CERTIFIED CONSUMER DEBT PRACTICE
EXAMINATION SCRIPT 2026 FULL
QUESTIONS AND ANSWERS
◍ St. Joseph's Hospital has a psychiatric service on the sixth floor of
the hospital. A 31-year old male has come to the HIM department and
requested to see a copy of his medical record. He indicated he was a
patient of Dr. Schmidt, a psychiatrist, and that he was on the sixth
floor of St. Joseph's for the last two months. These records are not
psychotherapy notes. Of the options here, what is the best course of
action? Answer: Allow the patient to access his record if, after
contacting his physician, his physician does not think it will be
harmful to the patient
◍ Minors are basically deemed legally incompetent to access, use or
disclose their health information. What resource should be consulted
in terms of who may authorize access, use, or disclose the health
records of minors? Answer: State law because HIPAA defers to state
laws on matters related to minors
◍ If an HIM department acts in deliberate ignorance or in disregard
of official coding guidelines, it may be committing: Answer: Fraud
◍ What is the general name for Medicare rules affecting healthcare
organizations? Answer: Conditions of Participation
,◍ The permanent RAC program was completely implemented in the
United States by: Answer: January 2010
◍ During user acceptance testing of a new EHR system, physicians
are complaining that they have to use multiple log-on screens to
access all system modules. For example, they have to use one log-on
for CPOE and another log-on to view laboratory results. One
physician suggest having a single sign-on that would provide access
to all the EHR system components. However, the hospital
administrator thinks that one log-on would be a security issue. What
information should the HIM director provide? Answer: Single sign-on
is less frustrating for the end user and can provide better security
◍ Which of the following are security safeguards that protect
equipment, media, and facilities? Answer: Physical Access Controls
◍ What does the term access control mean? Answer: Identifying
which data employees should have a right to use
◍ Which of the following is a software program that tracks every
access to data in the computer system? Answer: Audit Trail
◍ All of the following are steps in medical necessity and utilization
review, except: Answer: Access consideration
◍ Which of the following can be used to discover current hot areas of
compliance? Answer: The OIG workplan
,◍ In Medicare, the most common forms of fraud and abuse include
all of the following, except: Answer: Implementing a clinical
documentation improvement program
◍ The one aspect of managed care that has had the greatest impact on
healthcare organizations is: Answer: Cost Control
◍ The policies and procedures section of a coding compliance plan
should include all of the following except: Answer: Utilization
Review
◍ What is the term for an explicit statement that directs clinical
decision making? Answer: Evidence-based practice guideline
◍ Gatekeepers determine the appropriateness of all of the following
components, except: Answer: Rate of capitation or reimbursement
◍ Exceptions to the Federal Anti-Kickback Statute that allow
legitimate business arrangements and are not subject to prosecution
are: Answer: Safe Harbors
◍ How often are healthcare facilities required to practice their
emergency preparedness plan annually? Answer: Twice
◍ This private, not-for-profit organization is committed to developing
and maintaining practical, customer-focused standards to help
, organizations measure and improve the quality, value, and outcomes
of behavioral health and medical rehabilitation programs. Answer:
Commission on Accreditation of Rehabilitation Facilities
◍ What is it called when accrediting bodies such as The Joint
Commission can survey facilities for compliance with the medicare
Conditions of Participation for Hospitals instead of the government?
