RHIT (Registered Health Information Technician) Exam — Questions and Answers

Question 1: What is the correct definition of the 'principal diagnosis' in inpatient coding?

The condition established after study to be chiefly responsible for occasioning the admission (Correct answer)
The diagnosis with highest reimbursement
The most severe diagnosis
The first diagnosis listed by the physician

Correct answer: The condition established after study to be chiefly responsible for occasioning the admission

The principal diagnosis is the condition chiefly responsible for the admission, determined after study.

Question 2: Which ambulatory payment classification (APC) system is used to reimburse Medicare outpatient hospital services?

Outpatient Prospective Payment System (OPPS) (Correct answer)
Resource-Based Relative Value Scale (RBRVS)
Prospective Payment System (PPS) for SNFs
Inpatient Prospective Payment System (IPPS)

Correct answer: Outpatient Prospective Payment System (OPPS)

OPPS groups outpatient services into APCs and pays a predetermined rate per APC, used by Medicare for hospital outpatient reimbursement.

Question 3: Which CPT code range covers Evaluation and Management (E/M) services for hospital inpatient initial care?

99231–99233
99221–99223 (Correct answer)
99201–99215
99241–99245

Correct answer: 99221–99223

CPT codes 99221–99223 are used for initial hospital inpatient care, with varying levels of complexity.

Question 4: The Genetic Information Nondiscrimination Act (GINA) Title II prohibits employers from using genetic information in employment decisions. In the context of HIPAA, genetic information is classified as:

Excluded from PHI protections
A type of PHI that is generally prohibited from use for underwriting purposes by health plans (Correct answer)
Protected only if it relates to a current diagnosis
Freely disclosable with patient authorization

Correct answer: A type of PHI that is generally prohibited from use for underwriting purposes by health plans

HIPAA, as amended by GINA, prohibits health plans from using genetic information for underwriting and treats it as a type of PHI.

Question 5: Which statistical measure is most appropriate when data is highly skewed and contains significant outliers?

Mode
Range
Median (Correct answer)
Mean

Correct answer: Median

The median is preferred for skewed data because it is not affected by extreme values (outliers) the way the mean is.

Question 6: Under the False Claims Act, what term describes an employee who reports employer fraud against the federal government and is protected from retaliation?

Adverse event reporter
Sentinel reporter
Whistleblower / Qui tam relator (Correct answer)
Compliance officer

Correct answer: Whistleblower / Qui tam relator

The False Claims Act protects employees who report fraud as whistleblowers (qui tam relators) and may award them a portion of recovered funds.

Question 7: A hospital's coding department finds a pattern of overcoding that resulted in overpayments from Medicare. Under the 60-Day Rule, the hospital must report and return the overpayment within 60 days of:

The date the overpayment is identified (Correct answer)
The date the OIG issues a subpoena
The date the overpayment occurred
The end of the fiscal year

Correct answer: The date the overpayment is identified

Under the 60-Day Rule (ACA Section 6402), overpayments must be reported and returned within 60 days of identification to avoid False Claims Act liability.

Question 8: To ensure the integrity of a health record, an RHIT is performing a quality audit. Which of the following is a key characteristic of data quality and integrity?

Complexity
Timeliness (Correct answer)
Brevity
Subjectivity

Correct answer: Timeliness

Timeliness is a core tenet of data quality in healthcare. For patient care and other processes like billing and public health reporting, information must be documented and available in a timely manner to be useful and reflect the current state of the patient. Other characteristics of data quality include accuracy, completeness, consistency, and validity.

Question 9: Which statistical tool is BEST used to monitor whether a process is in statistical control over time?

Scatter diagram
Histogram
Control chart (Correct answer)
Pareto chart

Correct answer: Control chart

A control chart plots data points over time with upper and lower control limits, allowing quality teams to distinguish between common cause variation and special cause variation.

Question 10: The Anti-Kickback Statute (AKS) prohibits offering, paying, soliciting, or receiving remuneration to induce referrals for items or services covered by federal healthcare programs. Which category provides legal protection for certain business arrangements?

Stark Law exceptions
Safe harbors (Correct answer)
Compliance shields
Non-prosecution agreements

Correct answer: Safe harbors

OIG safe harbors describe specific arrangements that, if structured correctly, are protected from AKS prosecution.

Question 11: A health information professional is reviewing a p-value of 0.03 from a statistical test. What does this mean?

The result is not statistically significant
The effect size is clinically meaningful
There is a 3% probability the null hypothesis is true
There is a 3% probability the observed result occurred by chance if the null hypothesis were true (Correct answer)

Correct answer: There is a 3% probability the observed result occurred by chance if the null hypothesis were true

A p-value of 0.03 means there is a 3% probability of observing results as extreme as these if the null hypothesis were true.

Question 12: A health information technician finds that a physician has not completed a required discharge summary 30 days after patient discharge. This situation is documented through which process?

Compliance auditing
Utilization review
Concurrent coding
Deficiency analysis (Correct answer)

Correct answer: Deficiency analysis

Deficiency analysis is the HIM process of reviewing medical records for completeness and notifying providers of missing or late entries such as unsigned orders, missing history and physicals, or overdue discharge summaries.

Question 13: Which term describes the process of replacing specific patient identifiers with codes to protect privacy while maintaining data usability?

Data segmentation
Data masking
De-identification (Correct answer)
Data encryption

Correct answer: De-identification

De-identification removes or obscures 18 HIPAA-specified identifiers so data cannot reasonably be linked back to an individual.

Question 14: An organization is implementing a new EHR and needs to migrate data from the legacy system. Which step is most critical before migration?

Printing all records
Conducting thorough data cleansing and mapping to ensure legacy data meets the new system's standards (Correct answer)
Training staff on the new system only
Deleting all old records

Correct answer: Conducting thorough data cleansing and mapping to ensure legacy data meets the new system's standards

Data cleansing and mapping before migration ensures legacy data is cleaned, standardized, and properly mapped.

Question 15: A data integrity audit reveals that a patient's blood type is recorded as Type A in the lab system but Type O in the EHR. What type of issue is this?

A consistency issue (Correct answer)
A granularity issue
An accessibility issue
A timeliness issue

Correct answer: A consistency issue

When the same data element has different values across systems, it represents a consistency issue.

Question 16: A clinical information system automatically flags a lab result that falls outside the reference range and notifies the ordering physician. This is an example of:

Clinical decision support with alerting (Correct answer)
Passive data collection
Population health surveillance
Automated billing workflow

Correct answer: Clinical decision support with alerting

Clinical decision support systems generate alerts when clinical data (like lab results) triggers defined rule thresholds.

Question 17: A covered entity discovers a potential breach. The HIPAA breach notification rule presumes that an impermissible use or disclosure is a breach unless:

The covered entity reports it to HHS within 24 hours
A low probability assessment shows the PHI was not compromised (Correct answer)
The data was encrypted at rest
The patient was notified within 10 days

Correct answer: A low probability assessment shows the PHI was not compromised

The covered entity can rebut the presumption of breach by demonstrating through a four-factor risk assessment that there is a low probability the PHI was compromised.

Question 18: What is the primary goal of a Clinical Documentation Improvement (CDI) program?

Increase the number of coded diagnoses per encounter
Eliminate all paper records from the health system
Reduce the number of patient admissions
Ensure physician documentation accurately reflects the severity of illness and quality of care (Correct answer)

Correct answer: Ensure physician documentation accurately reflects the severity of illness and quality of care

CDI programs ensure that physician documentation accurately and completely reflects the patient's clinical status to support accurate coding, reimbursement, and quality reporting.

Question 19: What is the purpose of Six Sigma in healthcare?

To increase patient volume
To standardize employee uniforms
To eliminate quality monitoring
To reduce variation and defects through a structured data-driven approach improving quality and efficiency (Correct answer)

Correct answer: To reduce variation and defects through a structured data-driven approach improving quality and efficiency

Six Sigma aims to reduce process variation and defects through the DMAIC framework.

Question 20: What is change management and why is it important for health information systems implementation?

Only needed for mergers
A structured approach to transitioning people and organizations from current to desired state, minimizing resistance (Correct answer)
The process of changing employee schedules
The process of changing insurance contracts

Correct answer: A structured approach to transitioning people and organizations from current to desired state, minimizing resistance

Change management provides a structured framework for guiding people through organizational changes.

