NHA CMAA Practice Test 2026 – Medical
Administrative Assistant Exam | 50
Questions with Verified Answers &
Explanations
Question one.
When calling a patient to confirm an appointment, which piece of information is considered
protected health information, PHI, under HIPPA?
A the patient's name.
B. The appointment time.
C. The name of the ordering physician.
D. The patient's date of birth.
Answer B. The appointment time.
This question tests the understanding of what constitutes protected health information, PHI,
according to HIPPA rules. The keyword here is PHI, which includes individually identifiable
health information. While the patients name and date of birth are identifiers, the appointment
time itself when linked to the patients identity or health status becomes PHI because it relates to
their health care services. Releasing this detail without authorization could violate privacy. For
example, simply confirming yes, Mr. Smith has an appointment at 2 p.m. could reveal health
service information. Remember, any information related to a patient's healthcare appointment is
protected.
Question two,
a patient arrives for their appointment and states they have a high deductible insurance plan.
What should the administrative assistant do before the patient sees the provider?
A. Bill the insurance company immediately for the full expected cost.
B. Ask the patient for their insurance card and photo ID. Then estimate and collect the patients
portion due at the time of service.
C. Inform the patient that the practice does not accept high deductible plans.
,D. Send the patient home and ask them to return when they have met their deductible.
Answer B. Ask the patient for their insurance card and photo ID. Then estimate and
collect the patients portion due at the time of service.
This question assesses knowledge of financial procedures related to insurance, particularly high
deductible plans. The key phrase is high deductible, indicating the patient likely has a significant
out-ofpocket cost before insurance covers much. The administrative assistance role is to verify
insurance eligibility and collect the estimated patient responsibility such as the deductible or co-
ayment at the time of service. This prevents claim denials and manages patient expectations
about costs. For example, after verifying coverage, the office might estimate the patient owes
$200 for the visit based on their deductible. It's crucial to collect this estimated amount upfront
to streamline billing and patient accounts.
Question three,
what is the primary purpose of a patient registration form?
A. to document the patients medical history in detail.
B to collect demographic, insurance, and emergency contact information.
C to obtain consent for specific medical procedures.
D to schedule the patients next follow-up appointment.
Answer B. to collect demographic, insurance and emergency contact information.
This question focuses on the fundamental role of the patient registration form in a medical
office. The keywords are primary purpose. This form is the initial document used to gather
essential non-medical details about the patient such as their name, address, contact
information, insurance carrier, and who to contact in an emergency. While it initiates the patient
record, it doesn't contain the clinical history or procedure consents. Collecting this data
accurately ensures proper identification, billing and communication. Think of it as the first step in
creating the patients file and ensuring the practice can contact and bill the patient correctly?
Question four.
Which communication method is generally considered the least appropriate for relaying urgent
test results to a patient?
A secure patient portal message.
, B. Phone call from a nurse or medical assistant.
C. Email to the patients personal email address.
D. In-person discussion with the provider.
Answer C. Email to the patients personal email address.
This question tests communication protocols, especially concerning sensitive health information.
The keyword urgent test results signals the need for a secure and immediate method. Standard
email is generally not considered secure enough for PHI transmission due to potential
interception risks, making it inappropriate for urgent updates. Secure patient portals, phone calls
from clinical staff, or direct provider discussions are preferred methods that offer better security
and timeliness. For instance, sending urgent results via unsecured email could violate HIPPA
privacy rules if intercepted. Always prioritize secure and direct communication channels for
critical health information.
Question five.
A patient is requesting a copy of their medical records. According to HIPPA, what is the provider
obligated to do?
A. Provide the records within 15 days of the request.
B. Deny the request if the patient owes a balance.
C. Provide the records within 30 days of the request, potentially with a reasonable fee.
D. Provide the records within 60 days of the request.
Answer C. Provide the records within 30 days of the request, potentially with a
reasonable fee.
This question centers on patient rights regarding their medical records under HIPPA. The key
elements are request to copy and HIPPA. The law mandates that health care providers must
provide patients with access to their records, typically within 30 days, although extensions are
possible under certain circumstances. Practices can charge a reasonable cost-based fee for
copies. Denying access due to a balance owed or taking longer than the stipulated time frames
violates HIPPA regulations. For example, if a patient requests their records today, the office
generally must fulfill this request within the next month. Remember, timely access to records is
a patient's right.
Administrative Assistant Exam | 50
Questions with Verified Answers &
Explanations
Question one.
When calling a patient to confirm an appointment, which piece of information is considered
protected health information, PHI, under HIPPA?
A the patient's name.
B. The appointment time.
C. The name of the ordering physician.
D. The patient's date of birth.
Answer B. The appointment time.
This question tests the understanding of what constitutes protected health information, PHI,
according to HIPPA rules. The keyword here is PHI, which includes individually identifiable
health information. While the patients name and date of birth are identifiers, the appointment
time itself when linked to the patients identity or health status becomes PHI because it relates to
their health care services. Releasing this detail without authorization could violate privacy. For
example, simply confirming yes, Mr. Smith has an appointment at 2 p.m. could reveal health
service information. Remember, any information related to a patient's healthcare appointment is
protected.
Question two,
a patient arrives for their appointment and states they have a high deductible insurance plan.
What should the administrative assistant do before the patient sees the provider?
A. Bill the insurance company immediately for the full expected cost.
B. Ask the patient for their insurance card and photo ID. Then estimate and collect the patients
portion due at the time of service.
C. Inform the patient that the practice does not accept high deductible plans.
,D. Send the patient home and ask them to return when they have met their deductible.
Answer B. Ask the patient for their insurance card and photo ID. Then estimate and
collect the patients portion due at the time of service.
This question assesses knowledge of financial procedures related to insurance, particularly high
deductible plans. The key phrase is high deductible, indicating the patient likely has a significant
out-ofpocket cost before insurance covers much. The administrative assistance role is to verify
insurance eligibility and collect the estimated patient responsibility such as the deductible or co-
ayment at the time of service. This prevents claim denials and manages patient expectations
about costs. For example, after verifying coverage, the office might estimate the patient owes
$200 for the visit based on their deductible. It's crucial to collect this estimated amount upfront
to streamline billing and patient accounts.
Question three,
what is the primary purpose of a patient registration form?
A. to document the patients medical history in detail.
B to collect demographic, insurance, and emergency contact information.
C to obtain consent for specific medical procedures.
D to schedule the patients next follow-up appointment.
Answer B. to collect demographic, insurance and emergency contact information.
This question focuses on the fundamental role of the patient registration form in a medical
office. The keywords are primary purpose. This form is the initial document used to gather
essential non-medical details about the patient such as their name, address, contact
information, insurance carrier, and who to contact in an emergency. While it initiates the patient
record, it doesn't contain the clinical history or procedure consents. Collecting this data
accurately ensures proper identification, billing and communication. Think of it as the first step in
creating the patients file and ensuring the practice can contact and bill the patient correctly?
Question four.
Which communication method is generally considered the least appropriate for relaying urgent
test results to a patient?
A secure patient portal message.
, B. Phone call from a nurse or medical assistant.
C. Email to the patients personal email address.
D. In-person discussion with the provider.
Answer C. Email to the patients personal email address.
This question tests communication protocols, especially concerning sensitive health information.
The keyword urgent test results signals the need for a secure and immediate method. Standard
email is generally not considered secure enough for PHI transmission due to potential
interception risks, making it inappropriate for urgent updates. Secure patient portals, phone calls
from clinical staff, or direct provider discussions are preferred methods that offer better security
and timeliness. For instance, sending urgent results via unsecured email could violate HIPPA
privacy rules if intercepted. Always prioritize secure and direct communication channels for
critical health information.
Question five.
A patient is requesting a copy of their medical records. According to HIPPA, what is the provider
obligated to do?
A. Provide the records within 15 days of the request.
B. Deny the request if the patient owes a balance.
C. Provide the records within 30 days of the request, potentially with a reasonable fee.
D. Provide the records within 60 days of the request.
Answer C. Provide the records within 30 days of the request, potentially with a
reasonable fee.
This question centers on patient rights regarding their medical records under HIPPA. The key
elements are request to copy and HIPPA. The law mandates that health care providers must
provide patients with access to their records, typically within 30 days, although extensions are
possible under certain circumstances. Practices can charge a reasonable cost-based fee for
copies. Denying access due to a balance owed or taking longer than the stipulated time frames
violates HIPPA regulations. For example, if a patient requests their records today, the office
generally must fulfill this request within the next month. Remember, timely access to records is
a patient's right.
