HCCA CHC / CHPC Compliance Examination
Questions with Answers | Latest Update| Pass Guaranteed
1. According to the OIG's guidance, how many core elements make up an
effective compliance program?
A) Five
B) Seven
C) Nine
D) Twelve
Answer: B
Rationale: The OIG has consistently identified seven core elements of an effective
compliance program: (1) written policies and procedures, (2) compliance
leadership and oversight, (3) training and education, (4) effective
communication/reporting mechanisms, (5) auditing and monitoring, (6)
enforcement/discipline, and (7) prompt response to detected offenses. These
elements form the foundation referenced throughout federal sentencing
guidelines and CIAs.
2. Which of the seven elements of an effective compliance program refers to the
establishment of a hotline and non-retaliation policy?
A) Auditing and monitoring
B) Effective lines of communication
C) Enforcement and discipline
D) Written standards
Answer: B
Rationale: Effective lines of communication include mechanisms such as a
compliance hotline, open-door policies, and anonymous reporting channels, paired
with a clear non-retaliation policy to encourage staff to report concerns without
fear of reprisal. This element is essential to detecting problems early, before they
escalate into larger liability.
,3. An organization's compliance officer reports directly to the CEO but has no
access to the Board of Directors. What deficiency does this represent under OIG
guidance?
A) No deficiency; this structure is ideal
B) Lack of appropriate authority, independence, and access to the governing
body, which OIG guidance recommends for the compliance function
C) Excessive independence
D) Improper delegation of clinical duties
Answer: B
Rationale: OIG guidance emphasizes that the compliance officer should have
sufficient authority, resources, and direct access/reporting lines to the Board or a
Board compliance committee, independent of operational management, to ensure
compliance concerns receive appropriate visibility and are not filtered or
suppressed by other executives.
4. What is the primary purpose of a compliance risk assessment?
A) To assign blame for past violations
B) To proactively identify and prioritize areas of legal and regulatory risk so
resources can be allocated to mitigate them
C) To replace the need for an annual compliance work plan
D) To satisfy union requirements
Answer: B
Rationale: A compliance risk assessment systematically identifies, analyzes, and
prioritizes potential areas of regulatory and operational risk (e.g., billing, HIPAA,
conflicts of interest) so the organization can allocate auditing, monitoring, and
training resources efficiently. It forms the basis for the annual compliance work
plan.
5. Which of the following best describes the difference between monitoring and
auditing in a compliance program?
A) They are identical processes with different names
B) Monitoring is an ongoing, routine process to detect issues; auditing is a
periodic, structured, and often independent evaluation for compliance
C) Auditing is continuous; monitoring happens only once a year
, D) Monitoring is performed only by external parties
Answer: B
Rationale: Monitoring refers to routine, ongoing internal reviews (e.g., daily
claims edits, real-time reports) designed to catch issues as they occur, while
auditing is a more formal, periodic, and often independent or objective
assessment (internal or external) that evaluates compliance with policies and
regulations over a defined period, providing a more comprehensive check.
6. A new employee is hired into a billing role. According to OIG guidance, when
should compliance training ideally occur?
A) Only if the employee requests it
B) Within a reasonable period after hire (e.g., during orientation) and
periodically thereafter, with role-specific content
C) After one year of employment
D) Compliance training is optional for billing staff
Answer: B
Rationale: Effective compliance programs provide training at the time of
hire/orientation and on an ongoing periodic basis (e.g., annually), tailored to the
employee's specific role and risk exposure. Billing staff, given their direct
involvement in claims submission, typically require more targeted and frequent
training on coding and billing regulations.
7. Under the federal sentencing guidelines, what mitigating factor can reduce
culpability/penalties for an organization found to have violated the law?
A) Having no compliance program at all
B) Demonstrating the existence of an effective compliance and ethics program
at the time of the offense
C) Terminating the compliance officer after the violation
D) Ignoring self-disclosure obligations
Answer: B
Rationale: The Federal Sentencing Guidelines for Organizations provide credit
(potential reduction in culpability score and penalties) for organizations that had
an effective compliance and ethics program in place at the time an offense
, occurred, along with prompt reporting and cooperation with authorities,
incentivizing robust proactive compliance efforts.
8. Which action represents an appropriate response to a detected compliance
violation, consistent with the 'prompt response to detected offenses' element?
A) Ignoring the issue if it seems minor
B) Investigating promptly, taking corrective action, and considering self-
disclosure obligations where applicable
C) Waiting until the next audit cycle to address it
D) Terminating the employee without investigation
Answer: B
Rationale: Upon detecting a potential violation, an effective compliance program
requires prompt investigation to determine scope and root cause, implementation
of corrective action (which may include repayment of overpayments), and
evaluation of self-disclosure obligations (e.g., through the OIG Self-Disclosure
Protocol or CMS voluntary refund process) within required timeframes.
9. A compliance officer discovers a pattern of upcoded claims dating back 18
months, resulting in an identified overpayment. Under the 60-day rule, what is
the organization's obligation once the overpayment is identified and quantified?
A) No obligation exists unless the government audits the claims
B) Report and return the overpayment within 60 days of identification, or it
may become a False Claims Act violation
C) Wait for the patient to request a refund
D) Overpayments only need to be returned if requested by CMS
Answer: B
Rationale: Under the Affordable Care Act's 60-day rule, providers who identify an
overpayment must report and return it within 60 days of identification (or by the
corresponding cost report due date). Failure to do so can result in liability under
the False Claims Act, as retaining a known overpayment constitutes a 'reverse
false claim.'
10. Which best describes the concept of 'deliberate ignorance' or 'reckless
disregard' as it relates to False Claims Act liability?
Questions with Answers | Latest Update| Pass Guaranteed
1. According to the OIG's guidance, how many core elements make up an
effective compliance program?
A) Five
B) Seven
C) Nine
D) Twelve
Answer: B
Rationale: The OIG has consistently identified seven core elements of an effective
compliance program: (1) written policies and procedures, (2) compliance
leadership and oversight, (3) training and education, (4) effective
communication/reporting mechanisms, (5) auditing and monitoring, (6)
enforcement/discipline, and (7) prompt response to detected offenses. These
elements form the foundation referenced throughout federal sentencing
guidelines and CIAs.
2. Which of the seven elements of an effective compliance program refers to the
establishment of a hotline and non-retaliation policy?
A) Auditing and monitoring
B) Effective lines of communication
C) Enforcement and discipline
D) Written standards
Answer: B
Rationale: Effective lines of communication include mechanisms such as a
compliance hotline, open-door policies, and anonymous reporting channels, paired
with a clear non-retaliation policy to encourage staff to report concerns without
fear of reprisal. This element is essential to detecting problems early, before they
escalate into larger liability.
,3. An organization's compliance officer reports directly to the CEO but has no
access to the Board of Directors. What deficiency does this represent under OIG
guidance?
A) No deficiency; this structure is ideal
B) Lack of appropriate authority, independence, and access to the governing
body, which OIG guidance recommends for the compliance function
C) Excessive independence
D) Improper delegation of clinical duties
Answer: B
Rationale: OIG guidance emphasizes that the compliance officer should have
sufficient authority, resources, and direct access/reporting lines to the Board or a
Board compliance committee, independent of operational management, to ensure
compliance concerns receive appropriate visibility and are not filtered or
suppressed by other executives.
4. What is the primary purpose of a compliance risk assessment?
A) To assign blame for past violations
B) To proactively identify and prioritize areas of legal and regulatory risk so
resources can be allocated to mitigate them
C) To replace the need for an annual compliance work plan
D) To satisfy union requirements
Answer: B
Rationale: A compliance risk assessment systematically identifies, analyzes, and
prioritizes potential areas of regulatory and operational risk (e.g., billing, HIPAA,
conflicts of interest) so the organization can allocate auditing, monitoring, and
training resources efficiently. It forms the basis for the annual compliance work
plan.
5. Which of the following best describes the difference between monitoring and
auditing in a compliance program?
A) They are identical processes with different names
B) Monitoring is an ongoing, routine process to detect issues; auditing is a
periodic, structured, and often independent evaluation for compliance
C) Auditing is continuous; monitoring happens only once a year
, D) Monitoring is performed only by external parties
Answer: B
Rationale: Monitoring refers to routine, ongoing internal reviews (e.g., daily
claims edits, real-time reports) designed to catch issues as they occur, while
auditing is a more formal, periodic, and often independent or objective
assessment (internal or external) that evaluates compliance with policies and
regulations over a defined period, providing a more comprehensive check.
6. A new employee is hired into a billing role. According to OIG guidance, when
should compliance training ideally occur?
A) Only if the employee requests it
B) Within a reasonable period after hire (e.g., during orientation) and
periodically thereafter, with role-specific content
C) After one year of employment
D) Compliance training is optional for billing staff
Answer: B
Rationale: Effective compliance programs provide training at the time of
hire/orientation and on an ongoing periodic basis (e.g., annually), tailored to the
employee's specific role and risk exposure. Billing staff, given their direct
involvement in claims submission, typically require more targeted and frequent
training on coding and billing regulations.
7. Under the federal sentencing guidelines, what mitigating factor can reduce
culpability/penalties for an organization found to have violated the law?
A) Having no compliance program at all
B) Demonstrating the existence of an effective compliance and ethics program
at the time of the offense
C) Terminating the compliance officer after the violation
D) Ignoring self-disclosure obligations
Answer: B
Rationale: The Federal Sentencing Guidelines for Organizations provide credit
(potential reduction in culpability score and penalties) for organizations that had
an effective compliance and ethics program in place at the time an offense
, occurred, along with prompt reporting and cooperation with authorities,
incentivizing robust proactive compliance efforts.
8. Which action represents an appropriate response to a detected compliance
violation, consistent with the 'prompt response to detected offenses' element?
A) Ignoring the issue if it seems minor
B) Investigating promptly, taking corrective action, and considering self-
disclosure obligations where applicable
C) Waiting until the next audit cycle to address it
D) Terminating the employee without investigation
Answer: B
Rationale: Upon detecting a potential violation, an effective compliance program
requires prompt investigation to determine scope and root cause, implementation
of corrective action (which may include repayment of overpayments), and
evaluation of self-disclosure obligations (e.g., through the OIG Self-Disclosure
Protocol or CMS voluntary refund process) within required timeframes.
9. A compliance officer discovers a pattern of upcoded claims dating back 18
months, resulting in an identified overpayment. Under the 60-day rule, what is
the organization's obligation once the overpayment is identified and quantified?
A) No obligation exists unless the government audits the claims
B) Report and return the overpayment within 60 days of identification, or it
may become a False Claims Act violation
C) Wait for the patient to request a refund
D) Overpayments only need to be returned if requested by CMS
Answer: B
Rationale: Under the Affordable Care Act's 60-day rule, providers who identify an
overpayment must report and return it within 60 days of identification (or by the
corresponding cost report due date). Failure to do so can result in liability under
the False Claims Act, as retaining a known overpayment constitutes a 'reverse
false claim.'
10. Which best describes the concept of 'deliberate ignorance' or 'reckless
disregard' as it relates to False Claims Act liability?