Question 21: The account's guarantor is the?

insurance company that will provide payment for claims.
the person show is responsible for signing consent forms.
the person who is responsible for paying bills not paid for by insurance. (Correct answer)
the person for whom the account is established.

Correct answer: the person who is responsible for paying bills not paid for by insurance.

The individual in charge of covering uninsured expenses on an account is known as the guarantor. This might sometimes be the person for whom the account is set up, but it might also be a parent or another person. The name, address, and contact details (phone number, email address) of the guarantor must be kept on file for billing purposes if the patient is not the person responsible for the account.

Question 22: What does the term 'upcoding' refer to?

Assigning the most current code version
Assigning a code for a more complex condition than documented to obtain higher reimbursement (Correct answer)
Converting ICD-9 to ICD-10 codes
Using updated CPT codes

Correct answer: Assigning a code for a more complex condition than documented to obtain higher reimbursement

Upcoding is assigning a code representing higher severity than what documentation supports.

Question 23: A hospital's system remains fully operational when one server fails because workload automatically shifts to a redundant server. This capability is called:

Scalability
Load balancing
Data mirroring
Failover (Correct answer)

Correct answer: Failover

Failover is the automatic switching to a standby system when the primary system fails, ensuring continuous availability.

Question 24: A healthcare worker reports suspected Medicare fraud through the qui tam provision. What protection does this whistleblower receive?

No protection
Protection from retaliation plus potential financial reward from government recovery (Correct answer)
Automatic promotion to compliance officer
Immunity from all future legal proceedings

Correct answer: Protection from retaliation plus potential financial reward from government recovery

The FCA's qui tam provision protects whistleblowers from employer retaliation and entitles them to 15-30% of any government recovery.

Question 25: What is the difference between authentication and authorship in health records?

Authorship identifies who created the entry while authentication confirms it through a signature (Correct answer)
They are the same thing
Authentication creates the entry
Neither applies to electronic records

Correct answer: Authorship identifies who created the entry while authentication confirms it through a signature

Authorship identifies who created the entry, while authentication is formally confirming and approving it.

Question 26: What is unbundling in medical coding and why is it a compliance concern?

Required for Medicare claims
Removing codes from a claim
A legitimate coding practice
Fraudulently billing separately for services that should be reported under a single comprehensive code (Correct answer)

Correct answer: Fraudulently billing separately for services that should be reported under a single comprehensive code

Unbundling is billing component services separately when a comprehensive code should be used, resulting in inappropriate higher reimbursement.

Question 27: What is a data audit trail in the context of health information management?

A report comparing data across facilities
A list of coding errors found during chart review
A summary of data quality scores by department
A chronological record of when data was created, accessed, or modified (Correct answer)

Correct answer: A chronological record of when data was created, accessed, or modified

An audit trail documents who accessed or changed data, when, and what was changed, supporting data integrity.

Question 28: What is the primary purpose of healthcare data analytics in health information management?

To replace clinical judgment
To eliminate the need for medical coding
To transform raw health data into actionable insights for improving care quality, operations, and outcomes (Correct answer)
To automate patient scheduling

Correct answer: To transform raw health data into actionable insights for improving care quality, operations, and outcomes

Healthcare data analytics transforms raw data into meaningful insights that support evidence-based decision making.

Question 29: A healthcare organization is conducting a risk analysis as part of its HIPAA Security Rule compliance. Which of the following is an example of a required technical safeguard?

Developing a security awareness and training program for the workforce.
Positioning computer monitors to prevent viewing by unauthorized persons.
Implementing audit controls to record and examine activity in information systems containing ePHI. (Correct answer)
Establishing a data backup and disaster recovery plan.

Correct answer: Implementing audit controls to record and examine activity in information systems containing ePHI.

Technical safeguards under the HIPAA Security Rule involve the technology and the policies for its use to protect electronic PHI (ePHI). Audit controls, which are mechanisms to record and examine system activity, are a required technical safeguard. Security training and contingency plans are administrative safeguards, while monitor positioning is a physical safeguard.

Question 30: What is the primary purpose of the master patient index (MPI)?

To uniquely identify each patient and link their records within a facility (Correct answer)
To store scanned images of health records
To track physician credentialing information
To manage insurance eligibility verification

Correct answer: To uniquely identify each patient and link their records within a facility

The MPI is the cornerstone database that uniquely identifies every patient and links all of their records within a healthcare organization.

Question 31: Which federal regulation primarily governs the release of patient health information by covered entities?

The Stark Law
The False Claims Act
The HIPAA Privacy Rule (Correct answer)
The HITECH Act

Correct answer: The HIPAA Privacy Rule

The HIPAA Privacy Rule establishes national standards for the protection of individually identifiable health information and governs when and how it may be disclosed.

Question 32: In ICD-10-PCS, what does the term 'root operation' refer to?

The surgeon who performed the procedure
The operating room location
The objective of the procedure defining the specific action taken on the body part (Correct answer)
The anesthesia type

Correct answer: The objective of the procedure defining the specific action taken on the body part

The root operation (third character) defines the objective or purpose of the procedure.

Question 33: Under the HIPAA Privacy Rule, which of the following does NOT require patient authorization for disclosure?

Disclosure to a public health authority for disease reporting (Correct answer)
Disclosure to a marketing firm for promotional purposes
Disclosure to an employer for pre-employment screening
Disclosure to a life insurance company for underwriting

Correct answer: Disclosure to a public health authority for disease reporting

Disclosures to public health authorities for mandated disease reporting are a permitted use under HIPAA that does not require patient authorization.

Question 34: In systems analysis, a use case diagram is primarily used to illustrate:

Interactions between users (actors) and system functions (Correct answer)
The physical network layout of servers
Hardware specifications for system components
The logical flow of data through a database

Correct answer: Interactions between users (actors) and system functions

Use case diagrams depict how actors (users or external systems) interact with the system's functional capabilities.

Question 35: What is the difference between an EHR and an EMR?

An EMR is newer technology
They are the same thing
An EHR is for hospitals only
An EMR is a single provider's digital chart while an EHR is designed to share information across multiple providers (Correct answer)

Correct answer: An EMR is a single provider's digital chart while an EHR is designed to share information across multiple providers

An EMR is the digital version of a chart within a single practice, while an EHR is designed to move with the patient across organizations.

Question 36: A health information technician is creating a new user account for a recently hired coder. The technician grants the coder access to view patient records, assign codes, and query physicians, but restricts access to financial and billing systems. This practice is an example of which HIPAA Security Rule concept?

Contingency planning
Encryption
Risk analysis
Role-based access control (RBAC) (Correct answer)

Correct answer: Role-based access control (RBAC)

Role-based access control (RBAC) is an access control method where permissions are assigned based on a user's job function. This aligns with the HIPAA 'minimum necessary' standard, which requires that access to PHI is limited to only what is needed to perform a specific job.

Question 37: Which ICD-10-CM code category is used to report the external cause of an injury (e.g., fall from a ladder)?

V–Y codes (Correct answer)
Z codes
T codes
S codes

Correct answer: V–Y codes

ICD-10-CM chapters V–Y (V00–Y99) contain external cause codes describing how, where, and under what circumstances injuries occurred.

Question 38: What is the key distinction between data accuracy and data precision?

Accuracy is about format; precision is about completeness
Accuracy reflects how close data is to the true value; precision reflects the level of detail or specificity (Correct answer)
Accuracy is a system property; precision is a user property
Accuracy applies to coded data; precision applies to free-text data

Correct answer: Accuracy reflects how close data is to the true value; precision reflects the level of detail or specificity

Accuracy means the data correctly represents the real-world value, while precision refers to the granularity or specificity of the data captured.

Question 39: Which of the following entries in a health record would be considered an unauthorized alteration?

Deletion of a prior erroneous entry with no notation (Correct answer)
Correction with a single line through the error, dated and initialed
Addendum added by the treating physician with current date and time
Late entry labeled as such with date, time, and provider signature

Correct answer: Deletion of a prior erroneous entry with no notation

Deleting an entry without notation constitutes falsification of the health record; errors must be corrected through approved amendment procedures.

Question 40: Which type of chart is most commonly used in statistical process control (SPC) to monitor whether a healthcare process is in control over time?

Histogram
Fishbone diagram
Control chart (Correct answer)
Pareto chart

Correct answer: Control chart

Control charts plot process data over time with upper and lower control limits to determine if a process is stable and in control.

Question 41: What role does the HIM professional play in an organization's compliance program?

