https://www.stuvia.com/user/performance
HCCA CHC / CHPC Compliance Examination Practice Questions
(2026–2027) (Original) EXAM | Latest Update | Original
Questions & Answers with Detailed Rationales | Graded A+
Exam Administrator: Compliance Certification Board (CCB) under HCCA/SCCE
Format: 120 multiple-choice questions (100 scored + 20 unscored pretest) | 2
hours
Passing Standard: Criterion-referenced, set through an Angoff-style process (no
fixed public percentage)
Eligibility: 1 year full-time compliance experience OR 1,500 direct compliance
hours within 2 years, PLUS 20 CCB-approved CEUs (10 live) within 12 months
before the exam
CHC Exam Domains (2026–2027)
# Domain
1 Standards, Policies, and Procedures
2 Compliance Program Administration
3 Screening and Evaluation of Employees, Physicians, Vendors, and Other Agents
4 Communication, Education, and Training on Compliance Issues
5 Monitoring, Auditing, and Internal Reporting Systems
6 Investigations and Remedial Measures
7 Discipline for Non-Compliance
,https://www.stuvia.com/user/performance
CHPC Exam Domains (2026–2027)
# Domain
1 Privacy Standards, Policies, and Procedures
2 Privacy Compliance Program Oversight
3 Privacy Program Infrastructure
4 Communication, Education, and Training on Privacy Issues
5 Privacy Monitoring, Auditing, and Internal Reporting Systems
6 Privacy Investigations and Remedial Measures
7 Privacy Discipline for Non-Compliance
Domain 1: Standards, Policies, and Procedures
1. Which federal law prohibits knowingly submitting false
claims to government healthcare programs?
A. Stark Law
B. False Claims Act (FCA)
C. Anti-Kickback Statute (AKS)
D. HIPAA
Answer: B
Rationale: The False Claims Act (31 U.S.C. §§ 3729–3733)
,https://www.stuvia.com/user/performance
imposes liability on individuals or entities that knowingly submit
false or fraudulent claims for payment to Medicare, Medicaid,
or other federal programs. It includes qui tam provisions
allowing whistleblowers to sue on behalf of the government.
2. Under the OIG's "Seven Elements of an Effective Compliance
Program," which element requires regular internal monitoring
and auditing?
A. Written policies and procedures
B. Internal monitoring and auditing
C. Education and training
D. Response to detected offenses
Answer: B
Rationale: Element 6 of the OIG's Seven Elements explicitly
mandates "Internal Monitoring and Auditing" to evaluate
compliance with policies, detect issues early, and validate
corrective actions. Audits should be risk-based and conducted
regularly.
3. A physician refers patients to a laboratory in which they
have a financial interest. This may violate:
A. False Claims Act
B. Stark Law (Physician Self-Referral Law)
C. HIPAA Privacy Rule
D. Civil Monetary Penalties Law
, https://www.stuvia.com/user/performance
Answer: B
Rationale: The Stark Law (42 U.S.C. § 1395nn) prohibits
physicians from referring Medicare/Medicaid patients for
designated health services (e.g., lab, imaging) to entities with
which they (or immediate family) have a financial relationship—
unless an exception applies.
4. Which regulation requires covered entities to conduct a risk
analysis of electronic protected health information (ePHI)?
A. HIPAA Privacy Rule
B. HIPAA Security Rule
C. HITECH Act
D. 21st Century Cures Act
Answer: B
Rationale: The HIPAA Security Rule (45 CFR §
164.308(a)(1)(ii)(A)) mandates a thorough, organization-wide
risk analysis to identify vulnerabilities to ePHI confidentiality,
integrity, and availability. This is a foundational requirement for
all covered entities and business associates.
5. Offering free transportation to patients for medically
necessary services may violate the Anti-Kickback Statute
unless it meets a:
A. Stark Law exception
B. Safe harbor
HCCA CHC / CHPC Compliance Examination Practice Questions
(2026–2027) (Original) EXAM | Latest Update | Original
Questions & Answers with Detailed Rationales | Graded A+
Exam Administrator: Compliance Certification Board (CCB) under HCCA/SCCE
Format: 120 multiple-choice questions (100 scored + 20 unscored pretest) | 2
hours
Passing Standard: Criterion-referenced, set through an Angoff-style process (no
fixed public percentage)
Eligibility: 1 year full-time compliance experience OR 1,500 direct compliance
hours within 2 years, PLUS 20 CCB-approved CEUs (10 live) within 12 months
before the exam
CHC Exam Domains (2026–2027)
# Domain
1 Standards, Policies, and Procedures
2 Compliance Program Administration
3 Screening and Evaluation of Employees, Physicians, Vendors, and Other Agents
4 Communication, Education, and Training on Compliance Issues
5 Monitoring, Auditing, and Internal Reporting Systems
6 Investigations and Remedial Measures
7 Discipline for Non-Compliance
,https://www.stuvia.com/user/performance
CHPC Exam Domains (2026–2027)
# Domain
1 Privacy Standards, Policies, and Procedures
2 Privacy Compliance Program Oversight
3 Privacy Program Infrastructure
4 Communication, Education, and Training on Privacy Issues
5 Privacy Monitoring, Auditing, and Internal Reporting Systems
6 Privacy Investigations and Remedial Measures
7 Privacy Discipline for Non-Compliance
Domain 1: Standards, Policies, and Procedures
1. Which federal law prohibits knowingly submitting false
claims to government healthcare programs?
A. Stark Law
B. False Claims Act (FCA)
C. Anti-Kickback Statute (AKS)
D. HIPAA
Answer: B
Rationale: The False Claims Act (31 U.S.C. §§ 3729–3733)
,https://www.stuvia.com/user/performance
imposes liability on individuals or entities that knowingly submit
false or fraudulent claims for payment to Medicare, Medicaid,
or other federal programs. It includes qui tam provisions
allowing whistleblowers to sue on behalf of the government.
2. Under the OIG's "Seven Elements of an Effective Compliance
Program," which element requires regular internal monitoring
and auditing?
A. Written policies and procedures
B. Internal monitoring and auditing
C. Education and training
D. Response to detected offenses
Answer: B
Rationale: Element 6 of the OIG's Seven Elements explicitly
mandates "Internal Monitoring and Auditing" to evaluate
compliance with policies, detect issues early, and validate
corrective actions. Audits should be risk-based and conducted
regularly.
3. A physician refers patients to a laboratory in which they
have a financial interest. This may violate:
A. False Claims Act
B. Stark Law (Physician Self-Referral Law)
C. HIPAA Privacy Rule
D. Civil Monetary Penalties Law
, https://www.stuvia.com/user/performance
Answer: B
Rationale: The Stark Law (42 U.S.C. § 1395nn) prohibits
physicians from referring Medicare/Medicaid patients for
designated health services (e.g., lab, imaging) to entities with
which they (or immediate family) have a financial relationship—
unless an exception applies.
4. Which regulation requires covered entities to conduct a risk
analysis of electronic protected health information (ePHI)?
A. HIPAA Privacy Rule
B. HIPAA Security Rule
C. HITECH Act
D. 21st Century Cures Act
Answer: B
Rationale: The HIPAA Security Rule (45 CFR §
164.308(a)(1)(ii)(A)) mandates a thorough, organization-wide
risk analysis to identify vulnerabilities to ePHI confidentiality,
integrity, and availability. This is a foundational requirement for
all covered entities and business associates.
5. Offering free transportation to patients for medically
necessary services may violate the Anti-Kickback Statute
unless it meets a:
A. Stark Law exception
B. Safe harbor
