WGU C802 – Foundations in Healthcare Information
Management | Bachelor of Science in Health
Information Management Original Practice
Questions & Answers | Comprehensive WGU C802
Study Guide & Assessment Preparation | Health
Information Systems, Healthcare IT, Information
Management, System Evaluation & Analysis, EHRs,
Health Information Technology, Healthcare
Operations, Implementation Concepts & Detailed
Rationales
Question 1: In the context of Health Information Management (HIM) and the
adoption of a new Electronic Health Record (EHR), what is the primary
objective of conducting a Cost-Benefit Analysis (CBA)?
A. To select the vendor with the lowest initial implementation cost.
B. To ensure the new EHR system has the most advanced clinical decision support
features.
C. To determine if the financial and operational benefits of the EHR outweigh its total
costs over time.
D. To comply with federal mandates for Meaningful Use reporting.
CORRECT ANSWER: C. To determine if the financial and operational benefits
of the EHR outweigh its total costs over time.
Rationale: A Cost-Benefit Analysis is a financial tool used to evaluate the total
anticipated costs of an EHR implementation against its projected benefits. The goal is to
provide a data-driven recommendation by comparing these factors to ensure the
investment is sound and will yield a positive return for the organization .
Question 2: A large healthcare organization is planning to replace its outdated
EHR system entirely. Which of the following vendor selection strategies is
being employed?
A. Build
B. Borrow
C. Blend
D. Rip and Replace
CORRECT ANSWER: D. Rip and Replace
Rationale: The "Rip and Replace" strategy involves completely removing an existing
EHR system and implementing a new one from a different vendor. This is a significant
undertaking that is typically chosen when the current system is obsolete or fails to meet
the organization's core needs .
Question 3: During the EHR vendor selection process, which of the following is
a key role of the Health Information Manager?
,A. To solely focus on the financial aspects of the contract.
B. To act as a liaison between IT, finance, clinicians, and leadership to ensure vendor
solutions align with organizational goals.
C. To develop the software code for the new EHR system.
D. To provide direct patient care during the implementation phase.
CORRECT ANSWER: B. To act as a liaison between IT, finance, clinicians, and
leadership to ensure vendor solutions align with organizational goals.
Rationale: The Health Information Manager plays a crucial role as a bridge between
various stakeholders. They ensure that the chosen EHR system meets not only clinical
needs but also operational, financial, and compliance requirements, ensuring the
solution aligns with the organization's overall strategic objectives .
Question 4: What is the purpose of a Request for Proposal (RFP) in the EHR
selection process?
A. To informally gauge vendor interest in a potential project.
B. To send a formal document to vendors requesting detailed proposals on how they will
meet the organization's specified requirements.
C. To finalize the contract and pricing with the chosen vendor.
D. To announce the winner of the vendor selection process to the public.
CORRECT ANSWER: B. To send a formal document to vendors requesting
detailed proposals on how they will meet the organization's specified
requirements.
Rationale: An RFP is a formal procurement document that outlines an organization's
needs and invites vendors to submit detailed proposals. It typically includes technical
specifications, functional requirements, budget constraints, and expectations for support
and training, allowing the organization to compare potential solutions .
Question 5: In an EHR contract, which component is critical for ensuring data
control and portability?
A. Data Ownership and Exit Strategy clause
B. Service Level Agreement (SLA)
C. Scope of Work
D. Pricing and Fees section
CORRECT ANSWER: A. Data Ownership and Exit Strategy clause
Rationale: The data ownership clause clarifies that the healthcare organization retains
full control over its patient data. The exit strategy clause outlines the process for
transferring data to another system if the organization switches vendors in the future,
which is essential for avoiding data lock-in .
Question 6: Which of the following security features is essential for an EHR to
prevent unauthorized access to patient information based on a user's job role?
,A. Data encryption
B. Audit logs
C. Role-Based Access Controls (RBAC)
D. Multi-factor authentication (MFA)
CORRECT ANSWER: C. Role-Based Access Controls (RBAC)
Rationale: Role-Based Access Controls ensure that users only have access to the data
necessary to perform their specific job functions. This principle of least privilege is a
cornerstone of data security in healthcare and helps protect patient privacy by limiting
unauthorized exposure .
Question 7: What is a fundamental requirement for a healthcare organization
to share patient data with a third-party EHR vendor?
A. A Data Use Agreement (DUA)
B. A Business Associate Agreement (BAA)
C. A Material Transfer Agreement (MTA)
D. A Non-Disclosure Agreement (NDA)
CORRECT ANSWER: B. A Business Associate Agreement (BAA)
Rationale: Under HIPAA, a Business Associate Agreement is a legally binding contract
required between a Covered Entity (the healthcare organization) and a Business
Associate (the vendor). This agreement details the vendor's responsibilities for
safeguarding protected health information and ensures they comply with HIPAA's
Privacy and Security Rules .
Question 8: A health information exchange (HIE) that secures data at the point
of service and requires participants to be members of a specific organization is
characteristic of which model?
A. Centralized Model
B. Federated (Decentralized) Model
C. Hybrid Model
D. Consolidated Model
CORRECT ANSWER: B. Federated (Decentralized) Model
Rationale: The Federated or Decentralized model of HIE does not store all data in a
single repository. Instead, it secures and stores data at the point of service. Participants
must agree to share information with other members of the specific organization or
network, and the exchange is facilitated through a "record locator service" that points to
where the data resides .
Question 9: Which of the following is a documented benefit of implementing a
Health Information Exchange (HIE)?
A. Decreased need for cybersecurity measures.
B. Elimination of all healthcare costs.
, C. Improved coordination of patient care by providing access to the same patient data
for all involved providers.
D. Complete elimination of patient paperwork.
CORRECT ANSWER: C. Improved coordination of patient care by providing
access to the same patient data for all involved providers.
Rationale: HIEs support the coordination of patient care by ensuring that all providers
involved in a patient’s care—primary care, specialists, hospitalists—have access to the
same comprehensive patient data. This leads to more informed decision-making and
fewer redundant tests .
Question 10: Which of the following is a significant challenge preventing the
widespread implementation of Health Information Exchanges (HIEs)?
A. A lack of available technology.
B. The universal acceptance of data sharing standards.
C. Data privacy and security concerns, compounded by patient skepticism.
D. Unlimited government funding.
CORRECT ANSWER: C. Data privacy and security concerns, compounded by
patient skepticism.
Rationale: Organizations face strict federal and state regulations regarding data security,
making it difficult to share data seamlessly. Additionally, a growing number of
cyberattacks have heightened patient skepticism about sharing their health information,
which creates a barrier to HIE adoption and data liquidity .
Question 11: A Personal Health Record (PHR) is BEST defined as:
A. A legal document mandated by federal law for all citizens.
B. A comprehensive record of all patient interactions within a single healthcare
organization.
C. An electronic record of health-related information that is managed, shared, and
controlled by the individual patient.
D. A government database that tracks public health trends.
CORRECT ANSWER: C. An electronic record of health-related information that
is managed, shared, and controlled by the individual patient.
Rationale: Unlike an EHR, which is controlled by the healthcare organization, a PHR is
patient-centric. It is designed to allow individuals to actively manage their own health
information, including data entry, appointment scheduling, and locating health
information, empowering them in their care .
Question 12: To be effective, a PHR system must be designed with a focus on:
A. Complex clinical decision support algorithms.
B. User functionality and ease of navigation for patients.
Management | Bachelor of Science in Health
Information Management Original Practice
Questions & Answers | Comprehensive WGU C802
Study Guide & Assessment Preparation | Health
Information Systems, Healthcare IT, Information
Management, System Evaluation & Analysis, EHRs,
Health Information Technology, Healthcare
Operations, Implementation Concepts & Detailed
Rationales
Question 1: In the context of Health Information Management (HIM) and the
adoption of a new Electronic Health Record (EHR), what is the primary
objective of conducting a Cost-Benefit Analysis (CBA)?
A. To select the vendor with the lowest initial implementation cost.
B. To ensure the new EHR system has the most advanced clinical decision support
features.
C. To determine if the financial and operational benefits of the EHR outweigh its total
costs over time.
D. To comply with federal mandates for Meaningful Use reporting.
CORRECT ANSWER: C. To determine if the financial and operational benefits
of the EHR outweigh its total costs over time.
Rationale: A Cost-Benefit Analysis is a financial tool used to evaluate the total
anticipated costs of an EHR implementation against its projected benefits. The goal is to
provide a data-driven recommendation by comparing these factors to ensure the
investment is sound and will yield a positive return for the organization .
Question 2: A large healthcare organization is planning to replace its outdated
EHR system entirely. Which of the following vendor selection strategies is
being employed?
A. Build
B. Borrow
C. Blend
D. Rip and Replace
CORRECT ANSWER: D. Rip and Replace
Rationale: The "Rip and Replace" strategy involves completely removing an existing
EHR system and implementing a new one from a different vendor. This is a significant
undertaking that is typically chosen when the current system is obsolete or fails to meet
the organization's core needs .
Question 3: During the EHR vendor selection process, which of the following is
a key role of the Health Information Manager?
,A. To solely focus on the financial aspects of the contract.
B. To act as a liaison between IT, finance, clinicians, and leadership to ensure vendor
solutions align with organizational goals.
C. To develop the software code for the new EHR system.
D. To provide direct patient care during the implementation phase.
CORRECT ANSWER: B. To act as a liaison between IT, finance, clinicians, and
leadership to ensure vendor solutions align with organizational goals.
Rationale: The Health Information Manager plays a crucial role as a bridge between
various stakeholders. They ensure that the chosen EHR system meets not only clinical
needs but also operational, financial, and compliance requirements, ensuring the
solution aligns with the organization's overall strategic objectives .
Question 4: What is the purpose of a Request for Proposal (RFP) in the EHR
selection process?
A. To informally gauge vendor interest in a potential project.
B. To send a formal document to vendors requesting detailed proposals on how they will
meet the organization's specified requirements.
C. To finalize the contract and pricing with the chosen vendor.
D. To announce the winner of the vendor selection process to the public.
CORRECT ANSWER: B. To send a formal document to vendors requesting
detailed proposals on how they will meet the organization's specified
requirements.
Rationale: An RFP is a formal procurement document that outlines an organization's
needs and invites vendors to submit detailed proposals. It typically includes technical
specifications, functional requirements, budget constraints, and expectations for support
and training, allowing the organization to compare potential solutions .
Question 5: In an EHR contract, which component is critical for ensuring data
control and portability?
A. Data Ownership and Exit Strategy clause
B. Service Level Agreement (SLA)
C. Scope of Work
D. Pricing and Fees section
CORRECT ANSWER: A. Data Ownership and Exit Strategy clause
Rationale: The data ownership clause clarifies that the healthcare organization retains
full control over its patient data. The exit strategy clause outlines the process for
transferring data to another system if the organization switches vendors in the future,
which is essential for avoiding data lock-in .
Question 6: Which of the following security features is essential for an EHR to
prevent unauthorized access to patient information based on a user's job role?
,A. Data encryption
B. Audit logs
C. Role-Based Access Controls (RBAC)
D. Multi-factor authentication (MFA)
CORRECT ANSWER: C. Role-Based Access Controls (RBAC)
Rationale: Role-Based Access Controls ensure that users only have access to the data
necessary to perform their specific job functions. This principle of least privilege is a
cornerstone of data security in healthcare and helps protect patient privacy by limiting
unauthorized exposure .
Question 7: What is a fundamental requirement for a healthcare organization
to share patient data with a third-party EHR vendor?
A. A Data Use Agreement (DUA)
B. A Business Associate Agreement (BAA)
C. A Material Transfer Agreement (MTA)
D. A Non-Disclosure Agreement (NDA)
CORRECT ANSWER: B. A Business Associate Agreement (BAA)
Rationale: Under HIPAA, a Business Associate Agreement is a legally binding contract
required between a Covered Entity (the healthcare organization) and a Business
Associate (the vendor). This agreement details the vendor's responsibilities for
safeguarding protected health information and ensures they comply with HIPAA's
Privacy and Security Rules .
Question 8: A health information exchange (HIE) that secures data at the point
of service and requires participants to be members of a specific organization is
characteristic of which model?
A. Centralized Model
B. Federated (Decentralized) Model
C. Hybrid Model
D. Consolidated Model
CORRECT ANSWER: B. Federated (Decentralized) Model
Rationale: The Federated or Decentralized model of HIE does not store all data in a
single repository. Instead, it secures and stores data at the point of service. Participants
must agree to share information with other members of the specific organization or
network, and the exchange is facilitated through a "record locator service" that points to
where the data resides .
Question 9: Which of the following is a documented benefit of implementing a
Health Information Exchange (HIE)?
A. Decreased need for cybersecurity measures.
B. Elimination of all healthcare costs.
, C. Improved coordination of patient care by providing access to the same patient data
for all involved providers.
D. Complete elimination of patient paperwork.
CORRECT ANSWER: C. Improved coordination of patient care by providing
access to the same patient data for all involved providers.
Rationale: HIEs support the coordination of patient care by ensuring that all providers
involved in a patient’s care—primary care, specialists, hospitalists—have access to the
same comprehensive patient data. This leads to more informed decision-making and
fewer redundant tests .
Question 10: Which of the following is a significant challenge preventing the
widespread implementation of Health Information Exchanges (HIEs)?
A. A lack of available technology.
B. The universal acceptance of data sharing standards.
C. Data privacy and security concerns, compounded by patient skepticism.
D. Unlimited government funding.
CORRECT ANSWER: C. Data privacy and security concerns, compounded by
patient skepticism.
Rationale: Organizations face strict federal and state regulations regarding data security,
making it difficult to share data seamlessly. Additionally, a growing number of
cyberattacks have heightened patient skepticism about sharing their health information,
which creates a barrier to HIE adoption and data liquidity .
Question 11: A Personal Health Record (PHR) is BEST defined as:
A. A legal document mandated by federal law for all citizens.
B. A comprehensive record of all patient interactions within a single healthcare
organization.
C. An electronic record of health-related information that is managed, shared, and
controlled by the individual patient.
D. A government database that tracks public health trends.
CORRECT ANSWER: C. An electronic record of health-related information that
is managed, shared, and controlled by the individual patient.
Rationale: Unlike an EHR, which is controlled by the healthcare organization, a PHR is
patient-centric. It is designed to allow individuals to actively manage their own health
information, including data entry, appointment scheduling, and locating health
information, empowering them in their care .
Question 12: To be effective, a PHR system must be designed with a focus on:
A. Complex clinical decision support algorithms.
B. User functionality and ease of navigation for patients.