Only attending meetings
No role
Only paper shredding
Contributing to coding compliance, documentation integrity, privacy and security compliance, and data governance (Correct answer)

Correct answer: Contributing to coding compliance, documentation integrity, privacy and security compliance, and data governance

HIM professionals play a central role in coding, documentation, privacy, and data governance compliance.

Question 42: What is the first step in the healthcare revenue cycle?

Claims submission
Payment posting
Accounts receivable follow-up
Patient pre-registration and scheduling including insurance verification (Correct answer)

Correct answer: Patient pre-registration and scheduling including insurance verification

The revenue cycle begins with pre-registration, insurance verification, and eligibility confirmation.

Question 43: Which type of code would be utilized in HCPCS level II for medications that are not taken orally, such as chemotherapy treatments and inhalational medications?

D codes
A codes
E codes
J codes (Correct answer)

Correct answer: J codes

J codes are used in HCPSC level II codes for medications not used orally, such as chemotherapy treatments and inhalation medications. Transportation services like ground and air ambulance are designated with A codes. The American Dental Association (ADA) owns the copyright to the CDT code set, which includes D codes, which are used for dental treatments. E codes are used for durable medical equipment, including oxygen equipment and supplies and bathtub wall rails.

Question 44: A health information manager wants to create a visual presentation to show the trend of hospital-acquired infection rates over the past five years. Which of the following data display tools would be most effective for this purpose?

Histogram
Line Graph (Correct answer)
Scatter Plot
Pie Chart

Correct answer: Line Graph

A line graph is the best tool for displaying trends or changes in a variable over a period of time. A pie chart shows parts of a whole, a histogram shows frequency distribution, and a scatter plot shows the relationship between two different variables.

Question 45: Data 'currency' (also called timeliness) is most critical in which of the following situations?

Running an annual coding productivity report
Archiving historical discharge summaries
Generating a five-year trend analysis of DRG weights
Alerting a physician to a critical lab value (Correct answer)

Correct answer: Alerting a physician to a critical lab value

Timeliness is most critical when a delay in data availability could affect clinical decision-making or patient safety.

Question 46: A patient requests access to their complete medical record. Within what timeframe must the covered entity respond?

There is no required timeframe
Immediately
Within 30 days, with one 30-day extension if needed (Correct answer)
Within 90 days

Correct answer: Within 30 days, with one 30-day extension if needed

HIPAA requires action within 30 days with one possible 30-day extension.

Question 47: What is the purpose of a clinical documentation improvement (CDI) program?

To eliminate paper records
To reduce the number of pages in medical records
To ensure complete and accurate documentation that reflects patient acuity and supports proper coding (Correct answer)
To train physicians on using EHR systems

Correct answer: To ensure complete and accurate documentation that reflects patient acuity and supports proper coding

CDI programs work to ensure clinical documentation accurately reflects severity of illness and complexity of care.

Question 48: When implementing a new EHR, the team creates a parallel environment identical to production to test upgrades without affecting live operations. This is called a:

Disaster recovery environment
Sandbox environment
Test/staging environment (Correct answer)
Production mirror

Correct answer: Test/staging environment

A test or staging environment replicates the production setup and is used to safely validate changes before live deployment.

Question 49: Which of the following is an example of a TECHNICAL safeguard required by the HIPAA Security Rule?

Using unique user IDs and automatic log-off procedures for computer systems. (Correct answer)
Positioning computer monitors to prevent casual viewing by the public.
Developing a security awareness and training program for staff.
Implementing policies and procedures for workstation use.

Correct answer: Using unique user IDs and automatic log-off procedures for computer systems.

Technical safeguards are the technology and related policies used to protect and control access to ePHI. Unique user IDs, access controls, and automatic log-offs are technology-based measures. Security training and workstation use policies are administrative safeguards, while positioning monitors is a physical safeguard.

Question 50: Which data quality characteristic ensures that a data element has a value whenever it is required and is not left blank?

Completeness (Correct answer)
Timeliness
Accuracy
Consistency

Correct answer: Completeness

Completeness ensures that all required data fields contain values and that no required information is missing.

Question 51: Which activity is an example of secondary data use in healthcare?

A nurse documenting vital signs in the EHR
A physician reviewing a patient's medication list during a visit
A researcher using de-identified records to study readmission rates (Correct answer)
A coder assigning a diagnosis code to a current encounter

Correct answer: A researcher using de-identified records to study readmission rates

Secondary data use involves using data originally collected for patient care for purposes such as research, quality improvement, or public health.

Question 52: In the month of June, a 150-bed hospital had a total of 3,600 inpatient service days. The hospital discharged 450 patients during the same period. What was the average length of stay (ALOS) for June?

24.0 days
3.3 days
0.125 days
8.0 days (Correct answer)

Correct answer: 8.0 days

The average length of stay (ALOS) is calculated by dividing the total inpatient service days (also known as discharge days) by the total number of discharges during a specific period. In this case, 3,600 days / 450 discharges = 8.0 days.

Question 53: In CPT coding, what distinguishes a 'new patient' from an 'established patient' for E/M office visit codes?

A new patient has never visited any provider in the same specialty within the same group practice in the past 3 years (Correct answer)
A new patient has never visited the specific physician before, regardless of group affiliation
A new patient has not been seen by the practice in the past 12 months
A new patient is one whose medical records have not yet been transferred to the practice

Correct answer: A new patient has never visited any provider in the same specialty within the same group practice in the past 3 years

CPT defines a new patient as one who has not received face-to-face professional services from the physician or any physician of the same specialty in the same group practice within the past three years.

Question 54: When analyzing patient satisfaction survey data, an RHIT encounters a question where patients rate their overall experience on a scale of 'Poor,' 'Fair,' 'Good,' or 'Excellent.' What type of data does this represent?

Nominal
Ratio
Interval
Ordinal (Correct answer)

Correct answer: Ordinal

Ordinal data involves categories that have a natural, meaningful order or rank, but the intervals between the ranks are not necessarily equal. 'Poor' is less than 'Fair,' which is less than 'Good,' establishing a clear order. Nominal data has no order, while interval and ratio data have numerically equal intervals.

Question 55: What is a 'CC' (complication or comorbidity) in the context of MS-DRG assignment?

Any documented chronic disease
A secondary diagnosis that substantially increases hospital resource use (Correct answer)
A principal diagnosis that requires surgical intervention
A laboratory finding noted in the record

Correct answer: A secondary diagnosis that substantially increases hospital resource use

CCs are secondary diagnoses that increase resource consumption and affect MS-DRG grouping and hospital reimbursement.

Question 56: A patient asks a covered entity to restrict disclosure of PHI to their health plan for services paid out-of-pocket. The covered entity must:

Comply only if the service cost is under $500
Deny the request as it conflicts with billing requirements
Comply with the restriction (Correct answer)
Consult with the health plan before deciding

Correct answer: Comply with the restriction

Under the HITECH Act amendment to HIPAA, covered entities must honor a patient's request to restrict disclosure to a health plan when the patient has paid out-of-pocket in full.

Question 57: What is the correct sequencing when coding sepsis with an associated localized infection?

Code only the sepsis
Code the localized infection first, then sepsis
Code only the localized infection
Code the sepsis first, followed by the code for the localized infection (Correct answer)

Correct answer: Code the sepsis first, followed by the code for the localized infection

Per ICD-10-CM sepsis guidelines, the sepsis code is sequenced first, then the code for the associated localized infection.

Question 58: Which of the following is an example of a duplicate MPI entry?

The same patient registered twice under slightly different name spellings (Correct answer)
Two patients with the same name but different dates of birth
A patient seen at two different facilities in the same health system
A patient with both an inpatient and outpatient record

Correct answer: The same patient registered twice under slightly different name spellings

A duplicate MPI entry occurs when the same individual has been registered more than once, creating multiple records for a single patient.

Question 59: What is the correct action when ICD-10-CM instructs 'Code first the underlying condition' beneath a manifestation code?

Sequence the manifestation code first
Sequence the underlying condition code first, then the manifestation (Correct answer)
Assign both codes in any order
Use only the manifestation code

Correct answer: Sequence the underlying condition code first, then the manifestation

The etiology/manifestation convention requires the underlying disease to be sequenced first, followed by the manifestation.

