[HIM 2360 Final EXAM] – EXAM-STYLE QUESTIONS AND ANSWERS | VERIFIED
AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS |
2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
1. A healthcare organization is implementing a new electronic health record
(EHR) system and must ensure that the migration of patient data from the
legacy system maintains integrity. Which of the following actions is the most
critical first step to ensure data integrity during this migration?
A. Run a parallel system for one month to compare outputs.
B. Perform a complete data backup before the migration begins.
C. Map data fields from the legacy system to the new EHR system.
D. Provide extensive training to all staff on the new system.
Correct Answer: C. Map data fields from the legacy system to the new EHR
system.
Rationale: Data mapping is the foundational step to ensure that data is accurately
translated and placed into the correct fields in the new system. Without accurate
mapping, data can be corrupted, lost, or misinterpreted, regardless of backups (B),
training (D), or parallel runs (A). While a backup is essential, mapping is the
proactive measure that defines the integrity rules for the data transfer itself.
Incorrect mapping is a primary source of data integrity failures.
2. A coding specialist is reviewing an operative report for a patient who
underwent a laparoscopic cholecystectomy. The surgeon notes the procedure
was converted to an open cholecystectomy due to extensive adhesions. Which
CPT coding guideline should the specialist apply?
,A. Code the laparoscopic procedure only, as it was the initial approach.
B. Code both the laparoscopic and open procedures, appending modifier -51.
C. Code the open cholecystectomy only, as it is the definitive procedure.
D. Code the laparoscopic cholecystectomy with a modifier for discontinued
procedure.
Correct Answer: C. Code the open cholecystectomy only, as it is the definitive
procedure.
Rationale: CPT guidelines state that when a planned procedure is converted to an
open approach, the coder should report the open procedure code. The laparoscopic
procedure is not separately reported because the open procedure is considered the
definitive and more extensive service. Options A and D are incorrect because the
final approach is open. Option B is incorrect because modifier -51 applies to
multiple distinct procedures performed during the same session, and this is a single
procedure with an approach change.
3. A Health Information Management (HIM) director is evaluating the
organization's disaster recovery plan. Which of the following elements is MOST
critical to ensure the continuity of patient care in the event of a complete data
center loss?
A. An off-site backup of all electronic health records.
B. A detailed inventory of all hardware and software assets.
C. A pre-arranged contract with a temporary staffing agency.
D. A list of all vendors' contact information.
Correct Answer: A. An off-site backup of all electronic health records.
,Rationale: In a total data center loss, the primary concern is the availability of
patient data for clinical decision-making. An off-site backup (which includes the
data and potentially the means to access it) is the only option that directly ensures
data availability. While B, C, and D are parts of a comprehensive disaster recovery
plan, they do not directly address the immediate continuity of patient care by
providing access to health records.
4. Under the HIPAA Privacy Rule, which of the following is considered a
permissible disclosure of protected health information (PHI) without an
individual's authorization?
A. Disclosure to a life insurance company for underwriting purposes.
B. Disclosure to an employer for a pre-employment drug screening.
C. Disclosure to a researcher for a study that has been approved by an IRB.
D. Disclosure to a public health authority for the reporting of a communicable
disease.
Correct Answer: D. Disclosure to a public health authority for the reporting of a
communicable disease.
Rationale: HIPAA permits disclosures of PHI without an individual's authorization to
a public health authority authorized by law to collect or receive such information
for the purpose of preventing or controlling disease, injury, or disability. Options A
and B typically require authorization. Option C may be permitted without
authorization if the IRB has waived the authorization requirement, but this is not
always the case; it is an exception rather than a standard permissible disclosure.
Option D is a standard permissible disclosure.
5. A hospital is conducting a quality improvement (QI) study on readmission
rates for heart failure patients. The team wants to abstract data from the EHR.
, What is the primary difference between a QI project and a human subjects
research study?
A. A QI project requires IRB approval.
B. A QI project is designed to improve local practice, while research aims to
produce generalizable knowledge.
C. A QI project is retrospective, while research is always prospective.
D. A QI project does not require a data collection plan.
Correct Answer: B. A QI project is designed to improve local practice, while
research aims to produce generalizable knowledge.
Rationale: The fundamental distinction is the intent. QI activities are intended to
improve the quality of care for a specific patient population within a single
institution. Research is designed to contribute to generalizable knowledge that can
be applied to populations beyond the study site. Option A is incorrect as QI may not
need IRB approval. Option C is incorrect as both can be either. Option D is incorrect
as a data collection plan is essential for both.
6. A data analyst is running a query on the EHR to identify all patients with a
diagnosis of Type 2 Diabetes. The query returns a list of patients, but it misses
many who have the condition. The analyst discovers the query only looked for
"Type 2 DM" in the diagnosis field, but clinicians use various other terms like
"T2DM," "Diabetes Mellitus, Type 2," and "Non-insulin-dependent diabetes."
This problem is best described as an issue with:
A. Data mapping.
B. Data granularity.
C. Data timeliness.
D. Data completeness.
AND WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS |
2026/27 LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
1. A healthcare organization is implementing a new electronic health record
(EHR) system and must ensure that the migration of patient data from the
legacy system maintains integrity. Which of the following actions is the most
critical first step to ensure data integrity during this migration?
A. Run a parallel system for one month to compare outputs.
B. Perform a complete data backup before the migration begins.
C. Map data fields from the legacy system to the new EHR system.
D. Provide extensive training to all staff on the new system.
Correct Answer: C. Map data fields from the legacy system to the new EHR
system.
Rationale: Data mapping is the foundational step to ensure that data is accurately
translated and placed into the correct fields in the new system. Without accurate
mapping, data can be corrupted, lost, or misinterpreted, regardless of backups (B),
training (D), or parallel runs (A). While a backup is essential, mapping is the
proactive measure that defines the integrity rules for the data transfer itself.
Incorrect mapping is a primary source of data integrity failures.
2. A coding specialist is reviewing an operative report for a patient who
underwent a laparoscopic cholecystectomy. The surgeon notes the procedure
was converted to an open cholecystectomy due to extensive adhesions. Which
CPT coding guideline should the specialist apply?
,A. Code the laparoscopic procedure only, as it was the initial approach.
B. Code both the laparoscopic and open procedures, appending modifier -51.
C. Code the open cholecystectomy only, as it is the definitive procedure.
D. Code the laparoscopic cholecystectomy with a modifier for discontinued
procedure.
Correct Answer: C. Code the open cholecystectomy only, as it is the definitive
procedure.
Rationale: CPT guidelines state that when a planned procedure is converted to an
open approach, the coder should report the open procedure code. The laparoscopic
procedure is not separately reported because the open procedure is considered the
definitive and more extensive service. Options A and D are incorrect because the
final approach is open. Option B is incorrect because modifier -51 applies to
multiple distinct procedures performed during the same session, and this is a single
procedure with an approach change.
3. A Health Information Management (HIM) director is evaluating the
organization's disaster recovery plan. Which of the following elements is MOST
critical to ensure the continuity of patient care in the event of a complete data
center loss?
A. An off-site backup of all electronic health records.
B. A detailed inventory of all hardware and software assets.
C. A pre-arranged contract with a temporary staffing agency.
D. A list of all vendors' contact information.
Correct Answer: A. An off-site backup of all electronic health records.
,Rationale: In a total data center loss, the primary concern is the availability of
patient data for clinical decision-making. An off-site backup (which includes the
data and potentially the means to access it) is the only option that directly ensures
data availability. While B, C, and D are parts of a comprehensive disaster recovery
plan, they do not directly address the immediate continuity of patient care by
providing access to health records.
4. Under the HIPAA Privacy Rule, which of the following is considered a
permissible disclosure of protected health information (PHI) without an
individual's authorization?
A. Disclosure to a life insurance company for underwriting purposes.
B. Disclosure to an employer for a pre-employment drug screening.
C. Disclosure to a researcher for a study that has been approved by an IRB.
D. Disclosure to a public health authority for the reporting of a communicable
disease.
Correct Answer: D. Disclosure to a public health authority for the reporting of a
communicable disease.
Rationale: HIPAA permits disclosures of PHI without an individual's authorization to
a public health authority authorized by law to collect or receive such information
for the purpose of preventing or controlling disease, injury, or disability. Options A
and B typically require authorization. Option C may be permitted without
authorization if the IRB has waived the authorization requirement, but this is not
always the case; it is an exception rather than a standard permissible disclosure.
Option D is a standard permissible disclosure.
5. A hospital is conducting a quality improvement (QI) study on readmission
rates for heart failure patients. The team wants to abstract data from the EHR.
, What is the primary difference between a QI project and a human subjects
research study?
A. A QI project requires IRB approval.
B. A QI project is designed to improve local practice, while research aims to
produce generalizable knowledge.
C. A QI project is retrospective, while research is always prospective.
D. A QI project does not require a data collection plan.
Correct Answer: B. A QI project is designed to improve local practice, while
research aims to produce generalizable knowledge.
Rationale: The fundamental distinction is the intent. QI activities are intended to
improve the quality of care for a specific patient population within a single
institution. Research is designed to contribute to generalizable knowledge that can
be applied to populations beyond the study site. Option A is incorrect as QI may not
need IRB approval. Option C is incorrect as both can be either. Option D is incorrect
as a data collection plan is essential for both.
6. A data analyst is running a query on the EHR to identify all patients with a
diagnosis of Type 2 Diabetes. The query returns a list of patients, but it misses
many who have the condition. The analyst discovers the query only looked for
"Type 2 DM" in the diagnosis field, but clinicians use various other terms like
"T2DM," "Diabetes Mellitus, Type 2," and "Non-insulin-dependent diabetes."
This problem is best described as an issue with:
A. Data mapping.
B. Data granularity.
C. Data timeliness.
D. Data completeness.
