RHIT (Registered Health Information Technician) Exam — Questions and Answers

Question 1: A hospital receives a subpoena for a patient's medical records. Under HIPAA, which condition must be met before releasing the records without a patient authorization?

The records must be de-identified first
The subpoena must be signed by a federal judge
Satisfactory assurance that the patient has been notified or a qualified protective order is in place (Correct answer)
The hospital's privacy officer must personally deliver the records

Correct answer: Satisfactory assurance that the patient has been notified or a qualified protective order is in place

HIPAA requires satisfactory assurances that the patient was notified or a protective order exists before releasing records in response to a subpoena.

Question 2: Which system implementation strategy goes live with the new system at all locations simultaneously, replacing the old system completely?

Big bang (direct cutover) implementation (Correct answer)
Parallel implementation
Pilot implementation
Phased rollout

Correct answer: Big bang (direct cutover) implementation

Direct cutover (big bang) switches all users to the new system at once on a set date, with the old system decommissioned immediately.

Question 3: What are key components of an effective employee orientation program in HIM?

Showing the employee their desk
Assigning a full workload immediately
Only providing the employee handbook
Comprehensive introduction to policies, procedures, job-specific training, compliance requirements, and technology systems (Correct answer)

Correct answer: Comprehensive introduction to policies, procedures, job-specific training, compliance requirements, and technology systems

Effective orientation includes organizational overview, compliance training, department orientation, and job-specific training.

Question 4: How soon after a claim denial from an insurance like Blue Cross/Blue Shield must an internal appeal be filed?

60
180 (Correct answer)
90
30

Correct answer: 180

If an insurer, such as Blue Cross/Blue Shield, rejects a claim, the insurance company must file an internal appeal within 180 days following the rejection. For services to be provided in the future, the insurance provider must finish the appeals process and make a determination within 30 days, and for services previously rendered, within 60 days. The claimant has 60 days following notification of the denial to obtain an external review by a third party if the insurer continues to decline the claim.

Question 5: What is the purpose of a contingency plan in health information management?

To determine employee compensation
To manage vendor contracts
To establish procedures for responding to emergencies and ensuring continued access to critical data during disruptions (Correct answer)
To plan hospital expansion

Correct answer: To establish procedures for responding to emergencies and ensuring continued access to critical data during disruptions

A contingency plan establishes procedures for responding to emergencies like system failures or natural disasters.

Question 6: Which of the following is NOT a required element of a valid HIPAA authorization for the release of protected health information?

A description of the information to be used or disclosed
The right of the individual to revoke the authorization
The patient's primary diagnosis (Correct answer)
An expiration date or expiration event

Correct answer: The patient's primary diagnosis

HIPAA's required authorization elements include a description of PHI, the recipient, purpose, expiration, signature, and revocation rights — but the patient's specific diagnosis is not a required element of the authorization form itself.

Question 7: Which type of health record format organizes documentation by source, such as physician notes, nursing notes, and laboratory reports grouped together?

Integrated health record
Problem-oriented medical record (POMR)
Source-oriented health record (Correct answer)
Chronological health record

Correct answer: Source-oriented health record

A source-oriented health record groups documents by the type of provider or department that created them, rather than by problem or date.

Question 8: A CDI specialist reviews a record and notices a patient was treated for 'respiratory failure' but only 'pneumonia' is documented. What should the CDI specialist do?

Change the documentation to reflect respiratory failure
Ignore the discrepancy and code only what is documented
Submit a query to the physician to clarify the diagnosis (Correct answer)
Code respiratory failure without physician documentation

Correct answer: Submit a query to the physician to clarify the diagnosis

CDI specialists submit physician queries to clarify ambiguous or incomplete documentation rather than assuming or altering records.

Question 9: Which of the following would NOT typically be considered part of the designated record set (DRS) as defined by HIPAA, which an organization must provide to a patient upon request?

Psychotherapy notes that are maintained separately. (Correct answer)
Enrollment, payment, and claims adjudication records.
Records used to make decisions about individuals.
Medical records and billing records.

Correct answer: Psychotherapy notes that are maintained separately.

Under HIPAA, psychotherapy notes are given special protection. If they are maintained separately from the rest of the medical record, they are not considered part of the designated record set and are not required to be released to the patient upon request without a specific authorization. The designated record set broadly includes medical records, billing records, and other records used to make decisions about individuals.

Question 10: A coding professional unbundles a surgical procedure to maximize reimbursement. Under the National Correct Coding Initiative (NCCI), this practice is:

Permitted for outpatient claims only
Required when procedures are performed in separate sessions
Prohibited because component codes are already included in the comprehensive code (Correct answer)
Acceptable when a modifier is appended

Correct answer: Prohibited because component codes are already included in the comprehensive code

NCCI edits prohibit unbundling because component procedures are considered included in the comprehensive procedure code.

Question 11: Which of the following BEST describes a 'near miss' in a healthcare quality context?

An event that results in temporary patient harm
An event requiring root cause analysis
A patient complaint about care quality
An error that is caught before reaching the patient (Correct answer)

Correct answer: An error that is caught before reaching the patient

A near miss is an event or situation that could have resulted in patient harm but was intercepted before reaching the patient, providing an opportunity to prevent future errors.

Question 12: Which retention schedule applies to the health records of minor patients in most states?

Records are destroyed when the patient turns 18
Records must be retained for 7 years from date of service
Records must be retained until the patient reaches the age of majority plus the standard retention period (Correct answer)
Minor records follow the same 10-year retention as adult records

Correct answer: Records must be retained until the patient reaches the age of majority plus the standard retention period

Most states require that minor records be retained until the patient reaches age of majority (usually 18) plus the state's standard adult retention period.

Question 13: What are the HIPAA Security Rule's physical safeguard requirements?

Physical safeguards are not in the Security Rule
Only locking the front door
Only installing security cameras
Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion (Correct answer)

Correct answer: Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion

Physical safeguards protect the physical environment where ePHI is stored, processed, or transmitted.

Question 14: Which federal regulation protects the confidentiality of substance abuse treatment records?

HIPAA Privacy Rule only
The Affordable Care Act
EMTALA
42 CFR Part 2 (Correct answer)

Correct answer: 42 CFR Part 2

42 CFR Part 2 provides heightened confidentiality protections for substance abuse treatment records, more restrictive than HIPAA.

Question 15: Which HIPAA rule establishes national standards for protecting electronic PHI?

Breach Notification Rule
Enforcement Rule
Privacy Rule
Security Rule (Correct answer)

Correct answer: Security Rule

The HIPAA Security Rule specifically addresses the protection of electronic protected health information (ePHI) through administrative, physical, and technical safeguards.

Question 16: A patient is covered by both a spouse's employer plan and their own employer plan. The process of determining which payer pays first is called:

Subrogation
Dual eligibility determination
Coordination of benefits (COB) (Correct answer)
Secondary claim processing

Correct answer: Coordination of benefits (COB)

Coordination of benefits establishes payment order when a patient has multiple insurance coverages to prevent overpayment.

Question 17: Which of the following best describes the concept of 'data granularity' in health information management?

The level of detail at which data is recorded (Correct answer)
The number of data entry errors per 1,000 records
The total volume of data stored in an EHR system
The frequency with which data is backed up

Correct answer: The level of detail at which data is recorded

Data granularity refers to the level of detail captured in a data element. For example, recording a patient's weight to the nearest tenth of a kilogram is more granular than recording it to the nearest kilogram, affecting precision and clinical utility.

Question 18: A hospital is transitioning from a hybrid record system to a fully electronic health record (EHR). To manage this significant change and overcome potential staff resistance, which of the following is the most critical activity for the HIM leadership to undertake?

Outsource the entire scanning and indexing process to a third-party vendor.
Establish clear communication channels and involve staff in the implementation process. (Correct answer)
Focus training only on the most technologically skilled employees.
Mandate the use of the new system with strict penalties for non-compliance.

Correct answer: Establish clear communication channels and involve staff in the implementation process.

Successful change management relies heavily on communication and employee buy-in. Involving staff in the process (e.g., through super-user programs or feedback sessions) and maintaining clear, consistent communication about the reasons for the change, the timeline, and the benefits can significantly reduce resistance and improve adoption.

Question 19: Which technical standard defines the format for transmitting medical images between imaging devices and PACS systems?

HL7 v2.x
X12 EDI
DICOM (Correct answer)
ICD-10-CM

Correct answer: DICOM

DICOM (Digital Imaging and Communications in Medicine) is the international standard for medical image formatting and transmission.

Question 20: A CDI specialist's query response rate is 65%. What does this indicate?

65% of queries were submitted concurrently
65% of queries resulted in a diagnosis change
65% of records were queried during the month
65% of submitted queries received a physician response (Correct answer)

Correct answer: 65% of submitted queries received a physician response

Query response rate measures the percentage of queries that received a physician response, and a higher rate indicates better CDI-physician engagement.

Question 21: What role does data governance play in maintaining health data integrity?

It establishes organizational authority, policies, and accountability for data quality, security, and appropriate use (Correct answer)
It manages physical server infrastructure
It handles medical coding exclusively
It provides patient education materials

Correct answer: It establishes organizational authority, policies, and accountability for data quality, security, and appropriate use

Data governance establishes the framework of policies, standards, and accountabilities that ensure data is managed as a strategic asset.

Question 22: A hospital receives a subpoena for patient records without a court order. What is the appropriate response?

Release only billing records, not clinical records
Release records immediately without review
Deny all subpoenas without exception
Review the subpoena and follow applicable state law and HIPAA requirements before releasing (Correct answer)

Correct answer: Review the subpoena and follow applicable state law and HIPAA requirements before releasing

A subpoena alone does not automatically override HIPAA; the facility must review applicable state law and HIPAA requirements to determine the appropriate response.

Question 23: What is the primary security risk addressed by multi-factor authentication (MFA)?

Unauthorized access through compromised credentials by requiring two or more verification factors (Correct answer)
System performance issues
Network bandwidth limitations
Data storage capacity

Correct answer: Unauthorized access through compromised credentials by requiring two or more verification factors

MFA mitigates unauthorized access risk by requiring two or more verification factors from different categories.

Question 24: Which coding system is used to report inpatient hospital procedures in the United States?

CPT
HCPCS Level II
ICD-10-PCS (Correct answer)
SNOMED CT

Correct answer: ICD-10-PCS

ICD-10-PCS is the official coding system for reporting inpatient hospital procedures in the United States.

Question 25: What is the first step in the healthcare revenue cycle?

Patient pre-registration and scheduling including insurance verification (Correct answer)
Payment posting
Accounts receivable follow-up
Claims submission

Correct answer: Patient pre-registration and scheduling including insurance verification

The revenue cycle begins with pre-registration, insurance verification, and eligibility confirmation.

Question 26: What is the difference between an EHR and an EMR?

An EMR is a single provider's digital chart while an EHR is designed to share information across multiple providers (Correct answer)
They are the same thing
An EHR is for hospitals only
An EMR is newer technology

Correct answer: An EMR is a single provider's digital chart while an EHR is designed to share information across multiple providers

An EMR is the digital version of a chart within a single practice, while an EHR is designed to move with the patient across organizations.

Question 27: A patient's psychotherapy notes are requested by their primary care physician. Under HIPAA, these notes:

Can be released under the Treatment exception without authorization
Are subject to the same rules as other medical records
Must be released within 30 days of any clinical request
Require a specific authorization separate from a general medical records authorization (Correct answer)

Correct answer: Require a specific authorization separate from a general medical records authorization

Psychotherapy notes receive heightened protection under HIPAA and require a specific patient authorization, separate from a general authorization.

Question 28: Which of the following is an example of a TECHNICAL safeguard required by the HIPAA Security Rule?

Using unique user IDs and automatic log-off procedures for computer systems. (Correct answer)
Implementing policies and procedures for workstation use.
Positioning computer monitors to prevent casual viewing by the public.
Developing a security awareness and training program for staff.

Correct answer: Using unique user IDs and automatic log-off procedures for computer systems.

Technical safeguards are the technology and related policies used to protect and control access to ePHI. Unique user IDs, access controls, and automatic log-offs are technology-based measures. Security training and workstation use policies are administrative safeguards, while positioning monitors is a physical safeguard.

Question 29: A health information technician is performing a quality audit on the Emergency Department's patient records. They find several instances where the 'Time of Arrival' is recorded as later than the 'Time of Triage'. Which AHIMA data quality characteristic is being violated?

Timeliness
Comprehensiveness
Accuracy
Consistency (Correct answer)

Correct answer: Consistency

Consistency means that the data is reliable and the same across the entire patient encounter. In this scenario, the data is inconsistent because the time of arrival should logically precede the time of triage. While accuracy is related, consistency specifically addresses the logical coherence of data points within the record.

Question 30: What is the retention requirement for adult patient records under most U.S. state laws?

A minimum of 5 to 10 years, varying by state law (Correct answer)
3 years from the date of admission
Indefinitely, with no destruction permitted
1 year after the last date of service

Correct answer: A minimum of 5 to 10 years, varying by state law

Most states require retention of adult medical records for a minimum of 5 to 10 years, though specific requirements vary; facilities must follow the more stringent of state or federal requirements.

Question 31: What is the function of a data warehouse in healthcare analytics?

To manage physician scheduling
To integrate data from multiple source systems into a centralized repository optimized for analysis (Correct answer)
To store physical records
To process real-time patient monitoring

Correct answer: To integrate data from multiple source systems into a centralized repository optimized for analysis

A data warehouse integrates data from multiple operational systems into a centralized repository for reporting and analysis.

Question 32: A clinical study reports a p-value of 0.03. How should this be interpreted?

97% of patients improved
The study had a 3% error rate
There is a 3% probability the results occurred by chance, suggesting statistical significance at the 0.05 level (Correct answer)
Results are not statistically significant

Correct answer: There is a 3% probability the results occurred by chance, suggesting statistical significance at the 0.05 level

A p-value of 0.03 is below the conventional 0.05 threshold, indicating statistical significance.

Question 33: What is a HIPAA Security Rule 'addressable' implementation specification?

Only applies to large hospitals
A specification where the organization must assess if it is reasonable, and if not, document why and implement an alternative (Correct answer)
Only addresses physical security
A specification that is optional

Correct answer: A specification where the organization must assess if it is reasonable, and if not, document why and implement an alternative

Addressable does not mean optional; it requires assessment, documentation, and either implementation or an equivalent alternative.

Question 34: Which of the following would require patient authorization under HIPAA before PHI can be disclosed?

Reporting a communicable disease to the public health department
Sharing records with a consulting physician for treatment
Using patient data for marketing purposes (Correct answer)
Sending a bill to the patient's insurance company

Correct answer: Using patient data for marketing purposes

HIPAA requires patient authorization before using PHI for marketing purposes.

Question 35: A healthcare worker accesses a colleague's medical record out of curiosity without any treatment purpose. This is a violation of which HIPAA concept?

The accounting of disclosures rule
The authorization requirement
The right to access
Minimum necessary standard (Correct answer)

Correct answer: Minimum necessary standard

Accessing records without a job-related need violates the minimum necessary standard, which prohibits accessing more PHI than required for one's role.

Question 36: What is the role of a data dictionary in health information systems?

To store patient demographic information
To encrypt data for security purposes
To define each data element including its name, definition, format, allowable values, and source (Correct answer)
To translate medical terminology into layman's terms

Correct answer: To define each data element including its name, definition, format, allowable values, and source

A data dictionary provides standardized definitions for all data elements in an information system.

Question 37: What does the abbreviation PHI stand for in the context of HIPAA regulations?

Personal Health Identification
Private Hospital Index
Patient Health Insurance
Protected Health Information (Correct answer)

Correct answer: Protected Health Information

PHI stands for Protected Health Information, which includes any individually identifiable health information transmitted or maintained in any form.

Question 38: What is the difference between a 'CC' and an 'MCC' in MS-DRG grouping?

CC is a complication or comorbidity; MCC is a major complication or comorbidity that has a greater impact on DRG weight (Correct answer)
CC applies to outpatient; MCC applies to inpatient only
CC and MCC are interchangeable terms
CC is a major complication; MCC is a minor complication

Correct answer: CC is a complication or comorbidity; MCC is a major complication or comorbidity that has a greater impact on DRG weight

CCs and MCCs are secondary conditions that affect MS-DRG assignment, with MCCs representing more resource-intensive conditions that result in higher DRG weights.

Question 39: An RHIT notices that the same patient's blood pressure is recorded as 120/80 mmHg in one system and 12/80 mmHg in another due to a data entry error. Which data quality dimension is compromised?

Timeliness
Accessibility
Accuracy (Correct answer)
Completeness

Correct answer: Accuracy

Accuracy is compromised when data does not correctly represent the true value, as with the incorrect systolic reading.

Question 40: A clinical pertinence review's goal is to?

determine if forms require modification to meet standards.
ensure documentation is appropriate. (Correct answer)
institute disciplinary procedures.
compare physicians’ competency levels.

Correct answer: ensure documentation is appropriate.

A clinical pertinence review checks if the paperwork is accurate. The clinical pertinence review is carried out retroactively, typically by selecting a portion of each doctor's charts or a portion of each department's records. The history and physical, family history, and discharge summary are among the forms that are typically checked for completion. If there are any handwritten notes, their legibility is assessed. The correct use of acronyms and symbols is assessed. Evaluation of laboratory findings and monitoring for unusual outcomes are both done.

Question 41: An electronic health record system automatically timestamps all entries. What is the primary benefit of this feature for record integrity?

It establishes a verifiable audit trail for documentation (Correct answer)
It speeds up the coding process
It eliminates the need for physician signatures
It reduces storage costs for the facility

Correct answer: It establishes a verifiable audit trail for documentation

Automatic timestamps create an audit trail that verifies when documentation was created or modified, supporting record integrity.

Question 42: A HIM director creates a dashboard tracking coding accuracy rate, coder productivity, and claim denial rate. These metrics collectively represent which management tool?

Statistical process control chart
Balanced scorecard
Benchmarking report
Key performance indicators (KPIs) (Correct answer)

Correct answer: Key performance indicators (KPIs)

Key performance indicators (KPIs) are specific, measurable metrics used to evaluate performance toward departmental or organizational goals.

Question 43: Under what circumstances may a health record entry be corrected?

Draw a single line through the error, write the correction, and date and initial the change (Correct answer)
Entries can be freely deleted and rewritten
Only administrators can change entries
Original entries can be completely removed

Correct answer: Draw a single line through the error, write the correction, and date and initial the change

Corrections must preserve the original entry while adding the correction with date and initials.

Question 44: According to CMS Conditions of Participation, within how many days must a medical record be completed after discharge?

60 days
14 days
30 days (Correct answer)
7 days

Correct answer: 30 days

CMS Conditions of Participation require that inpatient medical records be completed within 30 days following patient discharge.

Question 45: What is the purpose of a charge description master (CDM)?

To document physician credentials
To record patient demographic information
To track denied claims by payer
To list all billable services with corresponding codes and prices (Correct answer)

Correct answer: To list all billable services with corresponding codes and prices

The CDM (chargemaster) is a comprehensive list of services, procedures, and supplies with associated billing codes and prices used for claim generation.

Question 46: In ICD-10-CM, what does an 'X' placeholder in a code indicate?

The code requires a 7th character extension
The diagnosis is excludes note type 1
A dummy placeholder used to allow for future expansion or to reach a required character position (Correct answer)
The code is a manifestation code

Correct answer: A dummy placeholder used to allow for future expansion or to reach a required character position

The 'X' placeholder fills a character position so a required character (often 7th) can be assigned correctly.

Question 47: What is the difference between HIPAA's Privacy Rule and Security Rule?

The Privacy Rule applies to hospitals and the Security Rule to clinics
They are the same rule
The Privacy Rule governs use and disclosure of all PHI while the Security Rule addresses protection of electronic PHI (Correct answer)
The Security Rule replaced the Privacy Rule

Correct answer: The Privacy Rule governs use and disclosure of all PHI while the Security Rule addresses protection of electronic PHI

The Privacy Rule covers all forms of PHI; the Security Rule specifically addresses ePHI protection through three safeguard categories.

Question 48: A 200-bed hospital recorded 1,460 inpatient service days in a week. What is the daily bed occupancy rate?

85%
91%
73% (Correct answer)
65%

Correct answer: 73%

Daily occupancy rate = inpatient service days / (beds × days in period) × 100 = 1,460 / (200 × 7) × 100 = 1,460 / 1,400 × 100 ≈ 73% (rounded to available capacity context: 1,460/2,000 = 73%).

Question 49: In the context of EHR data integrity, what does a 'hash value' (checksum) verify?

That a user has the proper access privileges
That a patient's identity has been verified with a government ID
That a data record has not been altered since the hash was generated (Correct answer)
That a document has been co-signed by an attending physician

Correct answer: That a data record has not been altered since the hash was generated

A hash value is a unique fixed-length string generated from data; any change to the data produces a different hash, detecting tampering.

Question 50: Role-based access control (RBAC) in an EHR system grants permissions based on:

Individual user identity only
The time of day the system is accessed
The sensitivity of the data requested
The user's job function or title (Correct answer)

Correct answer: The user's job function or title

RBAC assigns system access privileges according to a user's defined role or job function within the organization.

Question 51: A health system connects multiple regional hospitals so they can share patient records in real time. This regional network is called a(n):

Population health registry
Health Information Exchange (HIE) (Correct answer)
Enterprise Resource Planning (ERP) system
Integrated Delivery Network database

Correct answer: Health Information Exchange (HIE)

A Health Information Exchange (HIE) enables the electronic sharing of health information across different organizations in a region.

Question 52: A release of information specialist receives a request for records from a patient's attorney. Which document is essential before releasing records in a non-litigation context?

A subpoena signed by the attorney
A court order
A valid written HIPAA-compliant authorization signed by the patient (Correct answer)
Verbal confirmation from the treating physician

Correct answer: A valid written HIPAA-compliant authorization signed by the patient

Without a court order or subpoena, a valid patient authorization is required to release records to an attorney.

Question 53: A record overlay in an EHR is most dangerous because it:

Causes a billing code to be unassigned
Results in one patient's health information appearing in another patient's record (Correct answer)
Delays discharge summary completion
Creates extra storage costs

Correct answer: Results in one patient's health information appearing in another patient's record

An overlay merges records incorrectly so that one patient's data populates another patient's chart, creating serious patient safety risks.

Question 54: What distinguishes an advance directive from a regular consent form?

Advance directives are only for elderly patients
Consent forms are only used in emergency rooms
An advance directive documents wishes for future medical treatment if the patient becomes unable to communicate (Correct answer)
There is no difference

Correct answer: An advance directive documents wishes for future medical treatment if the patient becomes unable to communicate

An advance directive expresses wishes about future care if the patient becomes incapacitated.

Question 55: Which type of Medicare audit uses sophisticated data analysis to identify providers with unusual billing patterns before conducting a review?

Comprehensive Error Rate Testing (CERT)
Recovery Audit Contractor (RAC) automated review
Zone Program Integrity Contractor (ZPIC) data analysis (Correct answer)
Targeted Probe and Educate (TPE)

Correct answer: Zone Program Integrity Contractor (ZPIC) data analysis

ZPICs (now unified under UPICs) use data analysis and statistical modeling to detect fraud patterns before initiating field investigations.

Question 56: Which documentation is required to code a surgical complication in an inpatient record?

Nursing notes indicating patient discomfort
Physician documentation linking the condition to the surgical procedure (Correct answer)
The operative report alone
Any abnormal lab value post-surgery

Correct answer: Physician documentation linking the condition to the surgical procedure

Coding guidelines require explicit physician documentation establishing a cause-and-effect relationship between a procedure and a complication before a complication code may be assigned.

Question 57: Data 'currency' (also called timeliness) is most critical in which of the following situations?

Generating a five-year trend analysis of DRG weights
Alerting a physician to a critical lab value (Correct answer)
Archiving historical discharge summaries
Running an annual coding productivity report

Correct answer: Alerting a physician to a critical lab value

Timeliness is most critical when a delay in data availability could affect clinical decision-making or patient safety.

Question 58: What is a 'present on admission' (POA) indicator used for?

To flag records requiring physician signature
To identify diagnoses that existed before the hospital stay for quality and payment purposes (Correct answer)
To indicate whether a diagnosis was confirmed by lab results
To document conditions that developed during the inpatient stay

Correct answer: To identify diagnoses that existed before the hospital stay for quality and payment purposes

POA indicators identify whether a diagnosis was present at the time of inpatient admission, affecting hospital-acquired condition (HAC) reporting and reimbursement.

Question 59: A healthcare organization is implementing a master patient index (MPI) cleanup project. Which of the following is the MOST critical outcome of a well-maintained MPI?

Reduced coding turnaround time
Accurate linkage of all records to the correct patient (Correct answer)
Lower storage costs for paper records
Faster insurance claim submissions

Correct answer: Accurate linkage of all records to the correct patient

The primary function of the MPI is to uniquely identify each patient and correctly link all their encounters to a single identity. Errors in the MPI lead to fragmented or misassigned records, creating significant patient safety and data integrity risks.

Question 60: Which modifier is appended to a CPT code to indicate that a procedure was performed bilaterally?

-80
-59
-51
-50 (Correct answer)

Correct answer: -50

CPT modifier -50 indicates a bilateral procedure performed at the same operative session.

Question 61: Which of the following scenarios represents a valid use of the HIPAA 'limited data set'?

Disclosing records to an employer for hiring decisions
Sharing data with a researcher under a data use agreement with 16 identifiers removed (Correct answer)
Giving full PHI to a business associate without a BAA
Providing PHI to a marketing company for advertising

Correct answer: Sharing data with a researcher under a data use agreement with 16 identifiers removed

A limited data set excludes most direct identifiers but may include dates and geographic data; it can be shared for research, public health, or healthcare operations under a data use agreement.

Question 62: What does the term 'legal health record' refer to in a healthcare organization?

A copy of the patient's record maintained by their attorney
Only paper documents stored in the medical records department
The official business record of patient care that the organization would produce in response to legal proceedings (Correct answer)
The patient's billing record

Correct answer: The official business record of patient care that the organization would produce in response to legal proceedings

The legal health record is the subset of all patient information that constitutes the organization's official business record.

Question 63: What is the primary purpose of the Master Patient Index (MPI) in a healthcare facility?

To store physician credentials
To manage financial transactions
To track employee schedules
To uniquely identify each patient across all encounters (Correct answer)

Correct answer: To uniquely identify each patient across all encounters

The MPI serves as the central database that uniquely identifies each patient and links all their records across the healthcare system.

Question 64: A patient requests amendment of their medical record, claiming a diagnosis is incorrect. Under HIPAA, the covered entity may deny the request if:

The information was not created by the covered entity and the originator is available to amend it (Correct answer)
The patient disagrees with the physician's clinical judgment
The record was created more than five years ago
The amendment would increase reimbursement

Correct answer: The information was not created by the covered entity and the originator is available to amend it

HIPAA allows denial of an amendment request if the covered entity did not create the information and the originating entity is reasonably available for the amendment.

Question 65: Which network topology connects all nodes directly to a central hub or switch, making it easy to add devices but creating a single point of failure?

Mesh topology
Star topology (Correct answer)
Ring topology
Bus topology

Correct answer: Star topology

In a star topology, all devices connect to a central hub or switch; if the hub fails, all connected nodes lose connectivity.

Question 66: What is the purpose of CPT modifiers?

To provide additional information about circumstances without changing the code's definition (Correct answer)
To change the procedure description entirely
To replace the CPT code
To increase reimbursement

Correct answer: To provide additional information about circumstances without changing the code's definition

CPT modifiers indicate that a service was altered by specific circumstances without changing its basic definition.

Question 67: A hospital had 50 patient deaths within a 30-day period. Of those, 5 were coroner's cases that were not brought back to the hospital for autopsy. The hospital pathology department performed autopsies on 18 of the remaining deaths. Which calculation represents the hospital's net autopsy rate?

(18 / 50) * 100
(18 / 55) * 100
(5 / 50) * 100
(18 / 45) * 100 (Correct answer)

Correct answer: (18 / 45) * 100

The net autopsy rate refines the gross rate by excluding deaths of patients whose bodies were not available for autopsy (e.g., coroner's cases). The denominator is the total number of inpatient deaths minus the unautopsied coroner's cases. The calculation is (18 autopsies / (50 total deaths - 5 coroner's cases)) * 100.

Question 68: Under HIPAA, what is the maximum civil penalty per violation category for willful neglect that is not corrected?

$100 per violation
$250,000 per violation
$50,000 per violation with a maximum of $1.5 million per year (Correct answer)
$10,000 per violation

Correct answer: $50,000 per violation with a maximum of $1.5 million per year

The highest tier of HIPAA civil penalties applies to violations due to willful neglect not corrected within 30 days.

Question 69: Which leadership style is most appropriate when managing highly experienced, self-motivated HIM professionals who require little direction?

Laissez-faire leadership (Correct answer)
Transactional leadership
Autocratic leadership
Coercive leadership

Correct answer: Laissez-faire leadership

Laissez-faire leadership provides minimal direction and allows skilled, motivated employees to work autonomously, which suits experienced HIM professionals.

Question 70: In a frequency distribution of patient ages, the most frequently occurring age is 45. What statistical term describes this?

Mode (Correct answer)
Median
Standard deviation
Mean

Correct answer: Mode

The mode is the value that occurs most frequently in a data set.

Question 71: In a health data quality review, a 'false positive' result from a validation rule would mean:

A valid record was incorrectly flagged as an error (Correct answer)
A truly erroneous record was correctly flagged
A missing value was automatically populated
A duplicate record was successfully merged

Correct answer: A valid record was incorrectly flagged as an error

A false positive occurs when a validation rule flags a record as problematic even though the data is actually correct.

Question 72: Which classification system is used to code diagnoses for inpatient hospital claims in the United States?

ICD-10-CM (Correct answer)
CPT
DSM-5
HCPCS Level II

Correct answer: ICD-10-CM

ICD-10-CM (Clinical Modification) is the official system for coding diagnoses on all healthcare claims in the U.S.

Question 73: A patient is admitted with chest pain. Workup reveals the chest pain is due to gastroesophageal reflux disease (GERD). Which condition should be coded as the principal diagnosis?

Atypical chest pain with secondary GERD
Chest pain due to GERD — both coded equally
GERD, without esophagitis (Correct answer)
Chest pain, unspecified

Correct answer: GERD, without esophagitis

When the workup during an inpatient stay identifies the underlying cause of a symptom, the confirmed underlying condition (GERD) is sequenced as the principal diagnosis rather than the presenting symptom (chest pain).

Question 74: Under HIPAA's Minimum Necessary Standard, a covered entity must limit PHI disclosures to the amount reasonably necessary to accomplish the intended purpose. Which disclosure is EXEMPT from this standard?

Disclosures for public health activities
Disclosures required by law (Correct answer)
Disclosures to business associates
Disclosures to health plans for payment purposes

Correct answer: Disclosures required by law

Disclosures required by law are exempt from the Minimum Necessary Standard under 45 CFR §164.502(b).

Question 75: Which concept ensures that health data means the same thing regardless of who collects it or where?

Data warehousing
Data mining
Data virtualization
Data standardization (Correct answer)

Correct answer: Data standardization

Data standardization establishes uniform definitions, codes, and formats to ensure data is interpreted consistently across settings.

Question 76: Which safeguard category under the HIPAA Security Rule includes unique user identification and automatic logoff?

Organizational safeguards
Physical safeguards
Administrative safeguards
Technical safeguards (Correct answer)

Correct answer: Technical safeguards

Technical safeguards include access controls such as unique user IDs, automatic logoff, and encryption mechanisms to protect ePHI.

Question 77: An ICD-10-CM code for a manifestation is being assigned. The coding guidelines and instructional notes in the Tabular List indicate a 'code first' note. What does this convention require the coder to do?

Sequence the manifestation code as the principal diagnosis.
Sequence the underlying etiology (cause) of the disease first, followed by the manifestation code. (Correct answer)
Assign only the manifestation code and ignore the underlying disease.
Query the physician to determine which code should be sequenced first.

Correct answer: Sequence the underlying etiology (cause) of the disease first, followed by the manifestation code.

The 'code first' instructional note found at the manifestation code in the Tabular List requires the coder to sequence the underlying condition (etiology) before the manifestation code. The manifestation code can never be the principal diagnosis.

Question 78: A hospital's HIM department must reduce operational costs by 10% without reducing staff. Which approach directly targets process inefficiency as a cost-reduction strategy?

Workflow redesign and automation (Correct answer)
Freezing merit increases
Eliminating continuing education
Reducing supply purchases

Correct answer: Workflow redesign and automation

Workflow redesign and automation reduce costs by eliminating inefficiencies and redundant steps, improving productivity without cutting staff.

Question 79: Which accreditation organization's standards are most commonly used by hospitals seeking deemed status to meet CMS Conditions of Participation?

URAC
National Committee for Quality Assurance (NCQA)
Healthcare Facilities Accreditation Program (HFAP)
The Joint Commission (TJC) (Correct answer)

Correct answer: The Joint Commission (TJC)

The Joint Commission is the most widely recognized accrediting body, and its deemed status is accepted by CMS as meeting the Conditions of Participation.

Question 80: Before a claim is submitted to a third-party payer, it is often processed by internal software that checks for errors, such as missing data, incorrect code combinations, and payer-specific formatting issues. This process is known as:

Claims scrubbing (Correct answer)
Claims adjudication
Charge reconciliation
Remittance advice review

Correct answer: Claims scrubbing

Claims scrubbing is the process of auditing claims for errors before they are submitted to the payer. This is a crucial step in revenue cycle management that helps to increase the clean claim rate, reduce denials, and accelerate reimbursement by catching and correcting mistakes upfront.

Question 81: An unexpected event involving patient death or serious injury that is not related to the natural course of illness is classified as a:

Adverse event
Sentinel event (Correct answer)
Variance
Near miss

Correct answer: Sentinel event

A sentinel event is an unexpected occurrence resulting in death or serious physical or psychological harm, requiring immediate investigation and response per Joint Commission standards.

Question 82: What is the difference between a 'favorable' and 'unfavorable' budget variance?

There is no meaningful difference
Favorable means within budget; unfavorable means budget needs increasing
Favorable applies to revenue only
Favorable means spending below budget or revenue above; unfavorable means spending above budget or revenue below (Correct answer)

Correct answer: Favorable means spending below budget or revenue above; unfavorable means spending above budget or revenue below

Favorable = better than budgeted results; unfavorable = worse than budgeted results.

Question 83: A release of information (ROI) specialist receives a request for records from a patient's neighbor claiming to be a caregiver. What should the specialist do?

Release only the diagnosis summary
Contact the treating physician to obtain verbal approval
Require a signed authorization from the patient or documented legal authority before releasing (Correct answer)
Release the records since the neighbor stated they are a caregiver

Correct answer: Require a signed authorization from the patient or documented legal authority before releasing

Without a signed patient authorization or documented legal authority such as a healthcare proxy, records may not be released to third parties regardless of their stated relationship.

Question 84: What is the required timeframe for completing a history and physical (H&P) for inpatient admission per The Joint Commission?

Within 48 hours
Within 24 hours of admission (Correct answer)
Within 72 hours
Before discharge only

Correct answer: Within 24 hours of admission

The Joint Commission requires the H&P to be completed within 24 hours of inpatient admission.

Question 85: A patient is in the emergency room and is unable to communicate. Their spouse calls the hospital asking for an update. According to the HIPAA Privacy Rule, what is the most appropriate action for the healthcare provider to take?

Refuse to provide any information due to a lack of written authorization.
Share limited information directly relevant to the spouse's involvement in the patient's care using professional judgment. (Correct answer)
Provide a complete and detailed summary of the patient's condition and test results.
Inform the spouse that they must obtain a court order to receive any information.

Correct answer: Share limited information directly relevant to the spouse's involvement in the patient's care using professional judgment.

The HIPAA Privacy Rule permits a provider to share information that is directly relevant to a family member's involvement in the patient's care or payment for care. If the patient is incapacitated, the provider may use professional judgment to determine if disclosure is in the patient's best interest.

Question 86: The account's guarantor is the?

the person for whom the account is established.
the person who is responsible for paying bills not paid for by insurance. (Correct answer)
the person show is responsible for signing consent forms.
insurance company that will provide payment for claims.

Correct answer: the person who is responsible for paying bills not paid for by insurance.

The individual in charge of covering uninsured expenses on an account is known as the guarantor. This might sometimes be the person for whom the account is set up, but it might also be a parent or another person. The name, address, and contact details (phone number, email address) of the guarantor must be kept on file for billing purposes if the patient is not the person responsible for the account.

Question 87: What is the primary purpose of Health Level Seven (HL7) standards?

To determine physician pay grades
To provide standards for the exchange and integration of electronic health information between systems (Correct answer)
To manage hospital inventory
To standardize hospital building designs

Correct answer: To provide standards for the exchange and integration of electronic health information between systems

HL7 is a set of international standards for transferring clinical and administrative data between healthcare software applications.

Question 88: What is the 'minimum necessary' standard under HIPAA?

Covered entities must always share complete records with requesting parties
Patients may only request a minimum of five pages of records
Records must be redacted to one page before release
Covered entities must disclose the minimum amount of PHI needed to accomplish the intended purpose (Correct answer)

Correct answer: Covered entities must disclose the minimum amount of PHI needed to accomplish the intended purpose

The minimum necessary standard requires covered entities to make reasonable efforts to limit PHI disclosure to the minimum needed for the intended purpose.

Question 89: In ICD-10-CM, what is the significance of a 7th character 'A' in injury codes?

Subsequent encounter
Accidental cause
Sequela
Initial encounter — active treatment phase (Correct answer)

Correct answer: Initial encounter — active treatment phase

The 7th character 'A' denotes the initial encounter when the patient is receiving active treatment for the injury.

Question 90: A HIM manager is facilitating a team meeting to resolve a dispute between the coding and clinical documentation improvement (CDI) teams. Which conflict resolution strategy seeks a solution that satisfies the concerns of all parties?

Compromise
Accommodation
Avoidance
Collaboration (Correct answer)

Correct answer: Collaboration

Collaboration (also called integrating) seeks a solution that fully satisfies all parties' concerns and is the most constructive conflict resolution approach.

Question 91: A RHIT is reviewing records and notices a physician documented 'CHF' without further specification. What action should the CDI specialist take?

Query the physician for the type and acuity of heart failure (Correct answer)
Ignore the abbreviation
Assign the code for systolic heart failure
Code it as unspecified heart failure

Correct answer: Query the physician for the type and acuity of heart failure

The CDI specialist should query the physician to obtain documentation of the specific type and acuity of heart failure.

Question 92: Which of the following is a key component of an effective compliance program in healthcare?

Eliminating all coding errors
Conducting regular internal audits, providing staff education, and establishing a reporting mechanism for concerns (Correct answer)
Avoiding government payer contracts
Maximizing revenue at all costs

Correct answer: Conducting regular internal audits, providing staff education, and establishing a reporting mechanism for concerns

An effective compliance program includes regular audits, ongoing education, and a mechanism for reporting concerns.

Question 93: Which quality management tool displays the frequency of problems in descending order to help prioritize improvement efforts?

Pareto chart (Correct answer)
Fishbone diagram
Control chart
Scatter diagram

Correct answer: Pareto chart

A Pareto chart is a bar graph that ranks problems from most to least frequent, based on the Pareto principle that roughly 80% of problems come from 20% of causes.

Question 94: Which tool is most commonly used to analyze root causes of data quality problems in healthcare?

Flowchart
Gantt chart
Pareto chart
Fishbone (Ishikawa) diagram (Correct answer)

Correct answer: Fishbone (Ishikawa) diagram

A fishbone diagram is commonly used for root cause analysis to identify factors contributing to a data quality problem.

Question 95: What is the purpose of the 'Table of Neoplasms' in the ICD-10-CM index?

To cross-reference CPT oncology codes
To guide coders to the correct code based on site and behavior (malignant, benign, uncertain, etc.) (Correct answer)
To provide staging information for tumors
To list all cancers by body system only

Correct answer: To guide coders to the correct code based on site and behavior (malignant, benign, uncertain, etc.)

The Table of Neoplasms organizes codes by anatomic site and neoplasm behavior, directing coders to the appropriate code.

Question 96: A hospital's coding department finds a pattern of overcoding that resulted in overpayments from Medicare. Under the 60-Day Rule, the hospital must report and return the overpayment within 60 days of:

The date the overpayment occurred
The date the overpayment is identified (Correct answer)
The date the OIG issues a subpoena
The end of the fiscal year

Correct answer: The date the overpayment is identified

Under the 60-Day Rule (ACA Section 6402), overpayments must be reported and returned within 60 days of identification to avoid False Claims Act liability.

Question 97: In health information management, 'data integrity' is best defined as:

The process of encrypting patient data to prevent unauthorized access
The accuracy, completeness, consistency, and reliability of health data (Correct answer)
The physical security measures applied to medical record storage areas
The legal right of patients to inspect and copy their own medical records

Correct answer: The accuracy, completeness, consistency, and reliability of health data

Data integrity means that health data is accurate, complete, consistent, and trustworthy throughout its lifecycle — a foundational principle in HIM because decisions about patient care, billing, and quality reporting all depend on reliable data.

Question 98: When coding an outpatient encounter without a definitive diagnosis, what should the coder assign?

A 'rule out' diagnosis code
No diagnosis code
The most probable diagnosis
Signs and symptoms codes that are documented and relevant (Correct answer)

Correct answer: Signs and symptoms codes that are documented and relevant

In outpatient settings, uncertain diagnoses are coded using signs and symptoms, not probable or suspected conditions.

Question 99: What is the primary purpose of a strategic plan in a healthcare organization?

To create daily work schedules
To track daily patient census
To list all current employees
To define the organization's long-term direction, goals, and strategies for achieving its mission (Correct answer)

Correct answer: To define the organization's long-term direction, goals, and strategies for achieving its mission

A strategic plan establishes long-term vision, mission, goals, and strategies.

Question 100: What is the primary purpose of a confidence interval in healthcare statistics?

To identify outliers in a dataset
To express the range within which the true value likely falls (Correct answer)
To calculate the exact true population parameter
To determine statistical significance between two groups

Correct answer: To express the range within which the true value likely falls

A confidence interval provides a range of values within which the true population parameter is likely to fall with a specified level of certainty.

Question 101: Which of the following activities would constitute Medicare fraud, as opposed to Medicare abuse?

Billing for a service that is not medically necessary due to a coding error
Intentionally billing for services never rendered (Correct answer)
Inadvertently using an incorrect code that results in a higher payment
Failing to document a service that was provided

Correct answer: Intentionally billing for services never rendered

Fraud involves intentional deception; knowingly billing for services never rendered is a clear fraudulent act under the False Claims Act.

Question 102: Which of the following is an illustration of malware that spreads throughout a system by duplicating itself?

Rootkit
Computer worm (Correct answer)
Computer virus
Trojan horse

Correct answer: Computer worm

A computer worm is a software that may propagate throughout a system by duplicating itself rather than attaching to another program. A computer virus is a software that copies itself, affixes to another program, and then spreads to alter data. A Trojan horse enables illegal access to a computer so that information can be obtained or emails can be sent. A rootkit is a piece of software that has access to an operating system on a computer and changes it.

Question 103: A covered entity discovers a potential breach. The HIPAA breach notification rule presumes that an impermissible use or disclosure is a breach unless:

The covered entity reports it to HHS within 24 hours
The data was encrypted at rest
The patient was notified within 10 days
A low probability assessment shows the PHI was not compromised (Correct answer)

Correct answer: A low probability assessment shows the PHI was not compromised

The covered entity can rebut the presumption of breach by demonstrating through a four-factor risk assessment that there is a low probability the PHI was compromised.

Question 104: In performance improvement, what does a 'tracer methodology' involve?

Auditing coding accuracy across the facility
Following a patient's care experience across departments to evaluate systems (Correct answer)
Tracking financial transactions through the revenue cycle
Mapping data flows through health information systems

Correct answer: Following a patient's care experience across departments to evaluate systems

The Joint Commission's tracer methodology evaluates the care, treatment, and services delivered to individual patients by tracing their experience through the organization's processes and systems.

Question 105: Which of the following best describes the purpose of the National Provider Identifier (NPI)?

It tracks physician licensing across state lines
It replaces the DEA number for controlled substance prescribing
It is issued by the Joint Commission for accreditation purposes
It is a unique 10-digit identification number assigned to covered healthcare providers for HIPAA administrative transactions (Correct answer)

Correct answer: It is a unique 10-digit identification number assigned to covered healthcare providers for HIPAA administrative transactions

The NPI is a unique 10-digit identifier required by HIPAA for covered healthcare providers in standard electronic administrative transactions.

Question 106: An EHR system automatically generates an alert for a physician who attempts to prescribe a medication to which the patient has a documented allergy. This functionality is a primary example of which type of health information system component?

Picture Archiving and Communication System (PACS)
Revenue Cycle Management (RCM)
Master Patient Index (MPI)
Clinical Decision Support (CDS) (Correct answer)

Correct answer: Clinical Decision Support (CDS)

Clinical Decision Support (CDS) systems provide real-time, evidence-based information to clinicians at the point of care. An allergy alert is a classic example, as it uses patient data (allergies) to inform a clinical decision (prescribing), thereby preventing a potential adverse event.

Question 107: During a routine chart review, an RHIT discovers that a nurse's signature is missing from a paper-based medication administration record that has already been scanned into the EHR. What is the appropriate action to take?

Follow the facility's policy for late entries or amendments to authenticate the entry. (Correct answer)
Ignore the missing signature as the record is already electronic.
Add a digital note to the image stating the signature is missing.
Delete the scanned image and ask the nurse to sign a blank form.

Correct answer: Follow the facility's policy for late entries or amendments to authenticate the entry.

A missing signature is a documentation deficiency. The correct procedure is to follow the established facility policy for authenticating records after the fact, which typically involves the original author signing and dating the entry as a late entry or addendum. This maintains the integrity of the original record while correcting the omission. Simply deleting the image or ignoring the issue would be inappropriate and could have legal consequences.

Question 108: Which of the following BEST describes a master patient index (MPI)?

A registry of all patients ever treated at a facility, linking all their encounters (Correct answer)
A database of ICD codes used for billing
A list of all physicians with admitting privileges
A directory of insurance payer contracts

Correct answer: A registry of all patients ever treated at a facility, linking all their encounters

The MPI is a facility-wide index that uniquely identifies each patient and links all encounters to the correct individual.

Question 109: Which federal law specifically prohibits a physician from referring Medicare patients for designated health services to an entity where the physician or an immediate family member has a financial interest?

The Anti-Kickback Statute
The Health Insurance Portability and Accountability Act (HIPAA)
The False Claims Act
The Stark Law (Physician Self-Referral Law) (Correct answer)

Correct answer: The Stark Law (Physician Self-Referral Law)

The Stark Law is a strict liability statute that specifically prohibits physicians from making referrals for certain "designated health services" (DHS) payable by Medicare to an entity with which they or an immediate family member have a financial relationship, unless a specific exception applies.

Question 110: Which activity is an example of secondary data use in healthcare?

A physician reviewing a patient's medication list during a visit
A coder assigning a diagnosis code to a current encounter
A nurse documenting vital signs in the EHR
A researcher using de-identified records to study readmission rates (Correct answer)

Correct answer: A researcher using de-identified records to study readmission rates

Secondary data use involves using data originally collected for patient care for purposes such as research, quality improvement, or public health.

Question 111: What is the HIPAA Security Rule requirement for a designated security official?

Only hospitals need one
The security official must be a physician
It is optional for small practices
Every covered entity must designate a security official responsible for developing and implementing security policies (Correct answer)

Correct answer: Every covered entity must designate a security official responsible for developing and implementing security policies

This is a required standard; every covered entity must assign security responsibility to a specific individual.

Question 112: Which federal agency is primarily responsible for investigating healthcare fraud and abuse under the Medicare and Medicaid programs?

Centers for Medicare & Medicaid Services (CMS)
Office of Inspector General (OIG) of HHS (Correct answer)
The Joint Commission
Department of Justice Civil Division only

Correct answer: Office of Inspector General (OIG) of HHS

The OIG of HHS has primary authority to investigate fraud and abuse in Medicare and Medicaid and can impose exclusions and civil monetary penalties.

Question 113: What does the term 'incidence rate' measure in healthcare statistics?

The proportion of deaths among individuals diagnosed with a disease
The total number of existing cases of a disease in a population at a specific time
The number of new cases of a disease occurring in a population over a specific period (Correct answer)
The frequency of adverse events per 1,000 patient days

Correct answer: The number of new cases of a disease occurring in a population over a specific period

Incidence rate measures the number of NEW cases of a disease arising in a defined population over a specified time period.

Question 114: A facility transitions from paper to electronic records. During this period, which challenge is MOST critical for HIM professionals to manage?

Training staff on ICD-10-CM coding updates
Negotiating EHR vendor contracts
Ensuring record integrity and accessibility across both formats (Correct answer)
Converting all paper records to DICOM format

Correct answer: Ensuring record integrity and accessibility across both formats

During a hybrid transition, maintaining record integrity and ensuring all patient information is accessible regardless of format is the most critical HIM responsibility.

Question 115: When a patient is admitted for chemotherapy and also has the malignancy being treated, what is the correct principal diagnosis?

The secondary site if metastasis is present
The encounter for antineoplastic chemotherapy (Z51.11) (Correct answer)
The malignancy
A chemotherapy complication code

Correct answer: The encounter for antineoplastic chemotherapy (Z51.11)

Per ICD-10-CM guidelines, when the purpose of the encounter is chemotherapy, Z51.11 is sequenced as principal diagnosis.

Question 116: A primary care clinic needs to send a patient's summary of care record to a specialist at a different facility that uses a separate EHR system. To ensure the receiving system can process and interpret the data correctly, which standard is most commonly used for structuring this clinical document exchange?

NCPDP Script
ANSI X12
DICOM
Consolidated-Clinical Document Architecture (C-CDA) (Correct answer)

Correct answer: Consolidated-Clinical Document Architecture (C-CDA)

The Consolidated-Clinical Document Architecture (C-CDA) is an HL7 standard that provides a library of templates for clinical documents like summary of care records. It is the required standard under federal programs for creating and exchanging such documents to ensure interoperability between different certified EHR systems.

Question 117: Which statistical tool is BEST used to monitor whether a process is in statistical control over time?

Histogram
Scatter diagram
Control chart (Correct answer)
Pareto chart

Correct answer: Control chart

A control chart plots data points over time with upper and lower control limits, allowing quality teams to distinguish between common cause variation and special cause variation.

Question 118: Which HIPAA Security Rule safeguard category includes workforce training?

Physical safeguards
Technical safeguards
Administrative safeguards (Correct answer)
Organizational requirements

Correct answer: Administrative safeguards

Security awareness and training is an administrative safeguard.

Question 119: A health information system's ability to exchange and use information with other systems is best described as:

Redundancy
Interoperability (Correct answer)
Modularity
Scalability

Correct answer: Interoperability

Interoperability is the capacity of different systems to exchange, interpret, and use shared health information effectively.

Question 120: What is the key distinction between data accuracy and data precision?

Accuracy is about format; precision is about completeness
Accuracy reflects how close data is to the true value; precision reflects the level of detail or specificity (Correct answer)
Accuracy is a system property; precision is a user property
Accuracy applies to coded data; precision applies to free-text data

Correct answer: Accuracy reflects how close data is to the true value; precision reflects the level of detail or specificity

Accuracy means the data correctly represents the real-world value, while precision refers to the granularity or specificity of the data captured.

Question 121: Which system generates automated alerts to clinicians when a patient's orders may cause a drug-drug interaction?

Document Management System
Clinical Decision Support System (Correct answer)
Laboratory Information System
Pharmacy Information System

Correct answer: Clinical Decision Support System

Clinical Decision Support Systems (CDSS) analyze patient data against clinical rules to generate alerts, reminders, and recommendations.

Question 122: Which performance improvement methodology uses DMAIC (Define, Measure, Analyze, Improve, Control) as its framework?

Six Sigma (Correct answer)
Plan-Do-Study-Act (PDSA)
Total Quality Management (TQM)
Lean manufacturing

Correct answer: Six Sigma

Six Sigma uses the DMAIC framework as its structured approach to process improvement and variation reduction.

Question 123: A patient requests access to their complete medical record. Within what timeframe must the covered entity respond?

There is no required timeframe
Within 90 days
Within 30 days, with one 30-day extension if needed (Correct answer)
Immediately

Correct answer: Within 30 days, with one 30-day extension if needed

HIPAA requires action within 30 days with one possible 30-day extension.

Question 124: A coder finds a diagnosis documented as 'probable pneumonia' in an outpatient record. What is the correct coding approach?

Code the sign or symptom (e.g., cough, fever) that prompted the visit (Correct answer)
Use an uncertain diagnosis code from ICD-10-CM
Code pneumonia as confirmed
Leave the diagnosis uncoded and query the physician

Correct answer: Code the sign or symptom (e.g., cough, fever) that prompted the visit

Outpatient coding guidelines prohibit coding uncertain diagnoses; the coder should report the sign/symptom instead.

Question 125: Under the MS-DRG system, what is the primary factor that determines a patient's DRG assignment?

Attending physician specialty
Principal diagnosis with complications/comorbidities (CCs/MCCs) (Correct answer)
Number of procedures performed
Length of stay

Correct answer: Principal diagnosis with complications/comorbidities (CCs/MCCs)

MS-DRG assignment is driven primarily by the principal diagnosis and the presence of complications or comorbidities (CC/MCC) that affect resource use.

Question 126: A patient requests access to their own medical records. Under HIPAA, the covered entity must provide access within:

7 calendar days
60 calendar days
30 calendar days, with one possible 30-day extension (Correct answer)
10 business days

Correct answer: 30 calendar days, with one possible 30-day extension

HIPAA requires covered entities to act on a patient's request for access to their PHI within 30 days, with one permitted 30-day extension if the entity notifies the individual.

Question 127: Which of the following best describes the concept of 'de-identification' under HIPAA?

Requiring patient authorization before all disclosures
Encrypting records before sharing with business associates
Removing 18 specified identifiers so the information cannot identify an individual (Correct answer)
Limiting record access to treating physicians only

Correct answer: Removing 18 specified identifiers so the information cannot identify an individual

HIPAA's Safe Harbor de-identification method requires removal of 18 specific identifiers, after which the information is no longer considered PHI and HIPAA restrictions no longer apply.

Question 128: A physician documents a progress note using a copy-paste function from a previous day's note without updating the clinical information. This practice is MOST problematic because it:

Increases documentation time unnecessarily
May introduce inaccurate or outdated information into the current record (Correct answer)
Creates a source-oriented record format
Violates physician credentialing requirements

Correct answer: May introduce inaccurate or outdated information into the current record

Copy-paste or 'cloning' documentation risks perpetuating outdated or inaccurate clinical information, which can harm patient safety and coding accuracy.

Question 129: The term 'upcoding' in the context of revenue cycle compliance refers to:

Correcting a previously submitted claim
Assigning a higher-level code than documented to increase reimbursement (Correct answer)
Assigning a lower-level code than documented to reduce costs
Adding a modifier to justify a service

Correct answer: Assigning a higher-level code than documented to increase reimbursement

Upcoding is a fraudulent billing practice of assigning codes that reflect higher-complexity or more expensive services than were actually documented or performed.

Question 130: Which organization publishes the data quality management model widely referenced in health information management?

CMS
The Joint Commission
AHIMA (Correct answer)
ONC

Correct answer: AHIMA

AHIMA published the Data Quality Management Model, which identifies key dimensions and processes for managing health data quality.

Question 131: Which condition would most likely trigger a CDI query for malnutrition?

Patient BMI of 22 with no dietary concerns
Patient requested a vegetarian meal tray
Albumin of 2.1 g/dL and physician documents only 'poor appetite' (Correct answer)
Patient ate a full meal on day 2 of admission

Correct answer: Albumin of 2.1 g/dL and physician documents only 'poor appetite'

A low albumin combined with incomplete documentation suggests malnutrition may be present but underdocumented, warranting a physician query.

Question 132: Which of the following individuals has the right to authorize release of a deceased patient's records?

No one; deceased records can never be released
Any family member of the deceased
The deceased patient's personal representative or estate executor (Correct answer)
The attending physician at time of death

Correct answer: The deceased patient's personal representative or estate executor

After a patient's death, the personal representative (such as an estate executor) holds the rights to authorize disclosure of the deceased patient's PHI.

Question 133: Which standard terminology is most commonly used to capture clinical concepts for interoperability across health systems?

DRG
SNOMED CT (Correct answer)
ICD-10-CM
CPT

Correct answer: SNOMED CT

SNOMED CT is a comprehensive clinical terminology designed for interoperability and semantic consistency across different health information systems.

Question 134: A provider dictates a discharge summary and, upon review, realizes they stated the incorrect dosage for a medication. The electronic health record (EHR) system allows for amendments. What is the proper procedure for correcting this error?

Create an addendum to the original note, clearly stating the correction, the reason for the change, and including the current date and time. (Correct answer)
Overwrite the incorrect dosage in the original note with the correct information.
Delete the original dictated note and re-dictate the entire summary with the correct information.
Notify the IT department to have the original entry purged from the system.

Correct answer: Create an addendum to the original note, clearly stating the correction, the reason for the change, and including the current date and time.

The proper procedure for correcting an error in an EHR is to create a dated and signed addendum that clarifies the incorrect information. The original entry should not be deleted or overwritten to maintain the integrity of the legal health record and provide a clear audit trail.

Question 135: In healthcare information systems, 'throughput' refers to:

The volume of transactions or data a system can process in a given time period (Correct answer)
The speed of data entry by clinical staff
The physical storage capacity of a server
The number of authorized users on the system

Correct answer: The volume of transactions or data a system can process in a given time period

Throughput measures how many transactions, messages, or operations a system can handle per unit of time.

Question 136: A hospital's case mix index (CMI) increased from 1.45 to 1.62 over one year. What is the most likely implication?

The average length of stay has decreased
The hospital is treating less complex patients on average
The hospital is treating more complex patients, leading to higher expected reimbursement (Correct answer)
The hospital's mortality rate has increased

Correct answer: The hospital is treating more complex patients, leading to higher expected reimbursement

A rising CMI indicates the hospital is treating more resource-intensive patients, which typically results in higher MS-DRG reimbursement.

Question 137: A patient requests an amendment to their medical record, stating that a diagnosis is incorrect. The covered entity may deny the request if:

The patient has already inspected the record
The record was created more than 6 years ago
The amendment would require changing more than one document
The provider believes the record is accurate and complete (Correct answer)

Correct answer: The provider believes the record is accurate and complete

Under 45 CFR §164.526, a covered entity may deny an amendment if it reasonably believes the information is accurate and complete.

Question 138: A patient's blood type is recorded as 'AB+' in two different systems but 'AB positive' in a third. This is a problem with which data quality dimension?

Accuracy
Completeness
Consistency (Correct answer)
Granularity

Correct answer: Consistency

Consistency means the same data element is represented in the same way across all systems.

Question 139: A health information manager calculates a hospital's net autopsy rate. Which deaths are EXCLUDED from the denominator?

Deaths of patients over age 65
Deaths where the bodies were removed before an autopsy could be performed (Correct answer)
Deaths occurring in the emergency department
Deaths of patients who were hospitalized less than 24 hours

Correct answer: Deaths where the bodies were removed before an autopsy could be performed

The net autopsy rate excludes from the denominator those cases where the body was removed by legal authorities before an autopsy could be performed.

Question 140: Which of the following must be included in an accounting of disclosures provided to a patient?

Disclosures made without authorization for purposes other than TPO (Correct answer)
All disclosures for treatment, payment, and operations
Internal uses of PHI by healthcare staff
Disclosures for which the patient signed an authorization

Correct answer: Disclosures made without authorization for purposes other than TPO

Accounting of disclosures covers disclosures made without authorization, excluding those for treatment, payment, and operations.

Question 141: A HIM department uses a capital budget to purchase a new chart scanning system for $80,000. What distinguishes a capital budget from an operational budget?

Capital budgets are for major long-term assets; operational budgets cover day-to-day expenses (Correct answer)
Capital budgets require board approval; operational budgets do not
Capital budgets cover salaries; operational budgets cover equipment
Capital budgets are set annually; operational budgets are set monthly

Correct answer: Capital budgets are for major long-term assets; operational budgets cover day-to-day expenses

Capital budgets fund major long-term investments like equipment or facilities, while operational budgets cover recurring day-to-day expenses like supplies and salaries.

Question 142: Which of the following documentation practices supports accurate MS-DRG assignment?

Documenting 'rule out' diagnoses as confirmed
Listing all diagnoses alphabetically
Avoiding documentation of secondary diagnoses
Clearly documenting complications and comorbidities (CCs) and major CCs (MCCs) (Correct answer)

Correct answer: Clearly documenting complications and comorbidities (CCs) and major CCs (MCCs)

Documenting CCs and MCCs is critical because they affect MS-DRG grouping, which determines inpatient reimbursement under Medicare.

Question 143: Which of the following is the BEST example of secondary use of health record data?

A nurse documenting vital signs during a patient's visit
A physician reviewing a patient's allergy list before prescribing
A pharmacist verifying a medication order
A researcher using de-identified patient data to study disease trends (Correct answer)

Correct answer: A researcher using de-identified patient data to study disease trends

Secondary use refers to using health data for purposes other than direct patient care, such as research, quality improvement, or public health reporting.

Question 144: What is a prior authorization?

Authorization to access a medical record
A requirement to obtain health plan approval before providing certain services (Correct answer)
A physician's order for medication
Authorization from a patient's family

Correct answer: A requirement to obtain health plan approval before providing certain services

Prior authorization requires health plan approval before specific services are provided, verifying medical necessity.

Question 145: What is the HIPAA 'accounting of disclosures' requirement?

An inventory of computer equipment
An accounting of financial transactions
A record of employee access to the building
The right of patients to receive a list of certain disclosures of their PHI during the prior six years (Correct answer)

Correct answer: The right of patients to receive a list of certain disclosures of their PHI during the prior six years

Patients can request an accounting of PHI disclosures made in the six years prior to the request.

Question 146: How soon after surgery must an operative report be documented?

At discharge only
Within one week
Within 48 hours
Immediately after surgery with a brief note, and full report within 24 hours (Correct answer)

Correct answer: Immediately after surgery with a brief note, and full report within 24 hours

A brief operative note must be written immediately; the full report must be available within 24 hours.

Question 147: What is the typical role of the Health Information Management Committee?

To manage patient transportation
To manage the physical plant
To oversee documentation practices, forms design, record retention, and information governance policies (Correct answer)
To hire physicians

Correct answer: To oversee documentation practices, forms design, record retention, and information governance policies

The HIM Committee oversees health record documentation standards, forms management, and information governance.

Question 148: Which of the following is the greatest option for a healthcare institution looking for a classification system to quantify levels of functional ability and disability?

ICF (Correct answer)
ICD-O
LOINC
ICPC

Correct answer: ICF

ICF (International Classification of Functioning, Disability, and Health) is the best alternative for a healthcare organization looking for a classification system to measure degrees of functioning, disability, and health. The ICF is divided into 4 code components: Part I: Body Structure and Body Function: Functioning and Disability. Part II: Environmental factors, activities, and participation within the context. Impairment is rated on a scale of 0 to 4, with a code 8 denoting ""not specified"" and a 9 denoting ""not applicable.""

Question 149: A hospital conducts a Failure Mode and Effects Analysis (FMEA) before implementing a new medication administration process. This is an example of:

Proactive risk assessment (Correct answer)
Retrospective auditing
Retrospective quality review
Concurrent utilization review

Correct answer: Proactive risk assessment

FMEA is a proactive tool used to identify potential failure points and their consequences before a process is implemented, allowing teams to prevent problems before they occur.

Question 150: A patient is admitted for pneumonia and develops a urinary tract infection during the hospital stay. How should the UTI be classified?

Hospital-acquired condition (Correct answer)
Admitting diagnosis
Principal diagnosis
Comorbidity

Correct answer: Hospital-acquired condition

A condition that develops during the hospital stay and was not present at admission is classified as a hospital-acquired condition (HAC).

Question 151: A hospital's HIM department is reorganized to include a project manager who reports to both the HIM director and the IT director simultaneously. This describes which organizational structure?

Matrix structure (Correct answer)
Flat structure
Line structure
Functional structure

Correct answer: Matrix structure

A matrix structure allows employees to report to two or more managers, typically combining functional and project-based authority.

RHIT (Registered Health Information Technician) Exam

The RHIT (Registered Health Information Technician) Exam exam validates essential knowledge and skills required for certification or licensure in this field.

150

Questions

200 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds