CCA EXAM PREP DOMAINS 1-6 PRACTICE TEST 2026/2027 |
Verified Questions and Answers | Certified Coding Associate
Complete Guide | Pass Guaranteed - A+ Graded
Domain 1: Health Data Management (Questions 1-30)
Q1: According to CMS Conditions of Participation, within what timeframe must the history and
physical (H&P) examination be completed and documented for an inpatient admission?
A. Within 12 hours of admission
B. Within 24 hours of admission [CORRECT]
C. Within 48 hours of admission
D. Prior to admission
Correct Answer: B
Rationale: CMS Conditions of Participation require that the H&P be completed and documented
within 24 hours of admission, making B correct; A is incorrect as 12 hours applies to certain
critical care elements but not the full H&P; C is incorrect because 48 hours is the timeframe for
verbal order countersignatures; D is incorrect because the H&P can be completed after
admission as long as it is within 24 hours. Domain 1 reference: Health record documentation
requirements. CCA Domain Exam Tip: AHIMA CCA frequently tests the strict 24-hour H&P rule
and the 24-hour dictated/Immediately available rule for operative reports.
Q2: A patient presents to the emergency department and signs a general consent for treatment.
The patient is later scheduled for an invasive cardiac procedure. Which of the following is
required before the procedure can be performed?
A. The general consent is sufficient for all hospital procedures.
B. A specific informed consent for the cardiac procedure must be obtained. [CORRECT]
C. Only a verbal consent from the attending physician is needed.
D. The patient's family can sign the consent if the patient is asleep.
Correct Answer: B
Rationale: Specific informed consent is required for invasive procedures, explaining risks,
benefits, and alternatives, making B correct; A is incorrect because general consent covers
routine treatments only; C is incorrect because informed consent requires patient (or legal
representative) written authorization; D is incorrect because family cannot consent unless they
,are the legally designated surrogate decision-maker. Domain 1 reference: Consents. CCA
Domain Exam Tip: Distinguish between general admission consent and specific procedure
consent on the CCA exam.
Q3: An HIM professional identifies an error in a dictated discharge summary where the wrong
medication dosage was listed. What is the correct way to make this correction in the legal health
record?
A. Use whiteout to cover the error and write the correct dosage.
B. Draw a single line through the error, initial, date, time, and provide the reason for the
correction. [CORRECT]
C. Delete the error from the electronic record so it cannot be seen.
D. Write the correct dosage in the margin without marking the original error.
Correct Answer: B
Rationale: The accepted legal standard for correcting a paper or electronic health record error is
to draw a single line through the error (keeping it legible), adding the date, time, initials, and
reason, making B correct; A is incorrect because whiteout is never permitted in a legal medical
record; C is incorrect because original entries must never be deleted; D is incorrect because the
error must be explicitly marked and identified. Domain 1 reference: Health record maintenance
(corrections). CCA Domain Exam Tip: "Single line, initial, date, time, reason" is the golden rule
for record corrections on the CCA exam.
Q4: Under HIPAA, what is the minimum required retention period for medical records if a state
law does not specify a different timeframe?
A. 2 years from the date of creation
B. 5 years from the date of creation
C. 6 years from the date of creation or last effective date [CORRECT]
D. 10 years from the date of creation
Correct Answer: C
Rationale: HIPAA requires covered entities to retain documentation required by the Privacy Rule
for 6 years from the date of its creation or the date it was last in effect, whichever is later,
making C correct; A and B are incorrect because they reflect outdated or specific payer rules
(like Medicare's 5-year cost report rule); D is incorrect because 10 years is a common state law
standard, not the federal HIPAA baseline. Domain 1 reference: Record retention. CCA Domain
Exam Tip: Remember "HIPAA = 6 years" and "Medicare Cost Reports = 5 years" as baseline
federal rules.
,Q5: A patient requests a copy of their entire medical record to be sent to a third-party attorney.
Which core element must be included on the authorization form for this release to be valid?
A. The patient's Social Security Number
B. The name of the person or entity receiving the information [CORRECT]
C. The patient's diagnosis codes
D. The names of all treating physicians
Correct Answer: B
Rationale: HIPAA requires that a valid authorization include the name or class of persons
authorized to make the disclosure and the name or class of persons or entities to whom the
disclosure will be made, making B correct; A is incorrect because SSN is an identifier but not a
required core element of an authorization; C and D are incorrect because specific clinical details
are not required elements on the authorization form itself. Domain 1 reference: Release of
information (authorization requirements). CCA Domain Exam Tip: Memorize the HIPAA
authorization core elements: description, recipient, purpose, expiration, signature/date.
Q6: Which data quality characteristic ensures that the same data element retrieved from
different systems yields the same result?
A. Accuracy
B. Timeliness
C. Consistency [CORRECT]
D. Granularity
Correct Answer: C
Rationale: Consistency is the data quality characteristic that ensures data values are uniform
and reliable across different systems and time, making C correct; A is incorrect because
accuracy means the data is correct; B is incorrect because timeliness means data is up-to-date;
D is incorrect because granularity refers to the level of detail. Domain 1 reference: Data quality
assessment. CCA Domain Exam Tip: AHIMA loves testing data quality model definitions; focus
heavily on consistency vs. accuracy.
Q7: A hospital is destroying paper medical records that have surpassed their retention
schedule. Which method of destruction is most appropriate and ensures confidentiality?
A. Placing the records in the regular hospital trash
B. Donating the records to a local medical school
C. Secure shredding with a certificate of destruction [CORRECT]
D. Burning the records in an open outdoor fire
Correct Answer: C
, Rationale: Secure shredding followed by a certificate of destruction is the standard, legally
defensible method for destroying paper health records, making C correct; A is incorrect as it
violates HIPAA; B is incorrect because records past retention may still contain PHI and cannot
be donated; D is incorrect because open burning is environmentally hazardous and lacks a
verifiable audit trail. Domain 1 reference: Record maintenance (destruction). CCA Domain Exam
Tip: Always associate "certificate of destruction" with secure shredding or incineration for CCA
exam answers.
Q8: In the context of data governance, who is primarily accountable for the strategic
management and overall quality of a specific data set within an organization?
A. Data Custodian
B. Data Steward
C. Data Owner [CORRECT]
D. Database Administrator
Correct Answer: C
Rationale: The data owner is a senior official who has accountability for the management and
quality of a specific data asset, making C correct; A is incorrect because the data custodian
handles the technical storage and security; B is incorrect because the data steward handles the
day-to-day data quality monitoring and metadata management; D is a technical role, not a
governance role. Domain 1 reference: Data governance. CCA Domain Exam Tip: Owner =
Accountable (Executive), Steward = Manageable (Operational), Custodian = Technical (IT).
Q9: A patient requests an electronic copy of their lab results stored in the EHR. Under the
HIPAA Privacy Rule, what is the maximum number of days the covered entity has to fulfill this
request?
A. 15 days
B. 30 days [CORRECT]
C. 45 days
D. 60 days
Correct Answer: B
Rationale: The HIPAA Privacy Rule requires covered entities to act on a request for access no
later than 30 days after receipt, making B correct; A, C, and D are incorrect as they do not align
with the federal standard (though one 30-day extension is permitted under certain
Verified Questions and Answers | Certified Coding Associate
Complete Guide | Pass Guaranteed - A+ Graded
Domain 1: Health Data Management (Questions 1-30)
Q1: According to CMS Conditions of Participation, within what timeframe must the history and
physical (H&P) examination be completed and documented for an inpatient admission?
A. Within 12 hours of admission
B. Within 24 hours of admission [CORRECT]
C. Within 48 hours of admission
D. Prior to admission
Correct Answer: B
Rationale: CMS Conditions of Participation require that the H&P be completed and documented
within 24 hours of admission, making B correct; A is incorrect as 12 hours applies to certain
critical care elements but not the full H&P; C is incorrect because 48 hours is the timeframe for
verbal order countersignatures; D is incorrect because the H&P can be completed after
admission as long as it is within 24 hours. Domain 1 reference: Health record documentation
requirements. CCA Domain Exam Tip: AHIMA CCA frequently tests the strict 24-hour H&P rule
and the 24-hour dictated/Immediately available rule for operative reports.
Q2: A patient presents to the emergency department and signs a general consent for treatment.
The patient is later scheduled for an invasive cardiac procedure. Which of the following is
required before the procedure can be performed?
A. The general consent is sufficient for all hospital procedures.
B. A specific informed consent for the cardiac procedure must be obtained. [CORRECT]
C. Only a verbal consent from the attending physician is needed.
D. The patient's family can sign the consent if the patient is asleep.
Correct Answer: B
Rationale: Specific informed consent is required for invasive procedures, explaining risks,
benefits, and alternatives, making B correct; A is incorrect because general consent covers
routine treatments only; C is incorrect because informed consent requires patient (or legal
representative) written authorization; D is incorrect because family cannot consent unless they
,are the legally designated surrogate decision-maker. Domain 1 reference: Consents. CCA
Domain Exam Tip: Distinguish between general admission consent and specific procedure
consent on the CCA exam.
Q3: An HIM professional identifies an error in a dictated discharge summary where the wrong
medication dosage was listed. What is the correct way to make this correction in the legal health
record?
A. Use whiteout to cover the error and write the correct dosage.
B. Draw a single line through the error, initial, date, time, and provide the reason for the
correction. [CORRECT]
C. Delete the error from the electronic record so it cannot be seen.
D. Write the correct dosage in the margin without marking the original error.
Correct Answer: B
Rationale: The accepted legal standard for correcting a paper or electronic health record error is
to draw a single line through the error (keeping it legible), adding the date, time, initials, and
reason, making B correct; A is incorrect because whiteout is never permitted in a legal medical
record; C is incorrect because original entries must never be deleted; D is incorrect because the
error must be explicitly marked and identified. Domain 1 reference: Health record maintenance
(corrections). CCA Domain Exam Tip: "Single line, initial, date, time, reason" is the golden rule
for record corrections on the CCA exam.
Q4: Under HIPAA, what is the minimum required retention period for medical records if a state
law does not specify a different timeframe?
A. 2 years from the date of creation
B. 5 years from the date of creation
C. 6 years from the date of creation or last effective date [CORRECT]
D. 10 years from the date of creation
Correct Answer: C
Rationale: HIPAA requires covered entities to retain documentation required by the Privacy Rule
for 6 years from the date of its creation or the date it was last in effect, whichever is later,
making C correct; A and B are incorrect because they reflect outdated or specific payer rules
(like Medicare's 5-year cost report rule); D is incorrect because 10 years is a common state law
standard, not the federal HIPAA baseline. Domain 1 reference: Record retention. CCA Domain
Exam Tip: Remember "HIPAA = 6 years" and "Medicare Cost Reports = 5 years" as baseline
federal rules.
,Q5: A patient requests a copy of their entire medical record to be sent to a third-party attorney.
Which core element must be included on the authorization form for this release to be valid?
A. The patient's Social Security Number
B. The name of the person or entity receiving the information [CORRECT]
C. The patient's diagnosis codes
D. The names of all treating physicians
Correct Answer: B
Rationale: HIPAA requires that a valid authorization include the name or class of persons
authorized to make the disclosure and the name or class of persons or entities to whom the
disclosure will be made, making B correct; A is incorrect because SSN is an identifier but not a
required core element of an authorization; C and D are incorrect because specific clinical details
are not required elements on the authorization form itself. Domain 1 reference: Release of
information (authorization requirements). CCA Domain Exam Tip: Memorize the HIPAA
authorization core elements: description, recipient, purpose, expiration, signature/date.
Q6: Which data quality characteristic ensures that the same data element retrieved from
different systems yields the same result?
A. Accuracy
B. Timeliness
C. Consistency [CORRECT]
D. Granularity
Correct Answer: C
Rationale: Consistency is the data quality characteristic that ensures data values are uniform
and reliable across different systems and time, making C correct; A is incorrect because
accuracy means the data is correct; B is incorrect because timeliness means data is up-to-date;
D is incorrect because granularity refers to the level of detail. Domain 1 reference: Data quality
assessment. CCA Domain Exam Tip: AHIMA loves testing data quality model definitions; focus
heavily on consistency vs. accuracy.
Q7: A hospital is destroying paper medical records that have surpassed their retention
schedule. Which method of destruction is most appropriate and ensures confidentiality?
A. Placing the records in the regular hospital trash
B. Donating the records to a local medical school
C. Secure shredding with a certificate of destruction [CORRECT]
D. Burning the records in an open outdoor fire
Correct Answer: C
, Rationale: Secure shredding followed by a certificate of destruction is the standard, legally
defensible method for destroying paper health records, making C correct; A is incorrect as it
violates HIPAA; B is incorrect because records past retention may still contain PHI and cannot
be donated; D is incorrect because open burning is environmentally hazardous and lacks a
verifiable audit trail. Domain 1 reference: Record maintenance (destruction). CCA Domain Exam
Tip: Always associate "certificate of destruction" with secure shredding or incineration for CCA
exam answers.
Q8: In the context of data governance, who is primarily accountable for the strategic
management and overall quality of a specific data set within an organization?
A. Data Custodian
B. Data Steward
C. Data Owner [CORRECT]
D. Database Administrator
Correct Answer: C
Rationale: The data owner is a senior official who has accountability for the management and
quality of a specific data asset, making C correct; A is incorrect because the data custodian
handles the technical storage and security; B is incorrect because the data steward handles the
day-to-day data quality monitoring and metadata management; D is a technical role, not a
governance role. Domain 1 reference: Data governance. CCA Domain Exam Tip: Owner =
Accountable (Executive), Steward = Manageable (Operational), Custodian = Technical (IT).
Q9: A patient requests an electronic copy of their lab results stored in the EHR. Under the
HIPAA Privacy Rule, what is the maximum number of days the covered entity has to fulfill this
request?
A. 15 days
B. 30 days [CORRECT]
C. 45 days
D. 60 days
Correct Answer: B
Rationale: The HIPAA Privacy Rule requires covered entities to act on a request for access no
later than 30 days after receipt, making B correct; A, C, and D are incorrect as they do not align
with the federal standard (though one 30-day extension is permitted under certain