Question 60: A coding professional unbundles a surgical procedure to maximize reimbursement. Under the National Correct Coding Initiative (NCCI), this practice is:

Prohibited because component codes are already included in the comprehensive code (Correct answer)
Acceptable when a modifier is appended
Required when procedures are performed in separate sessions
Permitted for outpatient claims only

Correct answer: Prohibited because component codes are already included in the comprehensive code

NCCI edits prohibit unbundling because component procedures are considered included in the comprehensive procedure code.

Question 61: How is the nosocomial infection rate calculated?

Infections x Admissions
Discharges / Infections x 100
Number of nosocomial infections / Number of discharges x 100 (Correct answer)
Patients admitted / Number of infections

Correct answer: Number of nosocomial infections / Number of discharges x 100

Nosocomial infection rate = (Number of hospital-acquired infections / Number of discharges) x 100.

Question 62: Which budgeting approach requires managers to justify every expense from zero each fiscal year, regardless of prior budget allocations?

Zero-based budgeting (Correct answer)
Incremental budgeting
Activity-based budgeting
Capital budgeting

Correct answer: Zero-based budgeting

Zero-based budgeting requires justification of all expenditures from scratch each year rather than using the prior year's budget as a baseline.

Question 63: A health information technician is performing a quality audit on the Emergency Department's patient records. They find several instances where the 'Time of Arrival' is recorded as later than the 'Time of Triage'. Which AHIMA data quality characteristic is being violated?

Consistency (Correct answer)
Accuracy
Comprehensiveness
Timeliness

Correct answer: Consistency

Consistency means that the data is reliable and the same across the entire patient encounter. In this scenario, the data is inconsistent because the time of arrival should logically precede the time of triage. While accuracy is related, consistency specifically addresses the logical coherence of data points within the record.

Question 64: In a health data quality review, a 'false positive' result from a validation rule would mean:

A missing value was automatically populated
A duplicate record was successfully merged
A valid record was incorrectly flagged as an error (Correct answer)
A truly erroneous record was correctly flagged

Correct answer: A valid record was incorrectly flagged as an error

A false positive occurs when a validation rule flags a record as problematic even though the data is actually correct.

Question 65: An HIM director wants to measure the reliability of coded diagnosis data across multiple coders. Which method would be MOST appropriate?

Reviewing the facility's case-mix index trend over time
Auditing the turnaround time for record completion
Conducting an inter-rater reliability study on a sample of records (Correct answer)
Running a duplicate record search on the MPI

Correct answer: Conducting an inter-rater reliability study on a sample of records

Inter-rater reliability testing measures how consistently different coders assign the same codes to identical clinical documentation. It directly assesses coding accuracy and consistency, which are core data quality dimensions for coded data.

Question 66: An ICD-10-CM code for a manifestation is being assigned. The coding guidelines and instructional notes in the Tabular List indicate a 'code first' note. What does this convention require the coder to do?

Sequence the manifestation code as the principal diagnosis.
Sequence the underlying etiology (cause) of the disease first, followed by the manifestation code. (Correct answer)
Assign only the manifestation code and ignore the underlying disease.
Query the physician to determine which code should be sequenced first.

Correct answer: Sequence the underlying etiology (cause) of the disease first, followed by the manifestation code.

The 'code first' instructional note found at the manifestation code in the Tabular List requires the coder to sequence the underlying condition (etiology) before the manifestation code. The manifestation code can never be the principal diagnosis.

Question 67: A hospital's net death rate is calculated using deaths that occur after how many hours of admission?

72 hours
48 hours (Correct answer)
24 hours
12 hours

Correct answer: 48 hours

The net death rate (also called net autopsy rate) excludes deaths occurring within 48 hours of admission, reflecting outcomes more attributable to hospital care.

Question 68: In the context of the Medicare Severity Diagnosis Related Group (MS-DRG) system, what does a higher relative weight indicate?

The patient stayed longer than the geometric mean length of stay
The case requires more resources and generates higher reimbursement (Correct answer)
The patient was discharged against medical advice
The diagnosis code requires additional documentation

Correct answer: The case requires more resources and generates higher reimbursement

A higher MS-DRG relative weight indicates greater resource consumption and results in higher Medicare reimbursement for that case.

Question 69: Following a failed suicide attempt, a patient spent 60 days in the psychiatric ward. The psychotherapy notes from the psychiatrist have been requested by the insurance provider. The proper response is to, right?

ask the psychiatrist for permission to send the notes.
refer the request to the ethics committee.
send a copy of the notes.
decline to send a copy of the notes. (Correct answer)

Correct answer: decline to send a copy of the notes.

The appropriate reaction is to reject to send a copy of the psychiatrist's psychotherapy records if a patient was hospitalized in the psychiatric unit for 60 days after making an unsuccessful suicide attempt. According to HIPAA, psychotherapy notes are not regarded as a component of the EHR and do not include information required for claims. Court orders and patient consent are also required for the release of psychotherapy notes.

Question 70: Which accreditation organization is primarily responsible for accrediting hospitals in the United States?

AAPC
CMS
AHIMA
The Joint Commission (Correct answer)

Correct answer: The Joint Commission

The Joint Commission is the primary accrediting body for hospitals in the United States.

Question 71: What role does data governance play in maintaining health data integrity?

It handles medical coding exclusively
It establishes organizational authority, policies, and accountability for data quality, security, and appropriate use (Correct answer)
It provides patient education materials
It manages physical server infrastructure

Correct answer: It establishes organizational authority, policies, and accountability for data quality, security, and appropriate use

Data governance establishes the framework of policies, standards, and accountabilities that ensure data is managed as a strategic asset.

Question 72: What is the purpose of an informed consent document?

To document that the patient was informed of risks, benefits, alternatives and voluntarily agreed to treatment (Correct answer)
To schedule follow-up appointments
To record dietary preferences
To record insurance information

Correct answer: To document that the patient was informed of risks, benefits, alternatives and voluntarily agreed to treatment

Informed consent documents that the patient received information about the proposed treatment and voluntarily agreed.

Question 73: A primary care clinic needs to send a patient's summary of care record to a specialist at a different facility that uses a separate EHR system. To ensure the receiving system can process and interpret the data correctly, which standard is most commonly used for structuring this clinical document exchange?

NCPDP Script
DICOM
Consolidated-Clinical Document Architecture (C-CDA) (Correct answer)
ANSI X12

Correct answer: Consolidated-Clinical Document Architecture (C-CDA)

The Consolidated-Clinical Document Architecture (C-CDA) is an HL7 standard that provides a library of templates for clinical documents like summary of care records. It is the required standard under federal programs for creating and exchanging such documents to ensure interoperability between different certified EHR systems.

Question 74: What is the standard length of time an adult acute care hospital must retain medical records according to most state regulations?

10 years
Varies by state but commonly 10 years after last encounter (Correct answer)
Indefinitely
5 years

Correct answer: Varies by state but commonly 10 years after last encounter

Medical record retention requirements vary by state, but most states require adult acute care records to be retained for approximately 10 years after the last encounter.

Question 75: What is the role of charge capture in the revenue cycle?

To ensure all billable services are accurately documented and entered into the billing system (Correct answer)
To monitor parking charges
To capture photographs
To record patient complaints

Correct answer: To ensure all billable services are accurately documented and entered into the billing system

Charge capture ensures every billable service and supply is recorded in the billing system.

Question 76: A patient's record shows a blood glucose of 450 mg/dL and the physician documents 'hyperglycemia.' A CDI specialist queries for diabetes mellitus with hyperglycemia. This query is appropriate because:

The physician must document diabetes for billing purposes
Hyperglycemia is always synonymous with diabetes
The coder wants to increase the DRG weight
Clinical indicators in the record support a more specific diagnosis (Correct answer)

Correct answer: Clinical indicators in the record support a more specific diagnosis

When clinical indicators such as lab values support a more specific diagnosis, a compliant query may be submitted to the physician for clarification.

Question 77: How should an HIM manager handle a team consistently not meeting coding productivity standards?

Investigate root causes through data analysis and staff input, then implement targeted solutions (Correct answer)
Double the productivity requirement
Ignore the problem
Immediately terminate underperforming staff

Correct answer: Investigate root causes through data analysis and staff input, then implement targeted solutions

An effective manager investigates underlying causes before implementing targeted solutions.

Question 78: Which leadership style is most appropriate when managing highly experienced, self-motivated HIM professionals who require little direction?

