RHIA PRACTICE EXAM 1 LATEST SOLUTION 2025/2026 EDITION GUARANTEED GRADE A+

RHIA PRACTICE EXAM 1 LATEST SOLUTION 2025/2026 EDITION GUARANTEED GRADE A+ 1. Sally is the HIM director at Memorial Hospital and has been asked to compose a record retention policy for the hospital. What should be her first consideration in determining how long paper and electronic records must be retained? a. The amount of space allocated for record filing and server set up b. The number of paper records currently filed and the number of electronic files added on a daily basis c. The most stringent law or regulation in the state, CMS, and accrediting body guidelines and standards d. The cost of filing space and equipment C 2. A 65-year-old white male was admitted to the hospital on 1/15 complaining of abdominal pain. The attending physician requested an upper GI series and laboratory evaluation of CBC and UA. The x-ray revealed possible cholelithiasis, and the UA showed an increased white blood cell count. The patient was taken to surgery for an exploratory laparoscopy, and a ruptured appendix was discovered. The chief complaint was: a. Abdominal pain b. Cholelithiasis c. Exploratory laparoscopy d. Ruptured appendix A 3. Mrs. Smith's admitting data indicates that her birth date is March 21, 1948. On the discharge summary, Mrs. Smith's birth date is recorded as July 21, 1948. Which data quality element is missing from Mrs. Smith's health record? a. Data accuracy b. Data consistency c. Data accessibility d. Data comprehensiveness B 4. The discharge summary must be completed within ________ after discharge for most patients but within ________ for patients transferred to other facilities. Discharge summaries are not always required for patients who were hospitalized for fewer than ________ hours. a. 30 days, 48 hours, 24 hours b. 14 days, 24 hours, 48 hours c. 14 days, 48 hours, 24 hours d. 30 days, 24 hours, 48 hours D 5. Which of the following is an acceptable means of authenticating a record entry? a. The physician's assistant electronically signs for the physician. b. The HIM clerk electronically signs using the physician's login. c. The charge nurse electronically signs for the physician. d. The physician personally signs the entry electronically. D 6. A method of documenting nurses' progress notes by recording only abnormal or unusual findings or deviations from the prescribed plan of care is called: a. Problem-oriented progress notes b. Charting by exception c. Consultative notations d. Open charting B 7. In a long-term care setting, these are problem-oriented frameworks for additional patient assessment based on problem identification items (triggered conditions): a. Resident Assessment Protocols (RAPs) b. Resident Assessment Instrument (RAI) c. Utilization Guidelines (UG) d. Minimum Data Sets (MDS) A 8. HIM departments may be the hub of identifying, mitigating, and correcting master patient index (MPI) errors. Often that information is not shared with other departments within the healthcare entity. After identifying procedural problems that contribute to the creation of the MPI errors, which department should the MPI manager work with to correct these procedural problems? a. Administration b. Registration or patient access c. Risk management d. Radiology and laboratory B 9. Alex, an HIM analyst, reviews the record of Patty Eastly, a patient in the facility, to ensure that all documents are complete and signatures are present. This is an example of a: a. Closed review b. Qualitative review c. Concurrent review d. Delinquent review C 10. What type of information makes it easy for hospitals to compare and combine the contents of multiple patient health records? a. Administrative information b. Demographic information c. Progress notes d. Uniform data sets D 11. The data elements in a patient's automated laboratory result are examples of: a. Unstructured data b. Free-text data c. Financial data d. Structured data D 12. Which of the following materials are required elements in an emergency care record? a. Patient's instructions at discharge and a complete medical history b. Time and means of the patient's arrival, treatment rendered, and instructions at discharge c. Time and means of the patient's arrival, patient's complete medical history, and instructions at discharge d. Treatment rendered, instructions at discharge, and the patient's complete medical history B 13. In assessing the quality of care given to patients with diabetes mellitus, the quality team collects data regarding blood sugar levels on admission and on discharge. These data are called a(n): a. Indicator b. Measurement c. Assessment d. Outcome A 14. Sue is updating the data dictionary for her organization. In this data dictionary, the data element name is considered which of the following? a. Master data b. Metadata c. Structured data d. Unstructured data B 15. Which of the following is used by a long-term care facility to gather information about specific health status factors and includes information about specific risk factors in the resident's care? a. Case management b. Minimum Data Set c. Outcomes and assessment information set d. Core measure abstracting B 16. Dr. Collins admitted John Baker to University Hospital. Blue Cross Insurance will pay John's hospital bill. Upon discharge from the hospital, who owns John's health record? a. John b. Blue Cross c. University Hospital d. Dr. Collins C 17. What should be done about the email exchange between Jane Smith and her doctor, Dr. Ward, regarding Jane's concerns about an abnormal lab result and the doctor's response providing explanations and treatment options? a. Since this is an email correspondence, the facility has no responsibility to keep it as part of the patient's medical record. b. Since this email correspondence relates to communication between a physician and a patient and includes PHI, the facility should include the email in the patient's medical record. c. Since this is an email correspondence, it should be kept in a separate social media file within the health information management department. d. Since this is an email correspondence, it should be immediately deleted from the server and the physician should be disciplined for discussing PHI related topics via social media. B 18. Derek, an HIM technician, reviews each record in the EHR system upon discharge of the patient to ensure that the system correctly assigned all documentation to the correct tab category (for example, all lab reports under the lab tab and x-ray reports under the radiology tab). This system utilizes which format for its patient care record? a. Integrated b. Practice-oriented c. Chronological d. Source-oriented D 19. A local skilled nursing facility has been working to improve the quality of care it provides to residents. Facility staff have engaged in several PI initiatives recently, and the facility's internal data shows an improvement in quality metrics. The facility administrator is pleased with these findings but is also interested in determining how this facility is performing in contrast to other nearby skilled nursing facilities. Which of the following should the HIM professional use to inform management on how the facility compares to others in the area? a. Comparative performance data b. Internal infection reporting c. Master patient index d. Provider performance data A 20. According to Joint Commission Accreditation Standards, which document must be placed in the patient's record before a surgical procedure may be performed? a. Admission record b. Physician's order c. Report of history and physical examination d. Discharge summary C 21. The following data have been collected by the hospital quality committee. What conclusions can be made from the data on the hospital's quality of care between the first and second quarters? Measure/ 1st Quarter/ 2nd Quarter Medication errors/ 3.2%/ 10.4% Patient falls/ 4.2%/ 8.6% Hospital-acquired infections/ 1.8%/ 4.9% Transfusion reactions/ 1.4%/ 2.5% a. Quality of care improved between the first and second quarters. b. Quality of care is about the same between the first and second quarters. c. Quality of care declined between the first and second quarters. d. Quality of care should not be judged by these types of measures. C 22. The MPI manager has identified a pattern of duplicate health record numbers from the specimen processing area of the hospital. After spending time merging the patient information and correcting the duplicates in the patient information system, the MPI manager needs to notify which department to correct the source system data? a. Laboratory b. Radiology c. Quality management d. Registration A 23. Borrowing record entries from another source as well as representing or displaying past documentation as current are examples of a potential breach of: a. Identification and demographic integrity b. Authorship integrity c. Statistical integrity d. Auditing integrity B 24. When defining the legal health record in a healthcare entity, it is best practice to establish a policy statement of the legal health record as well as a: a. Case-mix index b. Master patient index c. Health record matrix d. Retention schedule C 25. Notes written by physicians and other practitioners as well as dictated and transcribed reports are examples of: a. Standardized data b. Codified data c. Aggregate data d. Unstructured clinical information D 26. Documentation including the date of action, method of action, description of the disposed record series of numbers or items, service dates, a statement that the records were eliminated in the normal course of business, and the signatures of the individuals supervising and witnessing the process must be included in this: a. Authorization b. Certificate of destruction c. Informed consent d. Continuity of care record B 27. Decision-making and authority over data-related matters is known as: a. Data management b. Data administration c. Data governance d. Data modeling C 28. A professional basketball player from the local team was admitted to your facility for a procedure. During this patient's hospital stay, access logs may need to be checked daily in order to determine: a. Whether access by employees is appropriate b. If the patient is satisfied with their stay c. If it is necessary to order prescriptions for the patient d. Whether the care to the patient meets quality standards A 29. A patient has the right to request a(n) ________, which describes where the covered entity has disclosed patient information for the past six years outside of treatment, payment, and healthcare operations. a. Disclosure list b. Designated record set c. Amendment of medical record d. Accounting of disclosures D 30. Why could it be difficult for a healthcare entity to respond to pulling an entire, legal health record together for an authorized request for information? a. It can exist in separate and multiple paper-based or electronic systems. b. The record is incomplete. c. Numerous physicians have not given consent to release the record. d. Risk management will not allow the legal health record to be released. A 31. Dr. Hansen saw a patient with measles in his office. He directed his office staff to call the local department of health to report this case of measles. The office manager called right away and completed the report as instructed. Which of the following provides the correct analysis of the actions taken by Dr. Hansen's office? a. Dr. Hansen's office followed protocol and reported this case of measles correctly. b. Dr. Hansen's office did not need to report this case to the local health department. c. Dr. Hansen's office should have mailed a letter to the local health department to report this case. d. Dr. Hansen's office should have reported the case to the local hospital and not to the health department. A 32. What is the implication regarding the confidentiality of incident reports in a legal proceeding when a staff member documents in the health record that an incident report was completed about a specific incident? a. There is no impact. b. The person making the entry in the health record may not be called as a witness in trial. c. The incident report likely becomes discoverable because it is mentioned in a discoverable document. d. The incident report cannot be discovered even though it is mentioned in a discoverable document. C 33. A hospital receives a valid request from a patient for copies of her medical records. The HIM clerk who is preparing the records removes copies of the patient's records from another hospital where the patient was previously treated. According to HIPAA regulations, was this action correct? a. Yes, HIPAA only requires that current records be produced for the patient. b. Yes, this is hospital policy over which HIPAA has no control. c. No, the records from the previous hospital are considered to be included in the designated record set and should be given to the patient. d. No, the records from the previous hospital are not included in the designated record set but should be released anyway. C 34. John is the privacy officer at General Hospital and conducts audit log checks as part of his job duties. What does an audit log check for? a. Loss of data b. Presence of a virus c. Successful completion of a backup d. Unauthorized access to a system D 35. An outpatient laboratory routinely mails the results of health screening exams to its patients. The lab has received numerous complaints from patients who have received another patient's health information. Even though multiple complaints have been received, no change in process has occurred because the error rate is low in comparison to the volume of mail that is processed daily for the lab. How should the Privacy Officer for this healthcare entity respond to this situation? a. Determine why the lab results are being sent to incorrect patients and train the laboratory staff on the HIPAA Privacy Rule b. Fire the responsible employees c. Do nothing, as these types of errors occur in every healthcare entity d. Retrain the entire hospital entity because these types of errors could result in a huge fine from the Office of Inspector General A 36. Anywhere Hospital's coding staff will be working remotely. The entity wants to ensure that they are complying with the HIPAA Security Rule. What type of network uses a private tunnel through the Internet as a transport medium that will allow the transmission of ePHI to occur between the coder and the facility securely? a. Intranet b. Local area network c. Virtual private network d. Wide area network C 37. An individual designated as an inpatient coder may have access to an electronic medical record in order to code the record. Under what access security mechanism is the coder allowed access to the system? a. Context-based b. Role-based c. Situation-based d. User-based B 38. The Security Rule leaves the methods for conducting the security risk analysis to the discretion of the healthcare entity. The first consideration for a healthcare facility should be: a. Its own characteristics and environment b. The potential threats and vulnerabilities c. The level of risk d. An assessment of current security measures A 39. Sally Mitchell was treated for kidney stones at Graham Hospital last year. She now wants to review her medical record in person. She has requested to review it by herself in a closed room. a. Failure to accommodate her wishes will be a violation under the HIPAA Privacy Rule. b. Sally owns the information in her record, so she must be granted her request. c. Sally's request does not have to be granted because the hospital is responsible for the integrity of the medical record. d. Patients should never be given access to their actual medical records. C 40. Who has the legal right to refuse treatment? 1. 98 yr old sound of mind 2. 10 yr old sound of mind 3. 35 yr old, incompetent, did not express treatment wished prior 4. 35 yr old, incompetent, created living will prior, refused living by artificial means 5. 35 yr old, intellectual disability, metal capacity of 12 yr old a. 1 and 2 b. 1 and 3 c. 1 and 4 d. 4 and 5 C 41. Linda Wallace is being admitted to the hospital. She is presented with a Notice of Privacy Practices. In the Notice, it is explained that her PHI will be used and disclosed for treatment, payment, and operations (TPO) purposes. Linda states that she does not want her PHI used for those purposes. Of the options listed here, what is the best course of action? a. The hospital must honor her wishes and not use her PHI for TPO. b. The hospital may decline to treat Linda because of her refusal. c. The hospital is not required to honor her wishes in this situation, as the Notice of Privacy Practices is informational only. d. The hospital is not required to honor her wishes for treatment purposes but must honor them for payment and operations purposes. C 42. Jack Mitchell, a patient in Ross Hospital, is being treated for heart failure. He has not opted out of the facility directory. Callers who request information about him may be given: a. No information due to the highly sensitive nature of his illness b. Admission date and location in the facility c. General condition and acknowledgment of admission d. Location in the facility and diagnosis C 43. A data breach occurred in your organization, and after the investigation it was determined that a total of 785 individuals were impacted by the data breach. What must be completed within 60 days of learning about the data breach? a. Update the notice of privacy practices and send to all patients b. Report the incident to the individuals impacted, local media, and the Department of Health and Human Services c. Conduct privacy training for members of the organization d. Document a note mentioning the data breach in each of the patients' charts and tell the local media B 44. The "custodian of health records" refers to the individual within a healthcare entity who is responsible for which of the following actions? a. Determining alternative treatment for the patient b. Preparing physicians to testify c. Testifying to the authenticity of records d. Testifying regarding the care of the patient C 45. Dr. Smith, a member of the medical staff, asks to see the medical records of his adult daughter who was hospitalized in your institution for a tonsillectomy at age 16. The daughter is now 25. Dr. Jones was the patient's physician. Of the options listed here, what is the best course of action? a. Allow Dr. Smith to see the records because he was the daughter's guardian at the time of the tonsillectomy. b. Call the hospital administrator for authorization to release the record to Dr. Smith since he is on the medical staff. c. Inform Dr. Smith that he cannot access his daughter's health record without her signed authorization allowing him access to the record. d. Refer Dr. Smith to Dr. Jones and release the record if Dr. Jones agrees. C 46. St. Joseph's Hospital has a psychiatric service on the sixth floor. A 31-year-old male came to the HIM department and requested to see a copy of his health record. He told the clerk he was a patient of Dr. Schmidt, a psychiatrist, and had been on the sixth floor of St. Joseph's for the last two months. These records are not psychotherapy notes. The best course of action for you to take as the HIM director is: a. Prohibit the patient from accessing his record as it contains psychiatric diagnoses that may greatly upset him. b. Allow the patient to access his record. c. Allow the patient to access his record if, after contacting his physician, his physician does not feel it will be harmful to the patient. d. Deny access because HIPAA prevents patients from reviewing their psychiatric records. C 47. You are a member of the hospital's Health Information Management Committee. The committee has created a HIPAA-compliant authorization form. Which of the following items does the Privacy Rule require for the form? a. Signature of the patient's attending physician b. Identification of the patient's next of kin c. Identification of the person or entity authorized to receive PHI d. Patient's insurance information CONTINUED...