surfacing a provider's commonly used medications, reducing search time.
Question 6: What is the BEST way to measure the effectiveness of EHR training?
- Count the number of training hours delivered per employee
- Track how many staff received a passing score on a written exam
- Compare pre- and post-training performance metrics such as documentation completion rates and error rates (Correct answer)
- Survey staff on whether they enjoyed the training
Correct answer: Compare pre- and post-training performance metrics such as documentation completion rates and error rates
Comparing pre- and post-training performance metrics directly links training to clinical behavior change, which is the ultimate measure of training effectiveness.
Question 7: A hospital receives a C-CDA document from a referring physician. Which section would contain the patient's current medication list?
- Medications Section (Correct answer)
- Results Section
- Plan of Treatment Section
- Problems Section
Correct answer: Medications Section
The Medications Section in a C-CDA document is the designated location for listing a patient's current medications.
Question 8: Which governance process ensures that EHR software patches and updates are evaluated, tested, and scheduled appropriately?
- Data retention policy
- Workforce training curriculum review
- Change control process (Correct answer)
- Incident response planning
Correct answer: Change control process
The change control process provides a structured approach to evaluating, testing, approving, and scheduling all system changes including patches and updates.
Question 9: A CDS alert recommending an alternative antibiotic fires when a culture shows resistance. At what point in the workflow should this alert ideally trigger?
- At patient discharge
- At the time of initial order entry
- When the culture result is resulted and the antibiotic is still active (Correct answer)
- During billing code assignment
Correct answer: When the culture result is resulted and the antibiotic is still active
Antibiotic stewardship CDS is most effective when it fires upon receipt of susceptibility results while the patient is still receiving the original antibiotic.
Question 10: What does CPOE stand for in the context of EHR systems?
- Clinical Patient Outcome Evaluation
- Computerized Provider Order Entry (Correct answer)
- Certified Pharmacy Order Exchange
- Comprehensive Patient Order Entry
Correct answer: Computerized Provider Order Entry
CPOE stands for Computerized Provider Order Entry, a system that allows clinicians to enter medical orders electronically, reducing transcription errors.
Question 11: What is the Recovery Point Objective (RPO) in the context of EHR data backup?
- The maximum amount of data loss measured in time that is acceptable (Correct answer)
- The goal for how quickly systems must be restored after a disaster
- The percentage of data that must be recoverable after an incident
- The point in physical space where backup media is stored
Correct answer: The maximum amount of data loss measured in time that is acceptable
RPO defines the maximum acceptable age of data that can be recovered after a failure, essentially determining how frequently backups must be performed.
Question 12: A drug–drug interaction alert fires every time two common medications are ordered together, even when clinically appropriate. This is an example of what problem?
- Alert fatigue due to low specificity (Correct answer)
- Missing patient consent
- Insufficient EHR integration
- Formulary restriction error
Correct answer: Alert fatigue due to low specificity
Alert fatigue occurs when high-volume, low-specificity alerts cause clinicians to routinely override or ignore them.
Question 13: Which standard is MOST commonly used for electronic exchange of clinical documents between EHR systems in the US?
- ASCII
- DICOM
- HL7 C-CDA (Consolidated Clinical Document Architecture) (Correct answer)
- SMTP
Correct answer: HL7 C-CDA (Consolidated Clinical Document Architecture)
HL7 C-CDA is the US standard format for structured clinical documents exchanged during transitions of care and referrals.
Question 14: Which regulatory framework, in addition to HIPAA, commonly influences EHR disaster recovery requirements for healthcare organizations receiving federal funding?
- SOX (Sarbanes-Oxley Act)
- PCI-DSS (Payment Card Industry Data Security Standard)
- FISMA (Federal Information Security Modernization Act) (Correct answer)
- GDPR (General Data Protection Regulation)
Correct answer: FISMA (Federal Information Security Modernization Act)
FISMA applies to federal agencies and their contractors, including healthcare organizations receiving federal funding, and mandates comprehensive information security programs including contingency planning.
Question 15: What is the significance of a 'timely filing' limit in the revenue cycle?
- It is the deadline by which a patient must pay their balance
- It is the window during which a provider can request a fee schedule update
- It is the payer's deadline for receiving a claim after the date of service; missing it results in denial (Correct answer)
- It is the time limit for completing clinical documentation in the EHR
Correct answer: It is the payer's deadline for receiving a claim after the date of service; missing it results in denial
Each payer specifies a timely filing limit (e.g., 90 days, 1 year) after the date of service; claims submitted after this deadline are typically denied without appeal recourse.
Question 16: During EHR implementation, 'interface testing' verifies that:
- Printers are properly configured for each department
- Data flows accurately between the EHR and connected external systems (Correct answer)
- The user login screen displays correctly
- Patient portal features work on mobile devices
Correct answer: Data flows accurately between the EHR and connected external systems
Interface testing confirms that data transmitted between the EHR and ancillary systems (labs, pharmacy, radiology) is accurate and complete.
Question 17: A care coordinator reviews a panel report showing patients with HbA1c > 9%. This is an example of which population health activity?
- Formulary review
- Registry-based outreach (Correct answer)
- Utilization management
- Claims adjudication
Correct answer: Registry-based outreach
Pulling a registry of patients meeting a clinical threshold—like uncontrolled diabetes—supports targeted outreach and proactive management.
Question 18: A pharmacy CDS system automatically places a hard stop on ordering a medication with a known fatal interaction. What is this intervention type called?
- Hard stop (forcing function) (Correct answer)
- Audit-only alert
- Passive reference
- Soft alert with override option
Correct answer: Hard stop (forcing function)
A hard stop or forcing function prevents order completion entirely when a severe safety risk is detected, unlike soft alerts that allow override.
Question 19: How should EHR professionals handle confidential information related to patient portal & engagement tools?
- Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations (Correct answer)
- Store information without any security measures
- Share freely with all colleagues for transparency
- Delete all records after project completion
Correct answer: Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations
Confidential information must be handled according to established protocols, regulatory requirements, and professional ethics standards, including proper access control and disclosure procedures.
Question 20: What does 'patient matching' refer to in health information exchange (HIE)?
- The process of accurately identifying that records from different systems belong to the same individual (Correct answer)
- Matching patients to available appointment slots in a scheduling module
- Pairing patients with compatible organ donors
- Assigning patients to specific insurance networks
Correct answer: The process of accurately identifying that records from different systems belong to the same individual
Patient matching algorithms compare demographic data across systems to correctly link records belonging to the same person, preventing dangerous data fragmentation or mix-ups.
Question 21: Which factor is MOST critical to sustaining EHR adoption long-term after go-live?
- Limiting EHR access to clinical staff only
- Ongoing training, continuous optimization, and responsive support structures (Correct answer)
- Replacing the system every 3 years
- Freezing all system changes for 12 months post-launch
Correct answer: Ongoing training, continuous optimization, and responsive support structures
Long-term adoption depends on continuous training, system improvements, and support that addresses evolving user needs and workflow changes.
Question 22: Under MIPS, what is the 'exceptional performance' bonus designed to reward?
- Clinicians who have zero adverse events during the performance year
- Clinicians who participate in an Advanced APM
- Clinicians who submit data in all four performance categories
- Clinicians who score above a higher threshold set above the standard performance threshold (Correct answer)
Correct answer: Clinicians who score above a higher threshold set above the standard performance threshold
The exceptional performance bonus provides additional payment to clinicians who score above the exceptional performance threshold, which is set higher than the standard performance threshold.
Question 23: What is the role of a 'steering committee' in an EHR vendor selection process?
- Deliver end-user training
- Manage day-to-day project tasks and timelines
- Provide executive oversight, resolve escalated decisions, and ensure the selection aligns with organizational strategy (Correct answer)
- Negotiate contract terms directly with the vendor
Correct answer: Provide executive oversight, resolve escalated decisions, and ensure the selection aligns with organizational strategy
A steering committee provides high-level governance, removes organizational barriers, and ensures the EHR selection supports broader strategic goals such as value-based care objectives.
Question 24: What is the main purpose of regulatory compliance in EHR systems?
- To increase system complexity.
- To reduce the number of staff using the system.
- To ensure that the system follows legal and ethical guidelines (Correct answer)
- To limit patient access to their data.
Correct answer: To ensure that the system follows legal and ethical guidelines
The main purpose of regulatory compliance in EHR systems is to ensure that the system follows legal and ethical guidelines, such as HIPAA. This protects patient privacy and data security, ensures the system operates within legal boundaries, avoids penalties, and maintains public trust in healthcare technology.
Question 25: Which FHIR resource type is used to represent a patient's active problem list in an EHR?
- Condition (Correct answer)
- AllergyIntolerance
- MedicationStatement
- Observation
Correct answer: Condition
The FHIR Condition resource represents clinical conditions, problems, and diagnoses that appear on a patient's problem list.
Question 26: Which type of malware encrypts an organization's files and demands payment for the decryption key?
- Adware
- Trojan horse
- Ransomware (Correct answer)
- Spyware
Correct answer: Ransomware
Ransomware encrypts the victim's data and demands a ransom payment in exchange for the decryption key.
Question 27: Which modifier is commonly appended to a CPT code to indicate that a procedure was performed on the left side of the body?
- Modifier 51
- Modifier 59
- Modifier 25
- Modifier LT (Correct answer)
Correct answer: Modifier LT
HCPCS Modifier LT (Left Side) is used to identify procedures performed on the left side of the body to distinguish laterality.
Question 28: Which contract term should be negotiated to protect against unexpected price increases for software upgrades?
- Price cap or fixed-rate escalation clause limiting annual increases to a specified percentage (Correct answer)
- Perpetual license with no ongoing fees
- Vendor right-to-audit clause
- Unlimited upgrade rights at no additional charge
Correct answer: Price cap or fixed-rate escalation clause limiting annual increases to a specified percentage
A price cap or capped escalation clause prevents vendors from imposing large, unpredictable cost increases for upgrades, supporting long-term budget predictability.
Question 29: A patient has both Medicare and an employer-sponsored plan. Which payer typically pays first?
- Medicaid pays first, then Medicare
- The payer with the higher reimbursement rate pays first
- Medicare always pays first regardless of other coverage
- The employer-sponsored plan pays first if the employer has 20 or more employees (Correct answer)
Correct answer: The employer-sponsored plan pays first if the employer has 20 or more employees
Medicare Secondary Payer (MSP) rules require employer group health plans with 20+ employees to pay primary when an active employee or their spouse is covered.
Question 30: What is the most effective way to measure success in interoperability & health information exchange within EHR professional practice?
- Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives (Correct answer)
- Compare only with industry averages without considering context
- Rely solely on supervisor opinion
- Count only the number of activities completed
Correct answer: Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives
Effective measurement combines multiple data sources — quantitative metrics, qualitative assessments, and stakeholder feedback — all aligned with clearly defined objectives for a comprehensive evaluation.
Question 31: Which measure in the Promoting Interoperability (PI) program specifically evaluates whether providers send electronic referral summaries or care summaries to other providers?
- Support Electronic Referral Loops by Sending Health Information measure (Correct answer)
- Provide Patients Electronic Access to Their Health Information measure
- Immunization Registry Reporting measure
- Health Information Exchange measure
Correct answer: Support Electronic Referral Loops by Sending Health Information measure
This PI measure tracks the percentage of transitions where an electronic summary of care record is sent to the receiving provider.
Question 32: A hospital is selecting between a cloud-hosted SaaS EHR and an on-premises EHR. Which consideration MOST favors the SaaS model?
- Ability to customize source code directly
- Greater control over data storage location and hardware configuration
- Reduced capital expenditure and IT infrastructure burden, with the vendor managing upgrades, backups, and system maintenance (Correct answer)
- Elimination of all ongoing subscription fees after purchase
Correct answer: Reduced capital expenditure and IT infrastructure burden, with the vendor managing upgrades, backups, and system maintenance
SaaS EHRs shift infrastructure management to the vendor, reducing upfront capital costs and IT staffing requirements while providing automatic updates and vendor-managed backups.
Question 33: How does data security play a role in EHR system implementation?
- It ensures data is easily accessible to all users.
- It makes the system slower.
- It ensures that sensitive data is encrypted and protected (Correct answer)
- It limits the number of users accessing the system.
Correct answer: It ensures that sensitive data is encrypted and protected
Data security is a foundational element of EHR system implementation, given the highly sensitive nature of patient health information. It involves implementing robust measures like encryption, access controls, and regular audits to protect patient data from unauthorized access, breaches, and cyber threats. This ensures patient privacy, maintains trust, and guarantees compliance with stringent regulations like HIPAA.
Question 34: Which training approach is MOST effective for reducing EHR-related errors among newly onboarded clinical staff?
- Reading the vendor user manual independently
- Watching pre-recorded product demos without practice
- Role-based, hands-on training using a sandbox environment (Correct answer)
- Shadowing a peer for one shift only
Correct answer: Role-based, hands-on training using a sandbox environment
Role-based sandbox training allows clinicians to practice realistic workflows without risk to live patient data, which significantly reduces errors post-go-live.
Question 35: What is the most effective way to measure success in meaningful use & mips requirements within EHR professional practice?
- Rely solely on supervisor opinion
- Compare only with industry averages without considering context
- Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives (Correct answer)
- Count only the number of activities completed
Correct answer: Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives
Effective measurement combines multiple data sources — quantitative metrics, qualitative assessments, and stakeholder feedback — all aligned with clearly defined objectives for a comprehensive evaluation.
Question 36: How can an EHR system comply with HIPAA regulations?
- By allowing unrestricted access to all users.
- By disabling login credentials.
- By storing data without any security measures.