Coercive leadership
Autocratic leadership
Transactional leadership
Laissez-faire leadership (Correct answer)

Correct answer: Laissez-faire leadership

Laissez-faire leadership provides minimal direction and allows skilled, motivated employees to work autonomously, which suits experienced HIM professionals.

Question 79: Which coding guideline applies when a patient is admitted with a condition that develops into a more specific diagnosis during the stay?

Code the admitting diagnosis only
Code both the initial and final diagnoses
Use a Z code for uncertain diagnosis
Code the final confirmed diagnosis as the principal diagnosis (Correct answer)

Correct answer: Code the final confirmed diagnosis as the principal diagnosis

The UHDDS guideline requires coding the condition established after study as the principal diagnosis, not the admitting diagnosis.

Question 80: A hospital receives a subpoena for patient records without a court order. What is the appropriate response?

Deny all subpoenas without exception
Review the subpoena and follow applicable state law and HIPAA requirements before releasing (Correct answer)
Release records immediately without review
Release only billing records, not clinical records

Correct answer: Review the subpoena and follow applicable state law and HIPAA requirements before releasing

A subpoena alone does not automatically override HIPAA; the facility must review applicable state law and HIPAA requirements to determine the appropriate response.

Question 81: A HIM department implements a policy requiring all coding staff to obtain CCS certification within two years of hire. This is an example of which HR management function?

Compensation management
Training and development (Correct answer)
Employee relations
Workforce planning

Correct answer: Training and development

Requiring staff to obtain professional certifications is a training and development initiative aimed at improving employee skills and qualifications.

Question 82: What is the purpose of the Present on Admission (POA) indicator in inpatient coding?

To identify whether a condition was present at the time of the patient's admission (Correct answer)
To document the admitting physician's specialty
To record the time the patient arrived
To indicate the patient's insurance status

Correct answer: To identify whether a condition was present at the time of the patient's admission

The POA indicator identifies whether a diagnosis was present at the time of inpatient admission.

Question 83: Which element is required for a valid informed consent document in a health record?

Patient's insurance information
Attending physician's countersignature within 24 hours
Description of risks, benefits, and alternatives of the procedure (Correct answer)
Witness must be a licensed nurse

Correct answer: Description of risks, benefits, and alternatives of the procedure

Valid informed consent must include the nature of the procedure, its risks, benefits, and alternatives so the patient can make a voluntary decision.

Question 84: The term 'upcoding' in the context of revenue cycle compliance refers to:

Assigning a lower-level code than documented to reduce costs
Adding a modifier to justify a service
Correcting a previously submitted claim
Assigning a higher-level code than documented to increase reimbursement (Correct answer)

Correct answer: Assigning a higher-level code than documented to increase reimbursement

Upcoding is a fraudulent billing practice of assigning codes that reflect higher-complexity or more expensive services than were actually documented or performed.

Question 85: A concurrent record review identifies missing physician signatures on operative notes. This review supports which data quality goal?

Increasing data accessibility
Improving data granularity
Ensuring data completeness and accuracy (Correct answer)
Reducing data redundancy

Correct answer: Ensuring data completeness and accuracy

Concurrent review identifies documentation deficiencies while the patient is still in-house, improving completeness and accuracy.

Question 86: A patient is scheduled for a non-emergent MRI. The registration staff discovers that the patient's insurance plan requires pre-approval for this service. Failure to obtain this approval before the service is rendered will MOST likely result in which of the following?

A request for additional medical records from the payer.
An automatic charge adjustment by the provider.
A delay in patient scheduling only.
A claim denial for lack of prior authorization. (Correct answer)

Correct answer: A claim denial for lack of prior authorization.

Prior authorization is a process used by payers to determine if a service is medically necessary and covered before it is performed. Failing to secure a required prior authorization for a service typically leads to the payer denying the claim for that service, potentially leaving the provider with uncompensated care or making the patient responsible for the cost.

Question 87: A hospital reports a case fatality rate of 2.5% for a particular disease. What does this rate measure?

The number of deaths per 100,000 population
The proportion of diagnosed cases that result in death (Correct answer)
The probability of contracting the disease in a given year
The percentage of autopsies performed on disease victims

Correct answer: The proportion of diagnosed cases that result in death

Case fatality rate measures the proportion of individuals diagnosed with a disease who die from that disease.

Question 88: When coding a patient with type 2 diabetes mellitus and diabetic chronic kidney disease stage 3, what is the correct coding approach?

Code only the diabetes
Code only the CKD
Code the diabetes with CKD combination code, then add the CKD stage code (Correct answer)
Code CKD first, then diabetes as secondary

Correct answer: Code the diabetes with CKD combination code, then add the CKD stage code

ICD-10-CM provides combination codes for diabetes with complications; the CKD stage is coded additionally per guidelines.

Question 89: Which type of CDI query is sent while the patient is still admitted?

Denial management query
Retrospective query
Post-discharge query
Concurrent query (Correct answer)

Correct answer: Concurrent query

Concurrent queries are issued during the patient's stay, allowing physicians to update documentation before discharge, which is preferred for accuracy.

Question 90: Under the HIPAA Minimum Necessary standard, a request for PHI from another treating provider should be:

Honored with the full record since treatment is a permitted purpose
Routed through the hospital's legal department first
Denied unless the patient is present to authorize
Limited to only the information reasonably needed to accomplish the treatment purpose (Correct answer)

Correct answer: Limited to only the information reasonably needed to accomplish the treatment purpose

Even for permitted treatment purposes, the Minimum Necessary standard requires limiting disclosure to what is reasonably needed for that specific purpose.

Question 91: A CDI specialist reviews a record and notices a patient was treated for 'respiratory failure' but only 'pneumonia' is documented. What should the CDI specialist do?

Change the documentation to reflect respiratory failure
Ignore the discrepancy and code only what is documented
Code respiratory failure without physician documentation
Submit a query to the physician to clarify the diagnosis (Correct answer)

Correct answer: Submit a query to the physician to clarify the diagnosis

CDI specialists submit physician queries to clarify ambiguous or incomplete documentation rather than assuming or altering records.

Question 92: Under the HITECH Act, which entities became directly liable for HIPAA compliance?

Federal healthcare agencies
Business associates as well as covered entities (Correct answer)
Only covered entities with more than 50 employees
Health plans only

Correct answer: Business associates as well as covered entities

The HITECH Act extended direct HIPAA liability to business associates, meaning they are subject to HIPAA Security Rule requirements and civil and criminal penalties.

Question 93: What is a key difference between the designated record set (DRS) and the legal health record?

There is no difference; the terms are interchangeable under HIPAA
The legal health record includes all metadata and audit logs; the DRS does not
The DRS is used only for billing purposes
The DRS is broader and includes records used to make decisions about an individual; the legal health record is the organization's defined official record (Correct answer)

Correct answer: The DRS is broader and includes records used to make decisions about an individual; the legal health record is the organization's defined official record

The DRS, defined by HIPAA, is a broader set of records used in decision-making, while the legal health record is the facility-defined official business record.

Question 94: In ICD-10-PCS, which root operation would be assigned for the surgical removal of a kidney?

Destruction
Extraction
Excision
Resection (Correct answer)

Correct answer: Resection

Resection means cutting out or off all of a body part without replacement, which applies to complete organ removal.

Question 95: A claim for a Medicare patient is denied due to a National Correct Coding Initiative (NCCI) 'procedure-to-procedure' (PTP) edit. Which of the following is the most likely reason for this denial?

The claim was submitted on the wrong form type (e.g., UB-04 instead of CMS-1500).
Two procedures were billed that are considered mutually exclusive or one is a component of the other. (Correct answer)
The patient's insurance was not active on the date of service.
The diagnosis code did not support the medical necessity of the procedure.

Correct answer: Two procedures were billed that are considered mutually exclusive or one is a component of the other.

NCCI PTP edits are designed to prevent improper payment by bundling services that are considered components of a more comprehensive service or by identifying code pairs that are mutually exclusive and should not be billed together for the same patient on the same day. A denial based on a PTP edit indicates an incorrect combination of procedure codes was submitted.

Question 96: Under outpatient coding guidelines, which diagnosis should be reported first for a patient presenting with chest pain who is ruled out for MI?

A Z code for observation
Chest pain — the sign/symptom that led to the encounter (Correct answer)
Acute MI (since it was ruled out)
Atherosclerosis as the likely etiology

Correct answer: Chest pain — the sign/symptom that led to the encounter

For outpatients, signs and symptoms are coded when a definitive diagnosis has not been confirmed.

