WGU D391 HEALTHCARE ECOSYSTEM OA ACTUAL EXAM
2026/2027 COMPLETE QUESTIONS WITH CORRECT
DETAILED ANSWERS/100% GUARANTEED PASS NEWEST
VERSION
Question 1
A patient is prescribed a medication, and the pharmacy sends an electronic request to the provider’s
office for a renewal. Which health IT concept is being used?
A) EHR
B) (Correct) HIEsupporting electronic prior authorization
C) Clinical decision support system
D) Patient portal
Rationale: Electronic prior authorization (ePA) allows pharmacies to request medication renewals
directly from providers, reducing phone/fax delays. EHRs store data but don’t initiate requests; CDSS
gives alerts; patient portals are patient-facing.
Question 2
Which federal regulation governs the privacy and security of protected health information (PHI)?
A) Affordable Care Act
B) HITECH Act
C) (Correct) HIPAA
D) 21st Century Cures Act
Rationale: HIPAA (Health Insurance Portability and Accountability Act) sets national standards for
PHI privacy/security. The ACA focuses on insurance access; HITECH strengthened HIPAA
enforcement; the Cures Act promotes interoperability.
,Question 3
A hospital implements a system that alerts providers when a prescribed drug interacts with another
medication the patient is taking. This is an example of:
A) (Correct) Clinical Decision Support (CDS)
B) Computerized Provider Order Entry (CPOE)
C) Master Patient Index (MPI)
D) Revenue Cycle Management (RCM)
Rationale: CDS provides real-time alerts and reminders to clinicians. CPOE is for entering orders; MPI
links patient records across systems; RCM handles billing.
Question 4
Which payment model rewards providers based on quality and cost-efficiency rather than volume of
services?
A) Fee-for-service
B) (Correct) Value-based purchasing
C) Capitation
D) Indemnity insurance
Rationale: Value-based purchasing ties reimbursement to performance metrics. Fee-for-service pays
per service; capitation pays a fixed amount per patient; indemnity is traditional fee-for-service
insurance.
Question 5
A small rural clinic cannot afford an expensive EHR but needs to exchange data with a regional
hospital. What is the most cost-effective solution?
A) Build a custom EHR
B) Use paper records with scanners
C) (Correct) Adopt a cloud-based EHR with interoperability tools
D) Purchase an enterprise EHR
Rationale: Cloud-based EHRs reduce upfront costs and often include interoperability features. Custom
builds are expensive; paper records hinder exchange; enterprise systems are costly for small clinics.
,Question 6
What is the primary purpose of the Master Patient Index (MPI)?
A) Store clinical notes
B) (Correct) Uniquely identify patients across multiple systems
C) Process insurance claims
D) Track medication administration
Rationale: The MPI assigns a unique identifier to each patient to prevent duplicate records. Clinical
notes are in EHRs; claims use billing systems; medication tracking is in eMAR.
Question 7
A health information exchange (HIE) connects several hospitals. What is a major benefit for public
health?
A) Increased patient billing
B) (Correct) Faster outbreak detection and surveillance
C) Reduced need for physicians
D) Automated insurance denials
Rationale: HIEs allow public health agencies to monitor disease patterns in real time. Billing, staffing,
and denials are not public health benefits.
Question 8
Under the HITECH Act, what is a covered entity required to do in the event of a breach of unsecured
PHI?
A) Notify only the patient
B) (Correct) Notify patients, HHS, and in large breaches, media
C) Do nothing if the breach was accidental
D) Delete all breached data
Rationale: HITECH mandates tiered notification: patients always; HHS for >500 records; media for
>500 in a state/jurisdiction. Accidental breaches still require risk assessment.
, Question 9
Which role is responsible for ensuring an organization meets HIPAA Security Rule requirements for
electronic PHI?
A) Chief Medical Officer
B) (Correct) Privacy and Security Officer
C) Revenue Cycle Director
D) Clinical Informaticist
Rationale: The Privacy/Security Officer oversees policies, risk assessments, and breach response.
CMO focuses on clinical care; RCD on billing; informaticist on system design.
Question 10
A patient portal allows a diabetic patient to view lab results, message the care team, and request refills.
This supports which IOM aim?
A) Efficiency
B) (Correct) Patient-centered care
C) Equity
D) Timeliness
Rationale: Patient portals empower patients to engage in their care, directly supporting
patient-centeredness. Efficiency/timeliness are system-focused; equity addresses disparities.
Question 11
Which is a key feature of the 21st Century Cures Act?
A) Penalties for not using EHRs
B) (Correct) Anti-information blocking provisions
C) Mandatory use of ICD-11
D) Creation of Medicare Part D
Rationale: The Cures Act prohibits information blocking and promotes API-based data exchange. EHR
penalties are from meaningful use; ICD-11 not mandated; Part D is from MMA (2003).
2026/2027 COMPLETE QUESTIONS WITH CORRECT
DETAILED ANSWERS/100% GUARANTEED PASS NEWEST
VERSION
Question 1
A patient is prescribed a medication, and the pharmacy sends an electronic request to the provider’s
office for a renewal. Which health IT concept is being used?
A) EHR
B) (Correct) HIEsupporting electronic prior authorization
C) Clinical decision support system
D) Patient portal
Rationale: Electronic prior authorization (ePA) allows pharmacies to request medication renewals
directly from providers, reducing phone/fax delays. EHRs store data but don’t initiate requests; CDSS
gives alerts; patient portals are patient-facing.
Question 2
Which federal regulation governs the privacy and security of protected health information (PHI)?
A) Affordable Care Act
B) HITECH Act
C) (Correct) HIPAA
D) 21st Century Cures Act
Rationale: HIPAA (Health Insurance Portability and Accountability Act) sets national standards for
PHI privacy/security. The ACA focuses on insurance access; HITECH strengthened HIPAA
enforcement; the Cures Act promotes interoperability.
,Question 3
A hospital implements a system that alerts providers when a prescribed drug interacts with another
medication the patient is taking. This is an example of:
A) (Correct) Clinical Decision Support (CDS)
B) Computerized Provider Order Entry (CPOE)
C) Master Patient Index (MPI)
D) Revenue Cycle Management (RCM)
Rationale: CDS provides real-time alerts and reminders to clinicians. CPOE is for entering orders; MPI
links patient records across systems; RCM handles billing.
Question 4
Which payment model rewards providers based on quality and cost-efficiency rather than volume of
services?
A) Fee-for-service
B) (Correct) Value-based purchasing
C) Capitation
D) Indemnity insurance
Rationale: Value-based purchasing ties reimbursement to performance metrics. Fee-for-service pays
per service; capitation pays a fixed amount per patient; indemnity is traditional fee-for-service
insurance.
Question 5
A small rural clinic cannot afford an expensive EHR but needs to exchange data with a regional
hospital. What is the most cost-effective solution?
A) Build a custom EHR
B) Use paper records with scanners
C) (Correct) Adopt a cloud-based EHR with interoperability tools
D) Purchase an enterprise EHR
Rationale: Cloud-based EHRs reduce upfront costs and often include interoperability features. Custom
builds are expensive; paper records hinder exchange; enterprise systems are costly for small clinics.
,Question 6
What is the primary purpose of the Master Patient Index (MPI)?
A) Store clinical notes
B) (Correct) Uniquely identify patients across multiple systems
C) Process insurance claims
D) Track medication administration
Rationale: The MPI assigns a unique identifier to each patient to prevent duplicate records. Clinical
notes are in EHRs; claims use billing systems; medication tracking is in eMAR.
Question 7
A health information exchange (HIE) connects several hospitals. What is a major benefit for public
health?
A) Increased patient billing
B) (Correct) Faster outbreak detection and surveillance
C) Reduced need for physicians
D) Automated insurance denials
Rationale: HIEs allow public health agencies to monitor disease patterns in real time. Billing, staffing,
and denials are not public health benefits.
Question 8
Under the HITECH Act, what is a covered entity required to do in the event of a breach of unsecured
PHI?
A) Notify only the patient
B) (Correct) Notify patients, HHS, and in large breaches, media
C) Do nothing if the breach was accidental
D) Delete all breached data
Rationale: HITECH mandates tiered notification: patients always; HHS for >500 records; media for
>500 in a state/jurisdiction. Accidental breaches still require risk assessment.
, Question 9
Which role is responsible for ensuring an organization meets HIPAA Security Rule requirements for
electronic PHI?
A) Chief Medical Officer
B) (Correct) Privacy and Security Officer
C) Revenue Cycle Director
D) Clinical Informaticist
Rationale: The Privacy/Security Officer oversees policies, risk assessments, and breach response.
CMO focuses on clinical care; RCD on billing; informaticist on system design.
Question 10
A patient portal allows a diabetic patient to view lab results, message the care team, and request refills.
This supports which IOM aim?
A) Efficiency
B) (Correct) Patient-centered care
C) Equity
D) Timeliness
Rationale: Patient portals empower patients to engage in their care, directly supporting
patient-centeredness. Efficiency/timeliness are system-focused; equity addresses disparities.
Question 11
Which is a key feature of the 21st Century Cures Act?
A) Penalties for not using EHRs
B) (Correct) Anti-information blocking provisions
C) Mandatory use of ICD-11
D) Creation of Medicare Part D
Rationale: The Cures Act prohibits information blocking and promotes API-based data exchange. EHR
penalties are from meaningful use; ICD-11 not mandated; Part D is from MMA (2003).