Answer: Deemed Status
◍ Which Joint Commission survey methodology involves an
evaluation that follows the hospital experiences of past or current
patients? Answer: Tracer Methodology
◍ Which of the following services is most likely to be considered
medically necessary? Answer: Standard of care for health condition
◍ Case management coordinates an individual's care, especially in
complex and high cost cases. Goals of case management include all of
the following except: Answer: Information Security
◍ When a service is not considered medically necessary based on the
reason for encounter, the patient should be provided with a(n) ____
indicating that Medicare might not pay and that the patient might be
responsible for the entire charge. Answer: ABN
◍ The number that has been proposed for use as a unique
identification number but is controversial because of confidentiality
and privacy concerns is the: Answer: Social Security Number
EXAMINATION SCRIPT 2026 FULL
QUESTIONS AND ANSWERS
◍ St. Joseph's Hospital has a psychiatric service on the sixth floor of
the hospital. A 31-year old male has come to the HIM department and
requested to see a copy of his medical record. He indicated he was a
patient of Dr. Schmidt, a psychiatrist, and that he was on the sixth
floor of St. Joseph's for the last two months. These records are not
psychotherapy notes. Of the options here, what is the best course of
action? Answer: Allow the patient to access his record if, after
contacting his physician, his physician does not think it will be
harmful to the patient
◍ Minors are basically deemed legally incompetent to access, use or
disclose their health information. What resource should be consulted
in terms of who may authorize access, use, or disclose the health
records of minors? Answer: State law because HIPAA defers to state
laws on matters related to minors
◍ If an HIM department acts in deliberate ignorance or in disregard
of official coding guidelines, it may be committing: Answer: Fraud
◍ What is the general name for Medicare rules affecting healthcare
organizations? Answer: Conditions of Participation
,◍ The permanent RAC program was completely implemented in the
United States by: Answer: January 2010
◍ During user acceptance testing of a new EHR system, physicians
are complaining that they have to use multiple log-on screens to
access all system modules. For example, they have to use one log-on
for CPOE and another log-on to view laboratory results. One
physician suggest having a single sign-on that would provide access
to all the EHR system components. However, the hospital
administrator thinks that one log-on would be a security issue. What
information should the HIM director provide? Answer: Single sign-on
is less frustrating for the end user and can provide better security
◍ Which of the following are security safeguards that protect
equipment, media, and facilities? Answer: Physical Access Controls
◍ What does the term access control mean? Answer: Identifying
which data employees should have a right to use
◍ Which of the following is a software program that tracks every
access to data in the computer system? Answer: Audit Trail
◍ All of the following are steps in medical necessity and utilization
review, except: Answer: Access consideration
◍ Which of the following can be used to discover current hot areas of
compliance? Answer: The OIG workplan
,◍ In Medicare, the most common forms of fraud and abuse include
all of the following, except: Answer: Implementing a clinical
documentation improvement program
◍ The one aspect of managed care that has had the greatest impact on
healthcare organizations is: Answer: Cost Control
◍ The policies and procedures section of a coding compliance plan
should include all of the following except: Answer: Utilization
Review
◍ What is the term for an explicit statement that directs clinical
decision making? Answer: Evidence-based practice guideline
◍ Gatekeepers determine the appropriateness of all of the following
components, except: Answer: Rate of capitation or reimbursement
◍ Exceptions to the Federal Anti-Kickback Statute that allow
legitimate business arrangements and are not subject to prosecution
are: Answer: Safe Harbors
◍ How often are healthcare facilities required to practice their
emergency preparedness plan annually? Answer: Twice
◍ This private, not-for-profit organization is committed to developing
and maintaining practical, customer-focused standards to help
, organizations measure and improve the quality, value, and outcomes
of behavioral health and medical rehabilitation programs. Answer:
Commission on Accreditation of Rehabilitation Facilities
◍ What is it called when accrediting bodies such as The Joint
Commission can survey facilities for compliance with the medicare
Conditions of Participation for Hospitals instead of the government?
Answer: Deemed Status
◍ Which Joint Commission survey methodology involves an
evaluation that follows the hospital experiences of past or current
patients? Answer: Tracer Methodology
◍ Which of the following services is most likely to be considered
medically necessary? Answer: Standard of care for health condition
◍ Case management coordinates an individual's care, especially in
complex and high cost cases. Goals of case management include all of
the following except: Answer: Information Security
◍ When a service is not considered medically necessary based on the
reason for encounter, the patient should be provided with a(n) ____
indicating that Medicare might not pay and that the patient might be
responsible for the entire charge. Answer: ABN
◍ The number that has been proposed for use as a unique
identification number but is controversial because of confidentiality
and privacy concerns is the: Answer: Social Security Number