Question 97: An attorney presents a subpoena duces tecum for a patient's medical records for a civil lawsuit. The subpoena is not accompanied by a court order or patient authorization. What is the most appropriate initial action for the HIM professional?

Do not release the records until 'satisfactory assurances' are met or a court order is provided. (Correct answer)
Release a limited summary of the record under the 'minimum necessary' principle.
Release the records immediately to comply with the legal document.
Contact the patient by phone to obtain verbal consent for the release.

Correct answer: Do not release the records until 'satisfactory assurances' are met or a court order is provided.

Under HIPAA, a subpoena that is not signed by a judge (i.e., not a court order) is insufficient on its own to compel the release of PHI. The covered entity must first receive 'satisfactory assurances' from the party seeking the information that reasonable efforts were made to notify the patient of the request or that a qualified protective order has been secured. Without these assurances, a court order, or a valid patient authorization, the records cannot be released.

Question 98: What is the difference between 'assignment' and 'non-assignment' in Medicare billing?

There is no difference for patients
Assignment means accepting Medicare's allowed amount as full payment; non-assignment allows billing up to 115% of the fee schedule (Correct answer)
Assignment means Medicare pays more
Assignment means assigning a family member

Correct answer: Assignment means accepting Medicare's allowed amount as full payment; non-assignment allows billing up to 115% of the fee schedule

Participating providers accept the allowed amount; non-participating providers can charge up to the limiting charge.

Question 99: A hospital compares its infection rates against those of similar facilities nationally to identify areas for improvement. This practice is called:

Benchmarking (Correct answer)
Tracer methodology
Root cause analysis
Failure mode and effects analysis

Correct answer: Benchmarking

Benchmarking is the process of comparing an organization's performance metrics against industry standards or best-performing peers to identify improvement opportunities.

Question 100: An unexpected event involving patient death or serious injury that is not related to the natural course of illness is classified as a:

Sentinel event (Correct answer)
Variance
Adverse event
Near miss

Correct answer: Sentinel event

A sentinel event is an unexpected occurrence resulting in death or serious physical or psychological harm, requiring immediate investigation and response per Joint Commission standards.

Question 101: Which type of interview question asks candidates to describe how they handled a specific past situation, based on the premise that past behavior predicts future performance?

Situational interview question
Hypothetical interview question
Behavioral interview question (Correct answer)
Open-ended interview question

Correct answer: Behavioral interview question

Behavioral interview questions ask candidates about past experiences and actions, operating on the principle that past behavior is the best predictor of future behavior.

Question 102: Under the Health Care Quality Improvement Act (HCQIA), the National Practitioner Data Bank (NPDB) must be queried by hospitals when:

Only when a physician is suspected of malpractice
When a physician is reported to the state medical board
Only at initial credentialing, not at re-credentialing
Any physician applies for medical staff privileges and at least every two years thereafter (Correct answer)

Correct answer: Any physician applies for medical staff privileges and at least every two years thereafter

HCQIA requires hospitals to query the NPDB when practitioners apply for clinical privileges and at least every two years for ongoing credentialing.

Question 103: Which project management technique uses a visual bar chart to display a project schedule, showing task durations and dependencies over time?

Control chart
Gantt chart (Correct answer)
Fishbone diagram
PERT chart

Correct answer: Gantt chart

A Gantt chart is a horizontal bar chart that illustrates a project schedule by showing the start and end dates of project tasks.

Question 104: A physician's office is transitioning to a new certified EHR system. To maintain the integrity of patient records, the HIM professional is tasked with managing the Master Patient Index (MPI). What is the primary function of the MPI?

To serve as the primary repository for all clinical documentation.
To track the physical location of all paper-based health records.
To link a patient to their medical record numbers and prevent the creation of duplicate records. (Correct answer)
To process and submit all billing claims to third-party payers.

Correct answer: To link a patient to their medical record numbers and prevent the creation of duplicate records.

The Master Patient Index (MPI) is a critical database that maintains a unique identifier for each patient seen by the facility. Its primary function is to correctly link a patient to their health information, which can be spread across multiple systems, and to prevent the creation of duplicate records for the same patient. A clean MPI is essential for patient safety and data integrity.

Question 105: In healthcare IT, SOA stands for Service-Oriented Architecture. Its primary advantage for health information systems is:

Faster data entry by clinical staff
Elimination of paper records
Lower hardware costs
Reusable, loosely coupled services that can be shared across applications (Correct answer)

Correct answer: Reusable, loosely coupled services that can be shared across applications

SOA allows individual services (e.g., patient lookup) to be built once and reused across multiple applications, reducing duplication.

Question 106: During a routine chart review, an RHIT discovers that a nurse's signature is missing from a paper-based medication administration record that has already been scanned into the EHR. What is the appropriate action to take?

Follow the facility's policy for late entries or amendments to authenticate the entry. (Correct answer)
Add a digital note to the image stating the signature is missing.
Ignore the missing signature as the record is already electronic.
Delete the scanned image and ask the nurse to sign a blank form.

Correct answer: Follow the facility's policy for late entries or amendments to authenticate the entry.

A missing signature is a documentation deficiency. The correct procedure is to follow the established facility policy for authenticating records after the fact, which typically involves the original author signing and dating the entry as a late entry or addendum. This maintains the integrity of the original record while correcting the omission. Simply deleting the image or ignoring the issue would be inappropriate and could have legal consequences.

Question 107: Which of the following is a key responsibility of the HIM department regarding release of information (ROI)?

Deciding which treatments a patient should receive
Setting hospital admission policies
Verifying the validity of authorizations and ensuring only authorized information is disclosed (Correct answer)
Determining insurance coverage

Correct answer: Verifying the validity of authorizations and ensuring only authorized information is disclosed

The HIM department is responsible for verifying that all release of information requests include valid authorization.

Question 108: When coding an outpatient encounter without a definitive diagnosis, what should the coder assign?

No diagnosis code
Signs and symptoms codes that are documented and relevant (Correct answer)
The most probable diagnosis
A 'rule out' diagnosis code

Correct answer: Signs and symptoms codes that are documented and relevant

In outpatient settings, uncertain diagnoses are coded using signs and symptoms, not probable or suspected conditions.

Question 109: Which of the following best describes the HIPAA 'right to request confidential communications'?

Patients can block all disclosures to family members
Patients can require providers to never contact them
Patients can request that communications be made through alternative means or locations (Correct answer)
Patients can demand all records be encrypted

Correct answer: Patients can request that communications be made through alternative means or locations

Patients may request that covered entities communicate with them in a specific way or at a specific location, such as calling a work number instead of a home number.

Question 110: What does the term 'legal health record' refer to in a healthcare organization?

Only paper documents stored in the medical records department
A copy of the patient's record maintained by their attorney
The official business record of patient care that the organization would produce in response to legal proceedings (Correct answer)
The patient's billing record

Correct answer: The official business record of patient care that the organization would produce in response to legal proceedings

The legal health record is the subset of all patient information that constitutes the organization's official business record.

Question 111: In evaluating a new health information system, the measure that compares total expected costs against total expected benefits over a defined period is called a:

Feasibility study
Needs assessment
Gap analysis
Cost-benefit analysis (Correct answer)

Correct answer: Cost-benefit analysis

A cost-benefit analysis quantifies and compares the total costs and anticipated benefits of a system investment to determine financial viability.

Question 112: What is the HIPAA Security Rule requirement for a designated security official?

Only hospitals need one
The security official must be a physician
It is optional for small practices
Every covered entity must designate a security official responsible for developing and implementing security policies (Correct answer)

Correct answer: Every covered entity must designate a security official responsible for developing and implementing security policies

This is a required standard; every covered entity must assign security responsibility to a specific individual.

Question 113: What is the difference between a CC and an MCC in the MS-DRG system?

CCs apply to Medicare and MCCs to Medicaid
There is no difference
An MCC represents a more severe secondary condition with greater impact on resource utilization and higher-weighted DRG (Correct answer)
A CC is for surgical patients

Correct answer: An MCC represents a more severe secondary condition with greater impact on resource utilization and higher-weighted DRG

MCCs represent conditions with higher severity and greater resource consumption impact.

Question 114: What is the primary purpose of a data dictionary in healthcare organizations?

To track coding productivity
To define the meaning, format, and acceptable values for each data element (Correct answer)
To store patient demographic data
To generate compliance reports for payers

Correct answer: To define the meaning, format, and acceptable values for each data element

A data dictionary provides standardized definitions and rules for each data element, promoting consistent data use.

Question 115: What type of audit examines health records while the patient is still receiving care in the facility?

External audit
Concurrent review (Correct answer)
Prospective review
Retrospective review

Correct answer: Concurrent review

A concurrent review examines health records during the patient's current stay, allowing documentation issues to be addressed in real-time.

Question 116: An audit trail in an EHR system records which of the following?

Only failed login attempts
System hardware performance metrics
Who accessed or modified a record, what was changed, and when (Correct answer)
Backup and recovery operations only

Correct answer: Who accessed or modified a record, what was changed, and when

An audit trail logs user access events, record modifications, timestamps, and user identities to support accountability and compliance.

Question 117: What is required when a covered entity uses a business associate to perform functions involving PHI?

The business associate must obtain HIPAA certification
A Business Associate Agreement (BAA) specifying permitted uses and safeguards for PHI (Correct answer)
The covered entity must hire the business associate as an employee
Nothing, business associates have no HIPAA obligations

Correct answer: A Business Associate Agreement (BAA) specifying permitted uses and safeguards for PHI

HIPAA requires a BAA before sharing PHI with a business associate.

Question 118: What is the purpose of the Conditions of Admission form?

To waive privacy rights
To guarantee no billing
To establish general consent for routine treatment, assignment of insurance benefits, and acknowledgment of patient rights (Correct answer)
To guarantee a private room

Correct answer: To establish general consent for routine treatment, assignment of insurance benefits, and acknowledgment of patient rights

This form establishes general consent for routine care, authorizes information release for billing, and acknowledges patient rights.

Question 119: Which of the following conventions is used in ICD-10-CM when the information in the medical record provides detail for which a specific code does not exist?

NOS (Not Otherwise Specified)
Brackets [ ]
NEC (Not Elsewhere Classifiable) (Correct answer)
Excludes1 note

Correct answer: NEC (Not Elsewhere Classifiable)

The abbreviation NEC, or 'Not Elsewhere Classifiable,' is used when the provider's documentation is specific, but the ICD-10-CM classification system does not have a code that provides that level of specificity. NOS, or 'Not Otherwise Specified,' is used when the documentation itself is not specific enough to assign a more detailed code.

Question 120: Which of the following is a characteristic of the problem-oriented medical record (POMR)?

All entries are arranged in reverse chronological order
Documents are organized by the department that created them
Records are maintained exclusively in electronic format
Care is organized around a numbered problem list with SOAP-format progress notes (Correct answer)

Correct answer: Care is organized around a numbered problem list with SOAP-format progress notes

The POMR uses a numbered problem list as an index, and progress notes are written in SOAP (Subjective, Objective, Assessment, Plan) format for each problem.

Question 121: A patient's blood type is recorded as 'AB+' in two different systems but 'AB positive' in a third. This is a problem with which data quality dimension?

Accuracy
Granularity
Consistency (Correct answer)
Completeness

Correct answer: Consistency

Consistency means the same data element is represented in the same way across all systems.

Question 122: An HIM department wants to improve the accuracy of its coding, aiming for a defect rate of less than 3.4 per million opportunities. The team uses a structured, data-driven methodology involving defining, measuring, analyzing, improving, and controlling (DMAIC) the process. This approach is characteristic of which quality improvement framework?

Plan-Do-Check-Act (PDCA)
Six Sigma (Correct answer)
Total Quality Management (TQM)
Lean

Correct answer: Six Sigma

Six Sigma is a disciplined, data-driven quality improvement methodology focused on eliminating defects and reducing process variation. The DMAIC (Define, Measure, Analyze, Improve, Control) process and the goal of 3.4 defects per million opportunities are hallmarks of the Six Sigma framework.

Question 123: A modifier -25 is appended to an E/M code on the same day as a minor procedure. What does this indicate?

The E/M was a pre-operative evaluation only
A significant, separately identifiable E/M service was performed by the same physician on the same day as the procedure (Correct answer)
The procedure was bilateral
The E/M service was provided by a different physician

Correct answer: A significant, separately identifiable E/M service was performed by the same physician on the same day as the procedure

Modifier -25 signals that the E/M service was distinct from the procedure and warrants separate reimbursement.

Question 124: A patient's psychotherapy notes are requested by their primary care physician. Under HIPAA, these notes:

Can be released under the Treatment exception without authorization
Are subject to the same rules as other medical records
Require a specific authorization separate from a general medical records authorization (Correct answer)
Must be released within 30 days of any clinical request

Correct answer: Require a specific authorization separate from a general medical records authorization

Psychotherapy notes receive heightened protection under HIPAA and require a specific patient authorization, separate from a general authorization.

Question 125: Under CMS Conditions of Participation (CoPs), hospitals are required to have a functioning Quality Assessment and Performance Improvement (QAPI) program. This requirement ensures:

Annual accreditation surveys are conducted
Ongoing systematic monitoring and improvement of patient care quality and safety (Correct answer)
All inpatient claims are reviewed before payment
Physicians maintain current licensure

Correct answer: Ongoing systematic monitoring and improvement of patient care quality and safety

The CMS QAPI requirement mandates that hospitals continuously monitor, assess, and improve the quality and safety of patient care delivered across all departments and services.

Question 126: What special protections does HIPAA provide for psychotherapy notes?

Not covered by HIPAA
Separate patient authorization required for most uses and disclosures, beyond standard TPO permissions (Correct answer)
Same protections as all other PHI
Only the patient can access them

Correct answer: Separate patient authorization required for most uses and disclosures, beyond standard TPO permissions

Psychotherapy notes require specific authorization for nearly all uses and are excluded from standard TPO permissions.

Question 127: Which accrediting body publishes National Patient Safety Goals (NPSGs) that hospitals must follow?

The Joint Commission (Correct answer)
CMS
AHRQ
AHIMA

Correct answer: The Joint Commission

The Joint Commission publishes and updates National Patient Safety Goals annually, which accredited organizations must implement to address specific patient safety concerns.

Question 128: Which organization publishes the data quality management model widely referenced in health information management?

The Joint Commission
CMS
ONC
AHIMA (Correct answer)

Correct answer: AHIMA

AHIMA published the Data Quality Management Model, which identifies key dimensions and processes for managing health data quality.

Question 129: Which of the following is an illustration of malware that spreads throughout a system by duplicating itself?

Rootkit
Computer virus
Computer worm (Correct answer)
Trojan horse

Correct answer: Computer worm

A computer worm is a software that may propagate throughout a system by duplicating itself rather than attaching to another program. A computer virus is a software that copies itself, affixes to another program, and then spreads to alter data. A Trojan horse enables illegal access to a computer so that information can be obtained or emails can be sent. A rootkit is a piece of software that has access to an operating system on a computer and changes it.

Question 130: What are key components of an effective employee orientation program in HIM?

Comprehensive introduction to policies, procedures, job-specific training, compliance requirements, and technology systems (Correct answer)
Assigning a full workload immediately
Showing the employee their desk
Only providing the employee handbook

Correct answer: Comprehensive introduction to policies, procedures, job-specific training, compliance requirements, and technology systems

Effective orientation includes organizational overview, compliance training, department orientation, and job-specific training.

Question 131: A hospital is transitioning from a hybrid record system to a fully electronic health record (EHR). To manage this significant change and overcome potential staff resistance, which of the following is the most critical activity for the HIM leadership to undertake?

Focus training only on the most technologically skilled employees.
Mandate the use of the new system with strict penalties for non-compliance.
Establish clear communication channels and involve staff in the implementation process. (Correct answer)
Outsource the entire scanning and indexing process to a third-party vendor.

Correct answer: Establish clear communication channels and involve staff in the implementation process.

Successful change management relies heavily on communication and employee buy-in. Involving staff in the process (e.g., through super-user programs or feedback sessions) and maintaining clear, consistent communication about the reasons for the change, the timeline, and the benefits can significantly reduce resistance and improve adoption.

Question 132: A radiologist needs to view a patient's CT scan images, which are integrated into the EHR. The specialized information system that acquires, stores, retrieves, and displays these medical images is known as a:

Picture Archiving and Communication System (PACS) (Correct answer)
Laboratory Information System (LIS)
Computerized Provider Order Entry (CPOE)
Radiology Information System (RIS)

Correct answer: Picture Archiving and Communication System (PACS)

A Picture Archiving and Communication System (PACS) is a medical imaging technology used for storing, retrieving, presenting, and sharing images produced by various medical imaging modalities, such as CT scans, MRIs, and X-rays. It is a core system for radiology and is often integrated with the EHR and RIS.

Question 133: Which retention schedule applies to the health records of minor patients in most states?

Records are destroyed when the patient turns 18
Records must be retained for 7 years from date of service
Records must be retained until the patient reaches the age of majority plus the standard retention period (Correct answer)
Minor records follow the same 10-year retention as adult records

Correct answer: Records must be retained until the patient reaches the age of majority plus the standard retention period

Most states require that minor records be retained until the patient reaches age of majority (usually 18) plus the state's standard adult retention period.

Question 134: What is the primary purpose of a confidence interval in healthcare statistics?

To calculate the exact true population parameter
To express the range within which the true value likely falls (Correct answer)
To identify outliers in a dataset
To determine statistical significance between two groups

Correct answer: To express the range within which the true value likely falls

A confidence interval provides a range of values within which the true population parameter is likely to fall with a specified level of certainty.

Question 135: According to the UHDDS, the definition of Principal Diagnosis is the condition that:

is the underlying cause of a manifestation, coded second.
is the first diagnosis documented by the admitting physician in the emergency department.
is the most resource-intensive during the hospital stay.
is established after study to be chiefly responsible for the patient's admission to the hospital. (Correct answer)

Correct answer: is established after study to be chiefly responsible for the patient's admission to the hospital.

The Uniform Hospital Discharge Data Set (UHDDS) defines the principal diagnosis as 'that condition established after study to be chiefly responsible for occasioning the admission of the patient to the hospital for care.' The other options describe the primary diagnosis, a manifestation, or the admitting diagnosis, respectively.

Question 136: What is the primary purpose of the National Correct Coding Initiative (NCCI) edits?

To standardize patient intake forms
To define minimum staffing requirements
To establish physician credentialing requirements
To prevent improper payment of procedure code combinations that should not be reported together (Correct answer)

Correct answer: To prevent improper payment of procedure code combinations that should not be reported together

NCCI edits identify pairs of CPT/HCPCS codes that should not typically be reported together on the same claim.

Question 137: A correlation coefficient of -0.85 between two healthcare variables indicates:

A strong positive relationship
A weak positive relationship
A weak negative relationship
A strong negative relationship (Correct answer)

Correct answer: A strong negative relationship

A correlation coefficient of -0.85 indicates a strong negative relationship, where as one variable increases, the other tends to decrease.

Question 138: An RHIT calculates the following: total live discharges = 2,450; total deaths = 50; total length of stay for all patients = 12,250 days. What is the average length of stay?

4.9 days
5.0 days (Correct answer)
5.1 days
4.8 days

Correct answer: 5.0 days

Average LOS = Total LOS ÷ (Live discharges + Deaths) = 12,250 ÷ (2,450 + 50) = 12,250 ÷ 2,500 = 4.9 days. Wait — recalc: 12250/2500 = 4.9.

Question 139: A hospital uses a system to assign IDs, merge duplicate records, and maintain a single authoritative list of patients across facilities. This is a:

Enterprise Master Patient Index (EMPI) (Correct answer)
Patient portal
Registry system
Health Information Exchange (HIE)

Correct answer: Enterprise Master Patient Index (EMPI)

An Enterprise Master Patient Index (EMPI) maintains a unique, accurate patient identity record across multiple facilities within a health system.

Question 140: Which system architecture model places application processing on a central server while users interact via thin clients or terminals?

Centralized host-based architecture (Correct answer)
Client-server architecture
Peer-to-peer architecture
Cloud-distributed architecture

Correct answer: Centralized host-based architecture

Centralized host-based architecture processes all applications on a central host, with terminals serving only as input/output devices.

Question 141: Under what circumstances may a health record entry be corrected?

Only administrators can change entries
Entries can be freely deleted and rewritten
Draw a single line through the error, write the correction, and date and initial the change (Correct answer)
Original entries can be completely removed

Correct answer: Draw a single line through the error, write the correction, and date and initial the change

Corrections must preserve the original entry while adding the correction with date and initials.

Question 142: What are the HIPAA Security Rule's physical safeguard requirements?

Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion (Correct answer)
Physical safeguards are not in the Security Rule
Only locking the front door
Only installing security cameras

Correct answer: Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion

Physical safeguards protect the physical environment where ePHI is stored, processed, or transmitted.

Question 143: What is 'data provenance' in health informatics?

The geographic origin of data collected in clinical trials
A method for encrypting patient data at rest
The documented history of data's origin, movement, and transformation (Correct answer)
The process of removing duplicate patient records

Correct answer: The documented history of data's origin, movement, and transformation

Data provenance tracks where data came from, how it was transformed, and who handled it, which is essential for trust and integrity.

Question 144: A hospital discovers that encounter dates in its billing system are consistently one day later than dates in its EHR. This is best described as a:

Random error
Transcription error
Sampling error
Systematic error (Correct answer)

Correct answer: Systematic error

A systematic error is a consistent, repeatable discrepancy caused by a flaw in a process or system rather than random chance.

Question 145: A record is flagged because a physician's late entry was added three days after service. What is required to maintain the integrity of this late entry?

The entry must be labeled as a late entry with the current date and time of documentation (Correct answer)
The entry is inadmissible and must be excluded from the record
A supervisor must co-sign the late entry
The entry should be deleted and re-entered with today's date only

Correct answer: The entry must be labeled as a late entry with the current date and time of documentation

Late entries must be clearly labeled as such, with the actual date and time of documentation noted, while also referencing the date of service.

Question 146: Which reimbursement methodology pays a fixed amount per member per month regardless of services utilized?

Per diem reimbursement
Case rate
Fee-for-service
Capitation (Correct answer)

Correct answer: Capitation

Capitation pays providers a set monthly fee per enrolled patient, transferring financial risk to the provider since payment is independent of services rendered.

Question 147: What is the significance of data provenance in health information management?

It determines which printer produced a document
It documents the origin, history, and chain of custody of data from creation through all transformations (Correct answer)
It measures data storage capacity
It tracks the physical location of paper records

Correct answer: It documents the origin, history, and chain of custody of data from creation through all transformations

Data provenance tracks the complete lineage of data from its point of origin through all modifications.

Question 148: Before a claim is submitted to a third-party payer, it is often processed by internal software that checks for errors, such as missing data, incorrect code combinations, and payer-specific formatting issues. This process is known as:

Claims scrubbing (Correct answer)
Remittance advice review
Charge reconciliation
Claims adjudication

Correct answer: Claims scrubbing

Claims scrubbing is the process of auditing claims for errors before they are submitted to the payer. This is a crucial step in revenue cycle management that helps to increase the clean claim rate, reduce denials, and accelerate reimbursement by catching and correcting mistakes upfront.

Question 149: Which office is responsible for enforcing HIPAA Privacy and Security Rules?

Food and Drug Administration (FDA)
Office for Civil Rights (OCR) within HHS (Correct answer)
Centers for Medicare & Medicaid Services (CMS)
Office of Inspector General (OIG)

Correct answer: Office for Civil Rights (OCR) within HHS

The Office for Civil Rights (OCR) within the Department of Health and Human Services (HHS) is the primary federal agency responsible for enforcing HIPAA Privacy and Security Rules.

Question 150: A HIM manager is determining how many FTEs are needed to process 500 records per day if each employee can process 50 records per day. How many FTEs are required?

10 FTEs (Correct answer)
15 FTEs
12 FTEs
8 FTEs

Correct answer: 10 FTEs

Dividing 500 records per day by 50 records per FTE per day equals 10 FTEs needed to meet the workload.

Question 151: In performance improvement, what does a 'tracer methodology' involve?

Following a patient's care experience across departments to evaluate systems (Correct answer)
Mapping data flows through health information systems
Tracking financial transactions through the revenue cycle
Auditing coding accuracy across the facility

Correct answer: Following a patient's care experience across departments to evaluate systems

The Joint Commission's tracer methodology evaluates the care, treatment, and services delivered to individual patients by tracing their experience through the organization's processes and systems.

RHIT (Registered Health Information Technician) Exam

The RHIT (Registered Health Information Technician) Exam exam validates essential knowledge and skills required for certification or licensure in this field.

150

Questions

200 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds