WGU C803 HLTH 3315 Data Analytics and
Information Governance – Bachelor of Science in
Health Information Management Study Guide,
Original Practice Questions & Answers, Assessment
Preparation, Healthcare Data Analytics,
Information Governance, Data Quality, EHRs, Data
Management, Healthcare Regulations & Decision-
Making
Question 1: In the context of health information management, which of the
following best defines the term "data integrity"?
A. The process of backing up data to an off-site server.
B. The accuracy and consistency of data over its entire lifecycle.
C. The speed at which data can be retrieved from a database.
D. The physical security measures protecting hardware from theft.
CORRECT ANSWER: B. The accuracy and consistency of data over its entire
lifecycle.
Rationale: Data integrity refers to the maintenance of, and the assurance of, the
accuracy and consistency of data over its entire life-cycle. It is a critical aspect of the
design, implementation, and usage of any system that stores, processes, or retrieves
data. Options A, C, and D address other aspects of data management (backup,
performance, and physical security) but do not define integrity itself.
Question 2: A Health Information Management (HIM) professional is tasked
with ensuring that a patient's health record is complete and accurate. This
practice is primarily a component of which core HIM function?
A. Data stewardship
B. Revenue cycle management
C. Clinical coding
D. Release of information
CORRECT ANSWER: A. Data stewardship
Rationale: Data stewardship encompasses the responsibilities and accountabilities
related to ensuring the quality, integrity, and security of data throughout its lifecycle.
Ensuring a patient's health record is complete and accurate is a fundamental duty of a
data steward. While the other options are important HIM functions, they are more
specific tasks (coding, billing, releasing records) rather than the overarching principle of
data quality assurance.
Question 3: The transition from paper-based health records to Electronic
Health Records (EHRs) has significantly impacted HIM practices. Which of the
following is a primary challenge introduced by this transition?
,A. Illegible handwritten notes.
B. Physical storage space requirements.
C. Ensuring data privacy and security in a digital environment.
D. The inability to access records from multiple locations.
CORRECT ANSWER: C. Ensuring data privacy and security in a digital
environment.
Rationale: While paper records had issues like illegibility and physical storage, the digital
nature of EHRs introduces new and complex challenges related to cybersecurity, data
breaches, and compliance with regulations like HIPAA to protect patient privacy.
Options A, B, and D are disadvantages of paper-based systems, not challenges
introduced by the transition to EHRs.
Question 4: According to the Health Insurance Portability and Accountability
Act (HIPAA), which of the following is considered a covered entity?
A. A patient's spouse.
B. A health insurance company.
C. A medical transcription company.
D. A software vendor that sells EHR systems.
CORRECT ANSWER: B. A health insurance company.
Rationale: HIPAA defines covered entities as health plans, health care clearinghouses,
and health care providers who transmit any health information in electronic form in
connection with a covered transaction. A health insurance company is a health plan and
is therefore a covered entity. A medical transcription company and a software vendor
are typically business associates, while a patient's spouse is not a covered entity.
Question 5: The process of converting a diagnosis or procedure described in a
patient's health record into alphanumeric codes is known as:
A. Data abstraction.
B. Clinical documentation improvement.
C. Medical coding.
D. Case management.
CORRECT ANSWER: C. Medical coding.
Rationale: Medical coding is the transformation of healthcare diagnoses, procedures,
medical services, and equipment into universal medical alphanumeric codes. Data
abstraction is the process of extracting key information from a record. Clinical
documentation improvement focuses on improving the quality of documentation itself.
Case management is a broader process of coordinating care.
Question 6: Which of the following is a key feature of the International
Classification of Diseases, 10th Revision, Clinical Modification (ICD-10-CM)?
,A. It is primarily used for outpatient procedure coding.
B. It has a significantly higher level of specificity compared to ICD-9-CM.
C. It is a procedure coding system used for inpatient hospital stays.
D. It is maintained by the American Medical Association (AMA).
CORRECT ANSWER: B. It has a significantly higher level of specificity
compared to ICD-9-CM.
Rationale: A primary reason for the transition to ICD-10-CM was its increased
specificity, allowing for much more detailed documentation of diagnoses. ICD-10-CM is
used for diagnosis coding in all settings, not just outpatient. ICD-10-PCS is the
procedure coding system for inpatient hospital stays. ICD-10-CM is maintained by the
National Center for Health Statistics (NCHS) and CMS, not the AMA (which maintains
CPT).
Question 7: In the context of the revenue cycle, which step typically occurs
immediately after a patient is discharged from an inpatient facility?
A. Pre-registration and scheduling.
B. Medical necessity validation.
C. Coding and charge capture.
D. Claims submission.
CORRECT ANSWER: C. Coding and charge capture.
Rationale: The revenue cycle follows a sequence from patient access (pre-registration,
scheduling, admission) through to payment posting and collections. After a patient is
discharged, the next major step is to code the diagnoses and procedures and capture all
applicable charges to generate an accurate claim. Pre-registration happens before
admission, and claims submission happens after coding and charge capture.
Question 8: What is the primary purpose of an audit trail in an Electronic
Health Record (EHR) system?
A. To improve the speed of data entry.
B. To provide a record of who accessed what information and when.
C. To automatically code diagnoses and procedures.
D. To generate billing statements for patients.
CORRECT ANSWER: B. To provide a record of who accessed what information
and when.
Rationale: An audit trail is a security control that records all user activity within the
EHR. Its primary purpose is to support data integrity and security by providing a
chronological record of access, ensuring accountability, and helping detect unauthorized
access or breaches. It does not primarily serve to improve data entry speed, perform
coding, or generate bills.
Question 9: The term "covered entity" under HIPAA does NOT include:
, A. A health care provider who transmits health information electronically.
B. A health care clearinghouse.
C. A health plan.
D. An employer who sponsors a group health plan.
CORRECT ANSWER: D. An employer who sponsors a group health plan.
Rationale: The HIPAA Privacy Rule covers health plans, health care clearinghouses, and
health care providers who conduct certain financial and administrative transactions
electronically. An employer who sponsors a group health plan may be considered a
"hybrid entity" or plan sponsor, but is not automatically a covered entity itself. The plan
itself is the covered entity.
Question 10: When a patient requests an amendment to their health record,
what is the appropriate first step for an HIM professional?
A. Immediately make the change requested by the patient.
B. Deny the request and inform the patient of their rights.
C. Review the request and determine if the covered entity created the record.
D. Notify the patient's insurance company of the requested change.
CORRECT ANSWER: C. Review the request and determine if the covered entity
created the record.
Rationale: Under HIPAA, a patient has the right to request an amendment to their health
record. The first step for the covered entity is to review the request. The covered entity
is only required to amend records that it created. If the record was created by another
entity, the patient must be directed to that entity. The request must be evaluated before
any decision to amend or deny is made.
Question 11: Which classification system is used in the United States to report
medical procedures and services provided to outpatients in a physician's
office?
A. ICD-10-PCS
B. ICD-10-CM
C. CPT
D. HCPCS Level II
CORRECT ANSWER: C. CPT
Rationale: Current Procedural Terminology (CPT) is the medical code set used to report
procedures and services performed by physicians and other healthcare providers. It is
most commonly used for outpatient and office-based services. ICD-10-PCS is for
inpatient procedures. ICD-10-CM is for diagnoses. HCPCS Level II is used for supplies,
drugs, and some services not covered by CPT.
Question 12: The release of health information without the patient's
authorization is permitted for which of the following purposes under HIPAA?
Information Governance – Bachelor of Science in
Health Information Management Study Guide,
Original Practice Questions & Answers, Assessment
Preparation, Healthcare Data Analytics,
Information Governance, Data Quality, EHRs, Data
Management, Healthcare Regulations & Decision-
Making
Question 1: In the context of health information management, which of the
following best defines the term "data integrity"?
A. The process of backing up data to an off-site server.
B. The accuracy and consistency of data over its entire lifecycle.
C. The speed at which data can be retrieved from a database.
D. The physical security measures protecting hardware from theft.
CORRECT ANSWER: B. The accuracy and consistency of data over its entire
lifecycle.
Rationale: Data integrity refers to the maintenance of, and the assurance of, the
accuracy and consistency of data over its entire life-cycle. It is a critical aspect of the
design, implementation, and usage of any system that stores, processes, or retrieves
data. Options A, C, and D address other aspects of data management (backup,
performance, and physical security) but do not define integrity itself.
Question 2: A Health Information Management (HIM) professional is tasked
with ensuring that a patient's health record is complete and accurate. This
practice is primarily a component of which core HIM function?
A. Data stewardship
B. Revenue cycle management
C. Clinical coding
D. Release of information
CORRECT ANSWER: A. Data stewardship
Rationale: Data stewardship encompasses the responsibilities and accountabilities
related to ensuring the quality, integrity, and security of data throughout its lifecycle.
Ensuring a patient's health record is complete and accurate is a fundamental duty of a
data steward. While the other options are important HIM functions, they are more
specific tasks (coding, billing, releasing records) rather than the overarching principle of
data quality assurance.
Question 3: The transition from paper-based health records to Electronic
Health Records (EHRs) has significantly impacted HIM practices. Which of the
following is a primary challenge introduced by this transition?
,A. Illegible handwritten notes.
B. Physical storage space requirements.
C. Ensuring data privacy and security in a digital environment.
D. The inability to access records from multiple locations.
CORRECT ANSWER: C. Ensuring data privacy and security in a digital
environment.
Rationale: While paper records had issues like illegibility and physical storage, the digital
nature of EHRs introduces new and complex challenges related to cybersecurity, data
breaches, and compliance with regulations like HIPAA to protect patient privacy.
Options A, B, and D are disadvantages of paper-based systems, not challenges
introduced by the transition to EHRs.
Question 4: According to the Health Insurance Portability and Accountability
Act (HIPAA), which of the following is considered a covered entity?
A. A patient's spouse.
B. A health insurance company.
C. A medical transcription company.
D. A software vendor that sells EHR systems.
CORRECT ANSWER: B. A health insurance company.
Rationale: HIPAA defines covered entities as health plans, health care clearinghouses,
and health care providers who transmit any health information in electronic form in
connection with a covered transaction. A health insurance company is a health plan and
is therefore a covered entity. A medical transcription company and a software vendor
are typically business associates, while a patient's spouse is not a covered entity.
Question 5: The process of converting a diagnosis or procedure described in a
patient's health record into alphanumeric codes is known as:
A. Data abstraction.
B. Clinical documentation improvement.
C. Medical coding.
D. Case management.
CORRECT ANSWER: C. Medical coding.
Rationale: Medical coding is the transformation of healthcare diagnoses, procedures,
medical services, and equipment into universal medical alphanumeric codes. Data
abstraction is the process of extracting key information from a record. Clinical
documentation improvement focuses on improving the quality of documentation itself.
Case management is a broader process of coordinating care.
Question 6: Which of the following is a key feature of the International
Classification of Diseases, 10th Revision, Clinical Modification (ICD-10-CM)?
,A. It is primarily used for outpatient procedure coding.
B. It has a significantly higher level of specificity compared to ICD-9-CM.
C. It is a procedure coding system used for inpatient hospital stays.
D. It is maintained by the American Medical Association (AMA).
CORRECT ANSWER: B. It has a significantly higher level of specificity
compared to ICD-9-CM.
Rationale: A primary reason for the transition to ICD-10-CM was its increased
specificity, allowing for much more detailed documentation of diagnoses. ICD-10-CM is
used for diagnosis coding in all settings, not just outpatient. ICD-10-PCS is the
procedure coding system for inpatient hospital stays. ICD-10-CM is maintained by the
National Center for Health Statistics (NCHS) and CMS, not the AMA (which maintains
CPT).
Question 7: In the context of the revenue cycle, which step typically occurs
immediately after a patient is discharged from an inpatient facility?
A. Pre-registration and scheduling.
B. Medical necessity validation.
C. Coding and charge capture.
D. Claims submission.
CORRECT ANSWER: C. Coding and charge capture.
Rationale: The revenue cycle follows a sequence from patient access (pre-registration,
scheduling, admission) through to payment posting and collections. After a patient is
discharged, the next major step is to code the diagnoses and procedures and capture all
applicable charges to generate an accurate claim. Pre-registration happens before
admission, and claims submission happens after coding and charge capture.
Question 8: What is the primary purpose of an audit trail in an Electronic
Health Record (EHR) system?
A. To improve the speed of data entry.
B. To provide a record of who accessed what information and when.
C. To automatically code diagnoses and procedures.
D. To generate billing statements for patients.
CORRECT ANSWER: B. To provide a record of who accessed what information
and when.
Rationale: An audit trail is a security control that records all user activity within the
EHR. Its primary purpose is to support data integrity and security by providing a
chronological record of access, ensuring accountability, and helping detect unauthorized
access or breaches. It does not primarily serve to improve data entry speed, perform
coding, or generate bills.
Question 9: The term "covered entity" under HIPAA does NOT include:
, A. A health care provider who transmits health information electronically.
B. A health care clearinghouse.
C. A health plan.
D. An employer who sponsors a group health plan.
CORRECT ANSWER: D. An employer who sponsors a group health plan.
Rationale: The HIPAA Privacy Rule covers health plans, health care clearinghouses, and
health care providers who conduct certain financial and administrative transactions
electronically. An employer who sponsors a group health plan may be considered a
"hybrid entity" or plan sponsor, but is not automatically a covered entity itself. The plan
itself is the covered entity.
Question 10: When a patient requests an amendment to their health record,
what is the appropriate first step for an HIM professional?
A. Immediately make the change requested by the patient.
B. Deny the request and inform the patient of their rights.
C. Review the request and determine if the covered entity created the record.
D. Notify the patient's insurance company of the requested change.
CORRECT ANSWER: C. Review the request and determine if the covered entity
created the record.
Rationale: Under HIPAA, a patient has the right to request an amendment to their health
record. The first step for the covered entity is to review the request. The covered entity
is only required to amend records that it created. If the record was created by another
entity, the patient must be directed to that entity. The request must be evaluated before
any decision to amend or deny is made.
Question 11: Which classification system is used in the United States to report
medical procedures and services provided to outpatients in a physician's
office?
A. ICD-10-PCS
B. ICD-10-CM
C. CPT
D. HCPCS Level II
CORRECT ANSWER: C. CPT
Rationale: Current Procedural Terminology (CPT) is the medical code set used to report
procedures and services performed by physicians and other healthcare providers. It is
most commonly used for outpatient and office-based services. ICD-10-PCS is for
inpatient procedures. ICD-10-CM is for diagnoses. HCPCS Level II is used for supplies,
drugs, and some services not covered by CPT.
Question 12: The release of health information without the patient's
authorization is permitted for which of the following purposes under HIPAA?