- By ensuring secure data transmission and storage (Correct answer)
Correct answer: By ensuring secure data transmission and storage
An EHR system complies with HIPAA regulations by ensuring secure data transmission and storage. This involves implementing technical safeguards such as encryption for data both in transit and at rest, secure networks, and robust access controls to protect electronic protected health information (ePHI) from breaches and maintain patient privacy.
Question 37: Under MIPS, which performance category carries the highest default weight for most eligible clinicians?
- Improvement Activities
- Promoting Interoperability
- Quality (Correct answer)
- Cost
Correct answer: Quality
The Quality category typically carries the highest default weight (30%) in the MIPS composite performance score.
Question 38: How can a healthcare provider ensure patient data privacy when using an EHR system?
- By allowing unlimited access to patient data.
- By using encryption and controlling data access (Correct answer)
- By disabling user authentication.
- By not updating security protocols.
Correct answer: By using encryption and controlling data access
Healthcare providers ensure patient data privacy when using an EHR system by employing encryption and controlling data access. Encryption protects data from unauthorized viewing, while controlled access through role-based permissions ensures that only authorized personnel can view or modify patient information, upholding confidentiality and compliance.
Question 39: A hospital is transitioning from paper charts to an EHR. Which strategy BEST ensures continuity of care during the transition?
- Running a parallel period where both paper and EHR records are maintained temporarily (Correct answer)
- Immediately shredding all paper records on go-live day
- Allowing each department to choose whether to use the EHR
- Delaying all non-urgent appointments until the EHR is fully operational
Correct answer: Running a parallel period where both paper and EHR records are maintained temporarily
A parallel period ensures no clinical information is lost during transition and allows staff to validate EHR accuracy against existing records.
Question 40: Which EHR capability analyzes patient diagnoses and lab values to suggest appropriate medication therapy to clinicians?
- Formulary exception processing workflow
- Prior authorization management module
- Clinical decision support (CDS) for prescribing (Correct answer)
- Patient medication education portal
Correct answer: Clinical decision support (CDS) for prescribing
Clinical decision support for prescribing evaluates patient-specific data—diagnoses, labs, allergies, and current medications—to generate context-sensitive alerts, reminders, and medication recommendations.
Question 41: When a EHR professional encounters an unfamiliar challenge in revenue cycle & billing integration, what is the recommended first course of action?
- Research applicable standards, consult with subject matter experts, and document the approach (Correct answer)
- Proceed based on personal intuition alone
- Apply the solution used for the most recent similar problem without adaptation
- Postpone addressing the issue indefinitely
Correct answer: Research applicable standards, consult with subject matter experts, and document the approach
Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.
Question 42: What does the term 'data normalization' mean in the context of EHR analytics?
- Encrypting data at rest
- Converting data from CSV to HL7 format
- Structuring data to reduce redundancy and improve integrity (Correct answer)
- Removing all PHI before analysis
Correct answer: Structuring data to reduce redundancy and improve integrity
Normalization organizes database tables to minimize duplication and ensure data dependencies make logical sense, improving query accuracy.
Question 43: What is the purpose of an 'encounter summary' generated at the end of a patient visit?
- To document the provider's time for payroll calculation
- To provide the patient with a written record of the visit, including diagnoses, instructions, and follow-up plans (Correct answer)
- To notify public health authorities of reportable diseases
- To send a claim to the insurance company for reimbursement
Correct answer: To provide the patient with a written record of the visit, including diagnoses, instructions, and follow-up plans
An encounter summary (also called an after-visit summary) improves patient engagement and continuity of care by giving patients clear documentation of what occurred and what to do next.
Question 44: A hospital wants to reduce unnecessary lab ordering. Which CDS approach is most directly applicable?
- Discharge summary template
- Problem list reminder
- Medication reconciliation alert
- Order entry guidance with evidence-based indications (Correct answer)
Correct answer: Order entry guidance with evidence-based indications
Order entry guidance that presents evidence-based indications prompts clinicians to evaluate whether a test is truly necessary before ordering.
Question 45: A patient requests that their records not be shared with other providers through the HIE. What is this practice called?
- Minimum necessary disclosure
- Opt-out from HIE participation (Correct answer)
- Data segmentation for privacy
- Treatment restriction
Correct answer: Opt-out from HIE participation
Patients may opt out of HIE data sharing, instructing the network not to release their records to querying providers.
Question 46: In a portal-based chronic disease management program, which feature most directly supports ongoing patient self-monitoring?
- Remote patient monitoring data integration (e.g., glucose logs) (Correct answer)
- Secure messaging with the care team
- Access to visit summaries
- Online appointment scheduling
Correct answer: Remote patient monitoring data integration (e.g., glucose logs)
Integration of remote patient monitoring data such as glucose logs, blood pressure readings, or weight into the portal enables continuous self-monitoring and care team oversight for chronic conditions.
Question 47: What is the primary patient safety benefit of drug-drug interaction (DDI) alerts in EHR medication management?
- Reducing prescription costs
- Eliminating the need for pharmacist review
- Streamlining pharmacy billing
- Preventing adverse drug events (Correct answer)
Correct answer: Preventing adverse drug events
DDI alerts are primarily designed to prevent adverse drug events by warning clinicians of potentially harmful medication combinations before orders are finalized.
Question 48: An organization's EHR adoption rate plateaus at 60% six months post-go-live. Which intervention is MOST appropriate?
- Conduct targeted interviews with non-adopters to identify specific barriers and design role-specific remediation (Correct answer)
- Purchase a new EHR system
- Mandate all staff retake initial training
- Escalate all non-adopters to HR for disciplinary review
Correct answer: Conduct targeted interviews with non-adopters to identify specific barriers and design role-specific remediation
Identifying specific barriers through interviews enables targeted remediation that addresses the root cause of non-adoption rather than applying generic solutions.
Question 49: Which HL7 standard framework provides a model for categorizing CDS interventions by their level of automation and integration?
- HL7 v2 ORU messaging
- Osheroff's CDS Framework / HIMSS CDS Taxonomy (Correct answer)
- SNOMED CT concept hierarchy
- ICD-10-CM coding guidelines
Correct answer: Osheroff's CDS Framework / HIMSS CDS Taxonomy
The HIMSS/Osheroff CDS Framework categorizes CDS interventions by type, workflow integration point, and degree of system automation.
Question 50: What does the term 'minimum necessary' standard require of covered entities?
- PHI used or disclosed should be limited to what is needed for the intended purpose (Correct answer)
- Only the minimum number of diagnoses may be stored in an EHR
- Patients must give minimum consent before PHI is shared
- Only the minimum number of staff may view any PHI
Correct answer: PHI used or disclosed should be limited to what is needed for the intended purpose
The minimum necessary standard requires covered entities to limit PHI access and disclosure to only what is needed to accomplish the intended purpose.
Question 51: What is a 'knowledge artifact' in the context of CDS?
- A physician's handwritten order
- A scanned paper protocol stored in the EHR
- An interface engine message
- A structured, computable representation of clinical knowledge used to drive CDS rules (Correct answer)
Correct answer: A structured, computable representation of clinical knowledge used to drive CDS rules
A knowledge artifact is a structured, computable representation of clinical knowledge (e.g., CQL or FHIR-based rules) that EHR systems use to execute CDS logic.
Question 52: In the context of EHR certification, what is the most important consideration when implementing revenue cycle & billing integration?
- Ensuring alignment with established standards, stakeholder needs, and best practices (Correct answer)
- Completing implementation as quickly as possible regardless of quality
- Minimizing documentation to save time
- Delegating all responsibilities to junior staff
Correct answer: Ensuring alignment with established standards, stakeholder needs, and best practices
When implementing revenue cycle & billing integration, EHR professionals must ensure alignment with industry standards and stakeholder needs. Hasty implementation without proper planning often leads to compliance issues and suboptimal outcomes.
Question 53: Which of the following best describes a 'clinical quality measure' (CQM) in the context of Meaningful Use?
- A metric for evaluating staff productivity
- A benchmark for the number of electronic prescriptions sent
- A measure of EHR system uptime and reliability
- A standardized tool for measuring patient health outcomes, patient experience, and care processes (Correct answer)
Correct answer: A standardized tool for measuring patient health outcomes, patient experience, and care processes
CQMs are standardized tools used to measure and track the quality of healthcare provided, including outcomes, processes, patient experience, and safety.
Question 54: In EHR change management, 'change fatigue' among clinical staff is BEST addressed by:
- Delegating all change decisions to IT without clinical input
- Prioritizing changes, communicating rationale clearly, and pacing upgrades to allow staff recovery time (Correct answer)
- Freezing all EHR updates for one year
- Accelerating the implementation timeline to minimize disruption period
Correct answer: Prioritizing changes, communicating rationale clearly, and pacing upgrades to allow staff recovery time
Managing change fatigue requires strategic prioritization, clear communication, and pacing updates so staff can absorb changes without becoming overwhelmed.
Question 55: What is a 'write-off' in the revenue cycle?
- The total charges submitted to an insurance company
- An adjustment that removes a balance from accounts receivable that will not be collected (Correct answer)
- A fee charged by the clearinghouse per claim submission
- The amount collected from the patient at time of service
Correct answer: An adjustment that removes a balance from accounts receivable that will not be collected
Write-offs reduce the AR balance by removing amounts contractually adjusted (contractual write-offs) or deemed uncollectable (bad debt write-offs).
Question 56: In EHR implementation, 'downtime procedures training' is important because:
- It allows staff to bypass security controls during emergencies
- Staff must know how to maintain safe patient care and documentation when the EHR is unavailable (Correct answer)
- It replaces the need for disaster recovery planning
- It satisfies vendor contractual obligations
Correct answer: Staff must know how to maintain safe patient care and documentation when the EHR is unavailable
Downtime procedures training ensures clinical staff can safely manage patient care and capture critical data on paper during planned or unplanned EHR outages.
Question 57: Which standard is commonly used to represent CDS logic in a computable, interoperable format?
- Clinical Quality Language (CQL) (Correct answer)
- DICOM
- X12 837
- HL7 v2 ADT
Correct answer: Clinical Quality Language (CQL)
Clinical Quality Language (CQL) is the HL7 standard used to express clinical logic for CDS rules and quality measures in a computable format.
Question 58: A sensitivity analysis in a population health study is performed to:
- Identify sensitive PHI fields in the dataset
- Measure test sensitivity of a diagnostic code
- Assess HIPAA compliance of the data pipeline
- Test how results change when key assumptions are varied (Correct answer)
Correct answer: Test how results change when key assumptions are varied
Sensitivity analysis evaluates the robustness of study conclusions by varying key assumptions or inputs to see how much outcomes change.
Question 59: What does 'system downtime procedure' refer to in EHR management?
- Scheduled vendor maintenance windows
- The steps to permanently decommission a module
- Pre-planned workflows using paper or backup systems when EHR is unavailable (Correct answer)
- The process for terminating employee EHR access
Correct answer: Pre-planned workflows using paper or backup systems when EHR is unavailable
Downtime procedures are pre-defined workflows allowing clinical operations to continue using paper or backup systems when the EHR is unavailable.
Question 60: Under the Medicare Physician Fee Schedule, what does the 'conversion factor' determine?
- The geographic adjustment applied to a provider's location
- The number of claims a provider can submit per month
- The dollar value assigned to one Relative Value Unit (RVU) to calculate payment amounts (Correct answer)
- The percentage of charges Medicare will reimburse
Correct answer: The dollar value assigned to one Relative Value Unit (RVU) to calculate payment amounts
The conversion factor is a national dollar amount multiplied by total RVUs (work + practice expense + malpractice) to calculate Medicare's payment for a specific service.
Question 61: When a EHR professional encounters an unfamiliar challenge in interoperability & health information exchange, what is the recommended first course of action?
- Apply the solution used for the most recent similar problem without adaptation
- Postpone addressing the issue indefinitely
- Proceed based on personal intuition alone
- Research applicable standards, consult with subject matter experts, and document the approach (Correct answer)
Correct answer: Research applicable standards, consult with subject matter experts, and document the approach
Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.
Question 62: Which EHR feature uses pre-populated, standardized medication orders to reduce prescribing variability and errors?
- Prior authorization queues
- Drug utilization review reports
- Medication reconciliation workflow
- Order sets with evidence-based protocols (Correct answer)
Correct answer: Order sets with evidence-based protocols
Order sets provide pre-populated, evidence-based medication orders with standard doses and instructions, reducing variability and supporting clinical best practices at the point of ordering.
Question 63: Under the HIPAA Security Rule, which category of safeguards includes workstation use policies and device and media controls?
- Administrative safeguards
- Technical safeguards
- Physical safeguards (Correct answer)
- Organizational safeguards
Correct answer: Physical safeguards
Physical safeguards under the HIPAA Security Rule include facility access controls, workstation use policies, and device and media controls.
Question 64: Which federal program uses quality measure reporting from EHR data to financially reward or penalize eligible clinicians?
- MIPS (Merit-based Incentive Payment System) (Correct answer)
- Meaningful Use Stage 1
- CMS Conditions of Participation
- HIPAA Security Rule
Correct answer: MIPS (Merit-based Incentive Payment System)
MIPS under MACRA ties Medicare payment adjustments to performance on quality, cost, and improvement activity measures reported via EHR data.
Question 65: A facility plans to implement the EHR in one department first before expanding hospital-wide. This is an example of:
- Forced migration
- Big bang implementation
- Pilot or phased implementation (Correct answer)
- Parallel conversion
Correct answer: Pilot or phased implementation
A pilot or phased approach deploys the system in a limited area first, allowing issues to be resolved before full-scale rollout.
Question 66: A practice wants referring providers to automatically receive a summary when a patient's care plan is updated. Which EHR feature supports this?
- Periodic batch report emails
- Automated care coordination messaging or Direct messaging triggered by care plan updates (Correct answer)
- Patient portal messaging only
- Manual fax workflow
Correct answer: Automated care coordination messaging or Direct messaging triggered by care plan updates
Automated Direct messaging or care coordination notifications can trigger outbound summaries to referring providers when specified events occur.
Question 67: What is the purpose of 'data governance' in a healthcare organization's EHR environment?
- To manage social media data collected from patients
- To regulate how much data storage the EHR vendor can sell to the organization
- To govern which patients are allowed to view their own records
- To establish policies, roles, and standards that ensure EHR data is accurate, secure, and used appropriately (Correct answer)
Correct answer: To establish policies, roles, and standards that ensure EHR data is accurate, secure, and used appropriately
Data governance frameworks define accountability, quality standards, and access policies to maintain trustworthy, compliant EHR data across the organization.
Question 68: A hospital's EHR implementation team discovers that physician workflow requires a custom order set not available in the standard build. The BEST next step is to:
- Go live without the order set and add it later
- Submit a formal change request to evaluate feasibility and impact (Correct answer)
- Ask the vendor to immediately override the build
- Cancel the go-live until the vendor adds the feature
Correct answer: Submit a formal change request to evaluate feasibility and impact
A formal change request process ensures that customizations are evaluated for scope, cost, and timeline impact before being approved.
Question 69: What is the most effective way to measure success in clinical decision support systems within EHR professional practice?
- Rely solely on supervisor opinion
- Compare only with industry averages without considering context
- Count only the number of activities completed
- Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives (Correct answer)
Correct answer: Use a combination of quantitative metrics, qualitative assessments, and stakeholder feedback aligned with defined objectives
Effective measurement combines multiple data sources — quantitative metrics, qualitative assessments, and stakeholder feedback — all aligned with clearly defined objectives for a comprehensive evaluation.
Question 70: A care manager needs to identify all patients with diabetes who have not had an HbA1c in the past 12 months. Which EHR tool is most appropriate?
- Lab results fax queue
- Patient registry or population health management module with configurable filters (Correct answer)
- Billing system query only
- Manual chart review
Correct answer: Patient registry or population health management module with configurable filters
A patient registry with configurable clinical filters enables proactive identification of care gaps across a defined population.
Question 71: During EHR vendor evaluation, what is the purpose of a scripted demonstration?
- Allow vendors to showcase only their most impressive features
- Require all vendors to demonstrate the same predefined clinical scenarios so responses can be compared fairly (Correct answer)
- Test the vendor's sales team's presentation skills
- Determine whether the vendor's software can be customized
Correct answer: Require all vendors to demonstrate the same predefined clinical scenarios so responses can be compared fairly
Scripted demonstrations create a level playing field by requiring all vendors to address the same workflow scenarios, enabling objective side-by-side comparison.
Question 72: In an EHR contract, a 'data portability' clause is important because it:
- Limits the organization's liability for data breaches
- Permits the organization to resell access to its EHR data
- Allows the vendor to use de-identified patient data for product development
- Ensures the organization can extract its patient data in a usable format if it switches vendors or the contract ends (Correct answer)
Correct answer: Ensures the organization can extract its patient data in a usable format if it switches vendors or the contract ends
Data portability clauses prevent vendor lock-in by guaranteeing the organization's right to receive its own data in a standard, machine-readable format upon contract termination.
Question 73: Which code set is used to report diagnoses on inpatient hospital claims in the United States?
- CPT-4
- CDT
- HCPCS Level II
- ICD-10-CM (Correct answer)
Correct answer: ICD-10-CM
ICD-10-CM (International Classification of Diseases, 10th Revision, Clinical Modification) is the standard for diagnosis coding on all US claims.
Question 74: What is the main goal of EHR system optimization?
- Increasing system storage capacity.
- Ensuring the system is user-friendly and efficient (Correct answer)
- Reducing patient wait times.
- Lowering system maintenance costs.
Correct answer: Ensuring the system is user-friendly and efficient
EHR system optimization aims to continuously improve the system's performance and usability after its initial implementation. The main goal is to refine workflows, customize features, and address user feedback to make the system more intuitive, efficient, and supportive of clinical and administrative tasks. This ongoing process ultimately enhances user satisfaction, reduces errors, and improves the quality of patient care.
Question 75: Which process ensures that a patient's known drug allergies are consistently documented and available across all care settings within an EHR?
- Formulary exception review
- Pharmacokinetic monitoring
- Drug utilization review
- Allergy reconciliation (Correct answer)
Correct answer: Allergy reconciliation
Allergy reconciliation is the process of reviewing and aligning a patient's allergy documentation across encounters and care settings to maintain a single, accurate, and complete allergy record in the EHR.
Question 76: Which outcome measure would best demonstrate that a glycemic management CDS intervention is improving patient safety?
- Decrease in EHR login time
- Increase in the number of alerts fired
- Reduction in hypoglycemic episodes among inpatients (Correct answer)
- Higher override rate for insulin orders
Correct answer: Reduction in hypoglycemic episodes among inpatients
A reduction in hypoglycemic episodes directly demonstrates that the CDS intervention is producing safer blood glucose management outcomes.
Question 77: What is the MAIN purpose of a training needs analysis before EHR implementation?
- Select the EHR vendor's preferred training platform
- Establish penalties for staff who fail training assessments
- Determine the total cost of training delivery
- Identify skill gaps and tailor training content to each user role (Correct answer)
Correct answer: Identify skill gaps and tailor training content to each user role
A training needs analysis ensures that training addresses actual skill gaps specific to each role, making the program more effective and efficient.
Question 78: Which federal law established the MIPS and APM pathways under the Quality Payment Program?
- Affordable Care Act
- HIPAA
- MACRA (Correct answer)
- HITECH Act
Correct answer: MACRA
MACRA (Medicare Access and CHIP Reauthorization Act of 2015) created the Quality Payment Program, which includes MIPS and Advanced APMs.
Question 79: Which of the following best describes a key competency required for revenue cycle & billing integration in EHR practice?
- Reliance on a single methodology for all situations
- Strong analytical skills combined with effective communication and ethical judgment (Correct answer)
- Memorization of all relevant regulations without understanding context
- The ability to work independently without any oversight
Correct answer: Strong analytical skills combined with effective communication and ethical judgment
EHR professionals working in revenue cycle & billing integration need analytical skills to assess situations, communication skills to convey findings, and ethical judgment to make sound decisions.
Question 80: A hospital wants to compare its 30-day mortality rates fairly against national benchmarks. Which analytical approach is required?
- Raw rate comparison
- Cohort elimination
- Seasonal smoothing
- Risk adjustment (Correct answer)
Correct answer: Risk adjustment
Risk adjustment accounts for differences in patient severity and case mix so that comparisons across hospitals are clinically fair.
Question 81: What is the primary purpose of 'user acceptance testing' (UAT) in an EHR implementation?
- To have end users validate that the configured system meets clinical workflow requirements before go-live (Correct answer)
- To test server hardware capacity under peak load
- To verify that vendor invoices are accurate
- To confirm that the EHR meets federal billing regulations
Correct answer: To have end users validate that the configured system meets clinical workflow requirements before go-live
UAT involves end users testing the system against real-world workflows to confirm it meets requirements before the system goes live.
Question 82: In EHR project management, a 'steering committee' differs from a 'project team' in that the steering committee:
- Provides executive-level oversight and makes high-level strategic decisions (Correct answer)
- Performs daily implementation tasks
- Manages the technical build of the system
- Conducts user acceptance testing
Correct answer: Provides executive-level oversight and makes high-level strategic decisions
The steering committee provides executive sponsorship and strategic direction, while the project team handles day-to-day implementation activities.
Question 83: What is the purpose of the 'revenue code' on a UB-04 claim form?
- To identify the billing provider's tax ID number
- To specify which physician performed the procedure
- To indicate the patient's primary diagnosis
- To classify the type of service or accommodation provided in a facility setting (Correct answer)
Correct answer: To classify the type of service or accommodation provided in a facility setting
Revenue codes are 3-digit codes used on institutional claims to classify categories of service (e.g., room and board, pharmacy, radiology) for facility billing.
Question 84: In the context of revenue cycle management, what does 'prior authorization' (PA) primarily protect against?
- Claim rejections due to missing patient demographics
- Incorrect application of the Medicare fee schedule
- Denial of payment for services deemed not medically necessary by the payer before they are rendered (Correct answer)
- Duplicate billing for the same service
Correct answer: Denial of payment for services deemed not medically necessary by the payer before they are rendered
Prior authorization is a payer requirement to approve certain services in advance; providing a service without required PA often results in claim denial for lack of medical necessity.
Question 85: Under the CMS Interoperability and Patient Access Final Rule, Medicare Advantage plans must provide patient data through APIs using which standard?
- FHIR R4 APIs (Correct answer)
- HL7 v2 messaging
- DICOM imaging standards
- CCDA document exchange
Correct answer: FHIR R4 APIs
The CMS Interoperability and Patient Access Final Rule requires payers to implement FHIR R4-based APIs to give patients access to their claims and clinical data.
Question 86: Under the HITECH Act, which entity type became directly liable for HIPAA compliance for the first time?
- State health departments
- Business associates (Correct answer)
- Covered entities
- Health information exchanges
Correct answer: Business associates
HITECH (2009) extended direct HIPAA liability to business associates, who were previously only bound through contracts with covered entities.
Question 87: Which of the following is key to ensuring proper data entry in an EHR system?
- Staff training on data entry and consistency (Correct answer)
- Limitations on data input types.
- Periodic system updates.
- Automated data entry systems.
Correct answer: Staff training on data entry and consistency
Accurate and consistent data entry is paramount in an EHR system to ensure data integrity, patient safety, and effective clinical decision-making. Comprehensive and ongoing staff training on proper data entry protocols, standardized terminology, and system functionalities is essential. This training minimizes errors, ensures consistency across records, and maintains high-quality, reliable patient information for all healthcare providers.
Question 88: Which of the following best describes a key competency required for data analytics & population health in EHR practice?
- Reliance on a single methodology for all situations
- Memorization of all relevant regulations without understanding context
- Strong analytical skills combined with effective communication and ethical judgment (Correct answer)
- The ability to work independently without any oversight
Correct answer: Strong analytical skills combined with effective communication and ethical judgment
EHR professionals working in data analytics & population health need analytical skills to assess situations, communication skills to convey findings, and ethical judgment to make sound decisions.
Question 89: What is the MAIN risk of selecting an EHR vendor based solely on lowest cost?
- The vendor may not agree to sign an SLA
- Staff will refuse to use a low-cost system
- The system will not qualify for Meaningful Use incentives
- Hidden costs in implementation, training, and ongoing support may result in a higher total cost of ownership than premium alternatives (Correct answer)
Correct answer: Hidden costs in implementation, training, and ongoing support may result in a higher total cost of ownership than premium alternatives
Low upfront pricing often conceals significant downstream costs in customization, training, support, and integration that can make the 'cheapest' option the most expensive over time.
Question 90: Which standard is most commonly used to define EHR system interoperability requirements in the United States?
- HL7 FHIR (Correct answer)
- DICOM only
- IEEE 802.11
- ISO 9001
Correct answer: HL7 FHIR
HL7 FHIR (Fast Healthcare Interoperability Resources) is the predominant US standard for EHR data exchange and interoperability.
Question 91: Which analytic technique segments a patient population into groups based on shared clinical and demographic characteristics without a predefined outcome label?
- Unsupervised clustering (Correct answer)
- Supervised classification
- Survival analysis
- Logistic regression
Correct answer: Unsupervised clustering
Unsupervised clustering algorithms (e.g., k-means) group patients by similarity without needing labeled outcomes, useful for discovering natural patient subpopulations.
Question 92: A practice implements a new EHR-based referral workflow. Which metric best indicates whether the workflow is working as designed?
- Number of EHR licenses purchased
- Percentage of staff who completed training
- Total number of templates created
- Referral completion rate and average time from referral order to specialist appointment (Correct answer)
Correct answer: Referral completion rate and average time from referral order to specialist appointment
Referral completion rate and cycle time directly measure whether the workflow is achieving its clinical and operational goals.
Question 93: When a hospital's EHR is subpoenaed for records, the hospital should release PHI:
- After notifying HHS within 24 hours
- Only after obtaining a qualified protective order or patient authorization (Correct answer)
- Immediately upon receiving the subpoena
- Only if the judge personally signs the order
Correct answer: Only after obtaining a qualified protective order or patient authorization
HIPAA requires a satisfactory assurance (typically a qualified protective order or patient authorization) before releasing PHI in response to a subpoena not accompanied by a court order.
Question 94: In EHR auditing, what does reviewing the 'audit log' allow an organization to determine?
- How many patients were seen in a given department last month
- Which laboratory values are outside normal range for a given patient
- Which providers have incomplete continuing education credits
- Who accessed a patient's record, when, and what actions were performed (Correct answer)
Correct answer: Who accessed a patient's record, when, and what actions were performed
Audit logs record every access and action on patient records, enabling organizations to detect unauthorized access, investigate breaches, and demonstrate HIPAA compliance.
Question 95: During which clinical scenario is medication reconciliation most critical in an EHR?
- Refill requests from established patients
- Pre-procedure lab order entry
- Routine annual wellness visits
- Care transitions such as hospital admission or discharge (Correct answer)
Correct answer: Care transitions such as hospital admission or discharge
Medication reconciliation is most critical during care transitions because discrepancies between medication lists across settings are most likely to cause harm at those points.
Question 96: Under Meaningful Use/Promoting Interoperability, what threshold of patients must view, download, or transmit their health information to satisfy the patient engagement measure?
- 5% (Correct answer)
- 50%
- 10%
- 25%
Correct answer: 5%
The Promoting Interoperability patient engagement measure requires that at least 5% of patients view, download, or transmit their health information through a portal.
Question 97: Which of the following BEST defines 'scope creep' in an EHR implementation project?
- Uncontrolled expansion of project requirements beyond the original plan (Correct answer)
- A security breach that expands the attack surface
- Additional vendor modules added through formal change orders
- Data migration errors that increase data volume
Correct answer: Uncontrolled expansion of project requirements beyond the original plan
Scope creep refers to unplanned, unapproved additions to project scope that can delay timelines and increase costs.
Question 98: Which of the following is a physical safeguard required by the HIPAA Security Rule?
- Workstation use policies specifying appropriate computer functions
- Password complexity policies
- Automatic logoff settings
- Facility access controls limiting physical access to ePHI systems (Correct answer)
Correct answer: Facility access controls limiting physical access to ePHI systems
Facility access controls — such as locks, badges, and surveillance — are physical safeguards required to limit physical access to systems containing ePHI.
Question 99: During EHR go-live, 'at-the-elbow' support refers to:
- Trained staff physically present on the floor to assist users in real time (Correct answer)
- Remote help desk support via phone
- Vendor engineers monitoring system performance
- Automated pop-up tips within the EHR interface
Correct answer: Trained staff physically present on the floor to assist users in real time
At-the-elbow support involves trained super-users or implementation staff stationed on care units to provide immediate, in-person assistance during go-live.
Question 100: Which stakeholder group should be engaged FIRST when designing an EHR training curriculum?
- Clinical end-users and department champions who understand daily workflow realities (Correct answer)
- Senior leadership and board members
- The EHR vendor's training department
- The finance department
Correct answer: Clinical end-users and department champions who understand daily workflow realities
Clinical end-users and champions provide essential insight into real workflows, making training content relevant and immediately applicable at the point of care.
Question 101: What role does user feedback play in EHR system management?
- It is only useful for post-implementation reviews.
- It reduces user engagement.
- It helps guide system upgrades and improvements (Correct answer)
- It limits system customization.
Correct answer: It helps guide system upgrades and improvements
User feedback is an invaluable resource for effective EHR system management. It provides direct insights into the system's strengths, weaknesses, and areas for improvement from the perspective of those who use it daily. This critical feedback helps guide future system upgrades, identify necessary enhancements, and ensures the EHR continues to meet evolving user needs and clinical requirements, promoting continuous improvement.
Question 102: Which change management model is most commonly referenced in EHR implementation literature to guide staff through the transition?
- ITIL Service Lifecycle
- ISO 9001 Quality Framework
- Lean Six Sigma DMAIC
- Kotter's 8-Step Change Model (Correct answer)
Correct answer: Kotter's 8-Step Change Model
Kotter's 8-Step Change Model is widely cited in health IT literature for managing the human side of EHR transitions by building urgency and sustaining change.
Question 103: What does the term 'semantic interoperability' mean in the context of health information exchange?
- Data is encrypted during transmission
- Systems use the same network protocols
- Systems can exchange data and accurately interpret its meaning (Correct answer)
- Systems share the same user interface
Correct answer: Systems can exchange data and accurately interpret its meaning
Semantic interoperability ensures that exchanged data is interpreted consistently and accurately across different systems.
Question 104: Which concept describes combining data from multiple EHR systems into a single unified patient record for longitudinal analysis?
- Data federation
- Data tokenization
- Master Patient Index (MPI)
- Patient matching and record linkage (Correct answer)
Correct answer: Patient matching and record linkage
Record linkage algorithms match and merge patient records across disparate systems using identifiers and probabilistic matching to create a unified longitudinal view.
Question 105: A nurse shares a patient's HIV status with the patient's employer without authorization. Under HIPAA, this is:
- Allowed if the employer provides health insurance
- Permitted because the nurse is a covered entity workforce member
- An impermissible disclosure of PHI (Correct answer)
- Permitted under the public interest exception
Correct answer: An impermissible disclosure of PHI
Disclosing a patient's PHI to their employer without authorization is an impermissible disclosure under HIPAA.
Question 106: A hospital system wants to improve portal adoption among patients with low health literacy. Which strategy is MOST evidence-based?
- Limiting portal content to lab results to reduce complexity
- Charging a fee for paper statements to incentivize portal use
- Requiring all patients to register during admission
- Using plain language, visual aids, and portal navigation assistance during clinical visits (Correct answer)
Correct answer: Using plain language, visual aids, and portal navigation assistance during clinical visits
Evidence supports that in-person portal demonstrations using plain language and visual aids during clinical encounters significantly increase adoption among patients with low health literacy.
Question 107: What metric BEST measures EHR user adoption after go-live?
- Number of IT helpdesk tickets submitted
- Vendor satisfaction survey scores
- System login frequency and task completion rates per role (Correct answer)
- Total cost of the implementation project
Correct answer: System login frequency and task completion rates per role
Login frequency and task completion rates provide objective data on whether users are actually using the system as designed for their role.
Question 108: An EHR system experiences a partial database corruption affecting only the scheduling module. Which recovery approach minimizes disruption while preserving data integrity?
- Restore the entire EHR system from the last full backup
- Perform a granular restore of only the affected database tables from the most recent valid backup (Correct answer)
- Shut down the entire EHR until vendors can investigate the corruption
- Manually re-enter all scheduling data from printed reports
Correct answer: Perform a granular restore of only the affected database tables from the most recent valid backup
Granular or object-level restoration allows recovery of specific database components without restoring the entire system, minimizing downtime and avoiding overwriting unaffected data.
Question 109: Which selection criterion is MOST important when evaluating EHR interoperability capabilities?
- The total number of installed client sites nationally
- The vendor's number of years in business
- The aesthetic design of the user interface
- Support for HL7 FHIR standards enabling data exchange with external systems and health information exchanges (Correct answer)
Correct answer: Support for HL7 FHIR standards enabling data exchange with external systems and health information exchanges
HL7 FHIR support is the current interoperability standard that enables seamless bidirectional data exchange required under federal regulations such as the 21st Century Cures Act.
Question 110: Which of the following scenarios qualifies as a HIPAA-permitted disclosure without patient authorization?
- Sharing PHI with a marketing firm to target patients with ads
- Reporting a gunshot wound to law enforcement as required by state law (Correct answer)
- Disclosing PHI to an employer for workplace monitoring
- Selling PHI to a pharmaceutical company for research
Correct answer: Reporting a gunshot wound to law enforcement as required by state law
Disclosures required by law, such as mandatory reporting of gunshot wounds to law enforcement, are permitted under HIPAA without patient authorization.
Question 111: A multi-specialty group wants each department's home screen to show only relevant patient lists and shortcuts. Which EHR capability supports this?
- Requiring each user to manually customize their own screen from scratch
- Role-based and department-specific dashboard configuration (Correct answer)
- Removing all dashboards and using report queries instead
- Universal single dashboard for all users
Correct answer: Role-based and department-specific dashboard configuration
Role- and department-based dashboard configuration allows the EHR to present contextually relevant information to each specialty group.
Question 112: Which federal program requires eligible professionals and hospitals to demonstrate meaningful use of EHRs, including health information exchange capabilities?
- Stark Law
- HIPAA Security Rule
- Medicare and Medicaid EHR Incentive Programs (Correct answer)
- Anti-Kickback Statute
Correct answer: Medicare and Medicaid EHR Incentive Programs
The Medicare and Medicaid EHR Incentive Programs (now the Promoting Interoperability Programs) incentivized meaningful use of certified EHR technology.
Question 113: What is the primary function of an EHR's integrated 'scrubber' or claim editing tool?
- To automatically schedule patient follow-up appointments
- To identify coding and billing errors before a claim is submitted to the payer (Correct answer)
- To generate patient satisfaction surveys
- To apply HIPAA encryption to transmitted data
Correct answer: To identify coding and billing errors before a claim is submitted to the payer
An integrated claim scrubber checks for coding inconsistencies, missing information, and payer-specific edits before submission to reduce rejections and denials.
Question 114: Which action BEST supports data integrity when a clinical staff member leaves the organization?
- Deleting all records they authored
- Immediately deactivating their EHR access and reviewing recent entries they authored (Correct answer)
- Transferring their login credentials to a new employee
- Keeping their account active for six months for reference
Correct answer: Immediately deactivating their EHR access and reviewing recent entries they authored
Immediate access deactivation prevents unauthorized use while reviewing recent entries ensures accountability and completeness of their documentation.
Question 115: Which FHIR operation allows a client to retrieve a patient's complete health summary including medications, problems, and allergies in a single request?
- $document
- $match
- $summary
- $everything (Correct answer)
Correct answer: $everything
The $everything operation on a Patient resource returns all resources related to that patient in a single bundle.
Question 116: A CDS rule recommends influenza vaccination for all adults, but a patient already received it last month outside the health system. What EHR data gap does this highlight?
- Incorrect medication allergy entry
- Missing problem list documentation
- Incomplete immunization history due to lack of external data exchange (Correct answer)
- Billing code mismatch
Correct answer: Incomplete immunization history due to lack of external data exchange
When immunization records from outside organizations are not exchanged via immunization registries or HIEs, CDS rules cannot account for vaccinations given elsewhere.
Question 117: When converting historical patient data to a new EHR, which process ensures that the data retains its original meaning and structure?
- Data deduplication
- Data normalization
- Data mapping (Correct answer)
- Data warehousing
Correct answer: Data mapping
Data mapping defines how fields and values from the source system correspond to fields in the target EHR, preserving meaning during migration.
Question 118: In EHR analytics, 'data latency' refers to:
- The delay between data generation and its availability for analysis (Correct answer)
- Missing values in clinical data fields
- The time needed to train a machine learning model
- Encryption processing time for PHI
Correct answer: The delay between data generation and its availability for analysis
Data latency is the lag between when clinical events occur or are documented and when that data becomes queryable in analytics systems.
Question 119: What is the role of the 'place of service' (POS) code on a CMS-1500 claim?
- It specifies the setting where the service was rendered, affecting reimbursement rates (Correct answer)
- It indicates the specialty of the treating physician
- It codes the type of insurance plan covering the patient
- It identifies the patient's home address
Correct answer: It specifies the setting where the service was rendered, affecting reimbursement rates
POS codes (e.g., 11=office, 21=inpatient hospital) tell the payer where services occurred, which directly influences the applicable payment rates.
Question 120: Which FHIR capability statement element advertises what resources and interactions an EHR server supports, enabling clients to discover exchange capabilities?
- StructureDefinition
- ImplementationGuide
- CapabilityStatement (Correct answer)
- OperationDefinition
Correct answer: CapabilityStatement
A FHIR CapabilityStatement describes a server's supported resources, operations, and interactions, acting as a machine-readable API contract.
Question 121: What is the purpose of the National Provider Identifier (NPI) in billing?
- It represents the procedure code billed on a claim
- It is a unique 10-digit identifier assigned to healthcare providers for use in standard transactions (Correct answer)
- It is a code used to identify the diagnosis on a claim
- It identifies the patient's primary insurance plan
Correct answer: It is a unique 10-digit identifier assigned to healthcare providers for use in standard transactions
HIPAA requires all covered healthcare providers to obtain an NPI, which uniquely identifies them in administrative and financial transactions.
Question 122: A patient visits an emergency department and the care team needs lab results from a visit three months ago at another hospital. Which HIE exchange paradigm would most efficiently retrieve this data?
- Push-based direct secure messaging
- Patient portal message
- Query/retrieve (pull) exchange (Correct answer)
- Fax transmission
Correct answer: Query/retrieve (pull) exchange
Query/retrieve exchange allows providers to proactively search for and pull patient data from other organizations on demand.
Question 123: What is 'system downtime reconciliation' in EHR management?
- Comparing two EHR vendor bids
- Entering paper-based documentation collected during downtime into the EHR after system restoration (Correct answer)
- Archiving old patient records to reduce storage costs
- Updating vendor payment schedules after system repairs
Correct answer: Entering paper-based documentation collected during downtime into the EHR after system restoration
Downtime reconciliation is the process of entering data recorded on paper during an EHR outage back into the system once it is restored.
Question 124: A healthcare organization discovers that its EHR vendor stores backup data in a different country. Which concern is MOST relevant to HIPAA compliance?
- The organization must switch to a domestic-only EHR vendor immediately
- The Business Associate Agreement (BAA) must address ePHI protections regardless of location (Correct answer)
- International backup locations are always prohibited under HIPAA
- Data encryption is not required for internationally stored backups
Correct answer: The Business Associate Agreement (BAA) must address ePHI protections regardless of location
HIPAA does not prohibit international data storage, but the vendor must sign a BAA that ensures ePHI receives equivalent protections, and the covered entity remains responsible for compliance.
Question 125: Which federal law establishes the framework for protecting patient health information used in billing and revenue cycle activities?
- The Affordable Care Act
- HIPAA (Health Insurance Portability and Accountability Act) (Correct answer)
- The Stark Law
- The Emergency Medical Treatment and Labor Act (EMTALA)
Correct answer: HIPAA (Health Insurance Portability and Accountability Act)
HIPAA's Privacy and Security Rules govern the use and disclosure of Protected Health Information (PHI), including all billing and claims processing activities.
NHA Certified Electronic Health Records Specialist (CEHRS)
The CEHRS certification exam validates competency in electronic health records systems, covering clinical and non-clinical EHR operations, revenue cycle management, regulatory compliance, and healthcare data reporting.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds