Page 1 of 495
HCCA CHC & CPHC COMPLIANCE EXAM STUDY
TESTBANK ALL 1000+ QUESTIONS AND ANSWERS
LATEST UPDATE THIS YEAR - JUST RELEASED
HCCA CHC EXAM
QUESTION: If during the course of an internal investigation, the compliance officer believes the
integrity of the investigation might be compromised by the continued presence of work force
members who are the subject of the investigation. In the best interest of the attorney-client
privilege, which action would you take?
a. Conduct employee background checks
b. Counsel obtains employee's depositions
c. Destroy documents and other evidence
d. Re-assign employees to other responsibilities until the investig - ANSWER-d. Re-assign
employees to other responsibilities until the investigation is completed.
Explanation: he/she should recommend that such individuals be temporarily removed from
their current responsibilities until the investigation is completed.
Ref. Healthcare Compliance Professional's Manual
1
,Page 2 of 495
QUESTION: The billing manager was conducting a contemporaneous review and found what
could be a significant error. The billing manager contacts you and you then subsequently
contact your in-house legal counsel. Which of the following statements are False?
a. Because of the False Claims Act, your in-house counsel advises you that the retrospective
audit will need to cover a minimum of 6 years to a maximum of 10 years.
b. If you do not refund the Medicare overpayments, you could be charged with a federal fe -
ANSWER-c. A contemporaneous review that was done by the billing manager would be covered
under the attorney-client privilege.
Explanation: A significant limitation of the definition of protected communications relates to
documents that are prepared by the client prior to the time when the attorney began
preparations to give advice.
Ref. Healthcare Compliance Professional's Manual
QUESTION: You are the new compliance officer at an institution with an already established
compliance committee. Which committee members' professional background would be MOST
valuable in performing audit activities?
a. Legal Counsel
b. Business Management
c. Chief Financial Officer
2
,Page 3 of 495
d. Bio-Medical Engineer - ANSWER-b. Business Management
Explanation: It may be appropriate to designate a vendor oversight function for third party
relationships to monitor elements of the supply chain, provide a central point for enterprise
vendor issues, and set standards for training, tools, and monitoring.
Ref: HCPG Auditing and Monitoring 3460.30.40.60
QUESTION: A covered entity must obtain the patient's written authorization for any use or
disclosure of protected health information (PHI) in which circumstances?
a. Marketing activities
b. Research
c. PHI sales and licensing
d. Information sharing needed for treatment
e. A and C only
f. All of the above - ANSWER-e. A and C only
Ref. Permitted Uses and Disclosures section - https://www.hhs.gov/hipaa/for-
professionals/privacy/laws-regulations/index.html
3
,Page 4 of 495
QUESTION: Protected health information (PHI) is considered de-identified by HIPAA Privacy
Rule standards by:
a. absence of actual knowledge by the covered entity that the remaining information could be
used alone or in combination with other information to identify the individual
b. removal of only patient name and date of birth
c. a formal determination by a qualified expert
d. the removal of 18 specified individual identifiers
e. A, C and D
f. All of the answers - ANSWER-e. A, C and D
The Privacy Rule provides two de-identification methods: 1) a formal determination by a
qualified expert; or 2) the removal of specified individual identifiers as well as absence of actual
knowledge by the covered entity that the remaining information could be used alone or in
combination with other information to identify the individual.
Ref. https://www.hhs.gov/hipaa/for-professionals/privacy/special-topics/de-
identification/index.html#preparation
A compliance professional has been working with a department director to implement a new
policy regarding timely completion of medical records. Which of the following should be
completed by the department manager to promote compliance with the new policy?
a. Statistically valid sampling audit
4
, Page 5 of 495
b. Monitoring
c. Discovery Audit
d. Retrospective Audit - ANSWER-b. Monitoring
QUESTION: For monitoring activities, OIG uses the term regularly to describe the frequency of
review. Which factors should an organization consider when establishing a frequency schedule
for monitoring:
a. Timing of staff job performance evaluations, how often compliance training is provided,
whenever computer upgrades occur, and how many new employees were hired in the target
department.
b. Size of organization, frequency of the activity being monitored, past incidences of
misconduct, and current/future - ANSWER-b. Size of organization, frequency of the activity
being monitored, past incidences of misconduct, and current/future investigations.
Ref. Healthcare Compliance Professional's Manual
QUESTION: What is an important first step in creating a compliance team or improving the
effectiveness of an existing one?
a) Making sure senior management has the time and other resources necessary to promote and
carry out compliance improvements
5
HCCA CHC & CPHC COMPLIANCE EXAM STUDY
TESTBANK ALL 1000+ QUESTIONS AND ANSWERS
LATEST UPDATE THIS YEAR - JUST RELEASED
HCCA CHC EXAM
QUESTION: If during the course of an internal investigation, the compliance officer believes the
integrity of the investigation might be compromised by the continued presence of work force
members who are the subject of the investigation. In the best interest of the attorney-client
privilege, which action would you take?
a. Conduct employee background checks
b. Counsel obtains employee's depositions
c. Destroy documents and other evidence
d. Re-assign employees to other responsibilities until the investig - ANSWER-d. Re-assign
employees to other responsibilities until the investigation is completed.
Explanation: he/she should recommend that such individuals be temporarily removed from
their current responsibilities until the investigation is completed.
Ref. Healthcare Compliance Professional's Manual
1
,Page 2 of 495
QUESTION: The billing manager was conducting a contemporaneous review and found what
could be a significant error. The billing manager contacts you and you then subsequently
contact your in-house legal counsel. Which of the following statements are False?
a. Because of the False Claims Act, your in-house counsel advises you that the retrospective
audit will need to cover a minimum of 6 years to a maximum of 10 years.
b. If you do not refund the Medicare overpayments, you could be charged with a federal fe -
ANSWER-c. A contemporaneous review that was done by the billing manager would be covered
under the attorney-client privilege.
Explanation: A significant limitation of the definition of protected communications relates to
documents that are prepared by the client prior to the time when the attorney began
preparations to give advice.
Ref. Healthcare Compliance Professional's Manual
QUESTION: You are the new compliance officer at an institution with an already established
compliance committee. Which committee members' professional background would be MOST
valuable in performing audit activities?
a. Legal Counsel
b. Business Management
c. Chief Financial Officer
2
,Page 3 of 495
d. Bio-Medical Engineer - ANSWER-b. Business Management
Explanation: It may be appropriate to designate a vendor oversight function for third party
relationships to monitor elements of the supply chain, provide a central point for enterprise
vendor issues, and set standards for training, tools, and monitoring.
Ref: HCPG Auditing and Monitoring 3460.30.40.60
QUESTION: A covered entity must obtain the patient's written authorization for any use or
disclosure of protected health information (PHI) in which circumstances?
a. Marketing activities
b. Research
c. PHI sales and licensing
d. Information sharing needed for treatment
e. A and C only
f. All of the above - ANSWER-e. A and C only
Ref. Permitted Uses and Disclosures section - https://www.hhs.gov/hipaa/for-
professionals/privacy/laws-regulations/index.html
3
,Page 4 of 495
QUESTION: Protected health information (PHI) is considered de-identified by HIPAA Privacy
Rule standards by:
a. absence of actual knowledge by the covered entity that the remaining information could be
used alone or in combination with other information to identify the individual
b. removal of only patient name and date of birth
c. a formal determination by a qualified expert
d. the removal of 18 specified individual identifiers
e. A, C and D
f. All of the answers - ANSWER-e. A, C and D
The Privacy Rule provides two de-identification methods: 1) a formal determination by a
qualified expert; or 2) the removal of specified individual identifiers as well as absence of actual
knowledge by the covered entity that the remaining information could be used alone or in
combination with other information to identify the individual.
Ref. https://www.hhs.gov/hipaa/for-professionals/privacy/special-topics/de-
identification/index.html#preparation
A compliance professional has been working with a department director to implement a new
policy regarding timely completion of medical records. Which of the following should be
completed by the department manager to promote compliance with the new policy?
a. Statistically valid sampling audit
4
, Page 5 of 495
b. Monitoring
c. Discovery Audit
d. Retrospective Audit - ANSWER-b. Monitoring
QUESTION: For monitoring activities, OIG uses the term regularly to describe the frequency of
review. Which factors should an organization consider when establishing a frequency schedule
for monitoring:
a. Timing of staff job performance evaluations, how often compliance training is provided,
whenever computer upgrades occur, and how many new employees were hired in the target
department.
b. Size of organization, frequency of the activity being monitored, past incidences of
misconduct, and current/future - ANSWER-b. Size of organization, frequency of the activity
being monitored, past incidences of misconduct, and current/future investigations.
Ref. Healthcare Compliance Professional's Manual
QUESTION: What is an important first step in creating a compliance team or improving the
effectiveness of an existing one?
a) Making sure senior management has the time and other resources necessary to promote and
carry out compliance improvements
5
