HEALTHCARE COMPLIANCE EXAM 2 |
COMPLIANCE OFFICER| LATEST 2025-2026
QUESTION AND CORRECT ANSWER WITH
EXPLANATION WEST COAST UNIVERSITY
1. A hospital enters into a contract with a physician group that
includes incentive bonuses tied to increased referrals for imaging
services. The compliance officer identifies potential violations under
both the Stark Law and Anti-Kickback Statute. What is the MOST
appropriate immediate action?
A. Terminate all physician contracts
B. Conduct a legal and compliance review of the arrangement
C. Report directly to law enforcement
D. Ignore if services are medically necessary
Correct Answer: B. Conduct a legal and compliance review of the
arrangement
Rationale: Complex financial arrangements require detailed analysis for
compliance with both Stark and Anti-Kickback provisions before taking
corrective or reporting actions.
2. A compliance audit reveals that a hospital systematically billed
Medicare for inpatient services that should have been outpatient.
This resulted in higher reimbursements over several years. What is
the MOST critical next step?
A. Adjust future billing practices only
B. Initiate repayment and self-disclosure
C. Destroy historical records
D. Blame coding staff
Correct Answer: B. Initiate repayment and self-disclosure
Rationale: Systemic overbilling requires repayment and may necessitate
self-disclosure to mitigate penalties under federal regulations.
3. A data breach exposes encrypted ePHI, but the encryption key was
also compromised. Under the HIPAA Breach Notification Rule, how
should this incident be classified?
,A. Not a breach
B. Minor incident
C. Reportable breach
D. Administrative error
Correct Answer: C. Reportable breach
Rationale: If encryption is compromised, the data is considered
unsecured, making it a reportable breach under HIPAA.
4. A compliance officer identifies a pattern where physicians are
selectively admitting patients to affiliated facilities to maximize
reimbursement. Which combination of risks is MOST relevant?
A. HIPAA and OSHA
B. EMTALA and HITECH
C. Stark Law and Anti-Kickback Statute
D. FDA and CDC regulations
Correct Answer: C. Stark Law and Anti-Kickback Statute
Rationale: Financial incentives tied to referrals raise concerns under
both Stark (self-referral) and Anti-Kickback laws.
5. During an internal investigation, it is discovered that compliance
training records were falsified to show 100% staff completion. What
is the PRIMARY compliance concern?
A. Training inefficiency
B. Documentation fraud
C. Privacy violation
D. Security breach
Correct Answer: B. Documentation fraud
Rationale: Falsifying compliance records undermines program integrity
and may constitute fraud.
6. A hospital delays reporting a known overpayment beyond the
required timeframe. Under federal guidelines, what is the MOST
significant consequence?
, A. Reduced penalties
B. Conversion to false claim liability
C. No legal impact
D. Increased reimbursement
Correct Answer: B. Conversion to false claim liability
Rationale: Failure to return overpayments within required timelines may
trigger liability under the False Claims Act.
7. A compliance officer notices that audit trails show repeated access
to celebrity patient records without clinical justification. What is the
BEST course of action?
A. Ignore due to low impact
B. Conduct targeted investigation and apply sanctions
C. Notify media immediately
D. Disable all system access
Correct Answer: B. Conduct targeted investigation and apply
sanctions
Rationale: Unauthorized access to PHI must be investigated and
addressed with appropriate disciplinary measures.
8. A healthcare organization uses a third-party vendor for billing
without a signed Business Associate Agreement (BAA). Which risk is
MOST immediate?
A. Clinical error
B. HIPAA violation
C. EMTALA violation
D. Licensing issue
Correct Answer: B. HIPAA violation
Rationale: Sharing PHI without a BAA violates HIPAA requirements for
third-party data handling.
COMPLIANCE OFFICER| LATEST 2025-2026
QUESTION AND CORRECT ANSWER WITH
EXPLANATION WEST COAST UNIVERSITY
1. A hospital enters into a contract with a physician group that
includes incentive bonuses tied to increased referrals for imaging
services. The compliance officer identifies potential violations under
both the Stark Law and Anti-Kickback Statute. What is the MOST
appropriate immediate action?
A. Terminate all physician contracts
B. Conduct a legal and compliance review of the arrangement
C. Report directly to law enforcement
D. Ignore if services are medically necessary
Correct Answer: B. Conduct a legal and compliance review of the
arrangement
Rationale: Complex financial arrangements require detailed analysis for
compliance with both Stark and Anti-Kickback provisions before taking
corrective or reporting actions.
2. A compliance audit reveals that a hospital systematically billed
Medicare for inpatient services that should have been outpatient.
This resulted in higher reimbursements over several years. What is
the MOST critical next step?
A. Adjust future billing practices only
B. Initiate repayment and self-disclosure
C. Destroy historical records
D. Blame coding staff
Correct Answer: B. Initiate repayment and self-disclosure
Rationale: Systemic overbilling requires repayment and may necessitate
self-disclosure to mitigate penalties under federal regulations.
3. A data breach exposes encrypted ePHI, but the encryption key was
also compromised. Under the HIPAA Breach Notification Rule, how
should this incident be classified?
,A. Not a breach
B. Minor incident
C. Reportable breach
D. Administrative error
Correct Answer: C. Reportable breach
Rationale: If encryption is compromised, the data is considered
unsecured, making it a reportable breach under HIPAA.
4. A compliance officer identifies a pattern where physicians are
selectively admitting patients to affiliated facilities to maximize
reimbursement. Which combination of risks is MOST relevant?
A. HIPAA and OSHA
B. EMTALA and HITECH
C. Stark Law and Anti-Kickback Statute
D. FDA and CDC regulations
Correct Answer: C. Stark Law and Anti-Kickback Statute
Rationale: Financial incentives tied to referrals raise concerns under
both Stark (self-referral) and Anti-Kickback laws.
5. During an internal investigation, it is discovered that compliance
training records were falsified to show 100% staff completion. What
is the PRIMARY compliance concern?
A. Training inefficiency
B. Documentation fraud
C. Privacy violation
D. Security breach
Correct Answer: B. Documentation fraud
Rationale: Falsifying compliance records undermines program integrity
and may constitute fraud.
6. A hospital delays reporting a known overpayment beyond the
required timeframe. Under federal guidelines, what is the MOST
significant consequence?
, A. Reduced penalties
B. Conversion to false claim liability
C. No legal impact
D. Increased reimbursement
Correct Answer: B. Conversion to false claim liability
Rationale: Failure to return overpayments within required timelines may
trigger liability under the False Claims Act.
7. A compliance officer notices that audit trails show repeated access
to celebrity patient records without clinical justification. What is the
BEST course of action?
A. Ignore due to low impact
B. Conduct targeted investigation and apply sanctions
C. Notify media immediately
D. Disable all system access
Correct Answer: B. Conduct targeted investigation and apply
sanctions
Rationale: Unauthorized access to PHI must be investigated and
addressed with appropriate disciplinary measures.
8. A healthcare organization uses a third-party vendor for billing
without a signed Business Associate Agreement (BAA). Which risk is
MOST immediate?
A. Clinical error
B. HIPAA violation
C. EMTALA violation
D. Licensing issue
Correct Answer: B. HIPAA violation
Rationale: Sharing PHI without a BAA violates HIPAA requirements for
third-party data handling.
