Wgu C802 Foundations In Healthcare Information Management
Bachelor Of Science In Health Informatics Practice Exam
Questions And Correct Answers With Rationales| Instant
Download
This exam assesses advanced understanding of healthcare information systems and technology, including system
architecture, interoperability standards, clinical decision support, security, and emerging technologies. Questions
require synthesis of technical, regulatory, and operational concepts to solve complex scenarios. It contains 147
multiple-choice questions, each with four distractors and a fully worked rationale that explains why the keyed
answer is correct. Content is organized into 12 focused sections: Healthcare Information Systems and Technology,
Health Information Management and Data Governance, Healthcare Data Standards, Coding, and Classification
Systems, Electronic Health Records and Clinical Information Systems, Healthcare Privacy, Security, and
Regulatory Compliance (HIPAA, HITECH), Healthcare Quality Improvement and Patient Safety, Health
Informatics Leadership, Strategy, and Project Management, Healthcare Data Analytics and Decision Support,
Interoperability and Health Information Exchange, Consumer Health Informatics and Telehealth, Ethical and
Legal Issues in Health Information Management, Financial and Administrative Applications in Healthcare
Information Systems. Targeted learning outcomes include: Evaluate healthcare information system architectures
and integration strategies to meet organizational needs.; Apply interoperability standards (HL7, FHIR, USCDI)
to design and assess health information exchange solutions.; Analyze security, privacy, and reliability
requirements in healthcare IT systems, including HIPAA and HITECH compliance.; Synthesize clinical decision
Section 1: Healthcare Information Systems and Technology (Questions 1-12)
1 Which architectural approach best enables real-time clinical decision support
across a multi-hospital system while minimizing latency?
A) Centralized data warehouse with nightly batch ETL
B) Federated query engine over distributed databases
C) Event-driven architecture with complex event processing
D) Point-to-point HL7 v2 interface connections
Answer: C
Rationale: Event-driven architecture with complex event processing enables
real-time ingestion and analysis of clinical events, providing low-latency
decision support. Batch ETL introduces delay, federated queries may have
variable latency, and point-to-point interfaces lack scalability for real-time
analytics.
2 When implementing FHIR R4 for interoperability, which resource is most
appropriate to represent a patient's current medication list?
A) MedicationRequest
B) MedicationStatement
,C) MedicationAdministration
D) MedicationDispense
Answer: B
Rationale: MedicationStatement is designed to capture a patient's reported or
current medication use, including historical and current lists.
MedicationRequest is for orders, MedicationAdministration records actual
administration events, and MedicationDispense records pharmacy dispensing.
3 A hospital's EHR experiences intermittent downtime due to database
deadlocks. Which resilience strategy best ensures continuous clinical
operations?
A) Implement read-only replicas for reporting
B) Deploy a redundant active-active database cluster
C) Schedule regular database index rebuilds
D) Increase transaction timeout thresholds
Answer: B
Rationale: An active-active database cluster provides high availability by
allowing multiple nodes to handle transactions simultaneously, reducing single
points of failure. Read-only replicas help reporting but not write operations,
index rebuilds and timeout adjustments do not eliminate deadlocks.
4 Which USCDI data class is essential for exchanging social determinants of
health information?
A) Laboratory Results
B) Health Status Assessments
C) Provenance
D) Care Team Members
Answer: B
Rationale: Health Status Assessments in USCDI include social determinants of
health data such as food insecurity and housing instability. Laboratory Results,
Provenance, and Care Team Members do not capture SDOH.
5 In a clinical decision support system, which technique best addresses alert
fatigue while maintaining safety?
A) Disabling all low-specificity alerts
B) Implementing tiered alerting with override tracking
,C) Increasing alert volume to ensure coverage
D) Using only hard stops for all alerts
Answer: B
Rationale: Tiered alerting with override tracking allows prioritization of critical
alerts and monitoring of clinician responses to refine rules. Disabling alerts
may miss important warnings, increasing volume worsens fatigue, and hard
stops for all alerts disrupt workflow.
6 Which cloud deployment model poses the greatest challenge for HIPAA
compliance due to shared responsibility?
A) Private cloud
B) Public cloud
C) Hybrid cloud
D) Community cloud
Answer: B
Rationale: Public cloud involves a shared responsibility model where the
provider manages infrastructure but the covered entity must ensure safeguards,
making compliance more complex. Private and hybrid clouds offer more
control, and community cloud is tailored to specific groups.
7 A health system wants to integrate a new AI-based sepsis prediction tool.
Which factor is most critical for regulatory clearance?
A) Algorithm training on local data
B) FDA clearance as a medical device
C) Real-time integration with EHR
D) Use of open-source libraries
Answer: B
Rationale: AI tools that inform clinical decisions are regulated as medical
devices and require FDA clearance (e.g., via 510(k) or De Novo). Local
training, integration, and open-source use are important but not the primary
regulatory requirement.
8 Which HITRUST CSF control domain directly addresses the confidentiality
of protected health information?
A) Access Control
B) Business Continuity
, C) Incident Management
D) Physical Security
Answer: A
Rationale: Access Control ensures only authorized users can access PHI,
directly supporting confidentiality. Business continuity, incident management,
and physical security are important but not primarily focused on
confidentiality.
9 When designing a health information exchange, which standard best supports
query-based exchange of patient data across disparate systems?
A) HL7 v2 ADT messages
B) IHE XDS
C) Direct Secure Messaging
D) FHIR RESTful API
Answer: B
Rationale: IHE XDS (Cross-Enterprise Document Sharing) provides a
standardized framework for query-based exchange of clinical documents across
organizations. HL7 v2 ADT is for notifications, Direct is for push messaging,
and FHIR supports RESTful exchange but XDS is specifically designed for
query-based document sharing.
10 Which security principle is violated if a system allows a user to access
patient records beyond their assigned care team?
A) Least privilege
B) Separation of duties
C) Defense in depth
D) Non-repudiation
Answer: A
Rationale: Least privilege requires users have only the access necessary for
their role. Access beyond the care team violates this principle. Separation of
duties, defense in depth, and non-repudiation address different security aspects.
11 A hospital's EHR uses a client-server architecture with a thick client. Which
change best supports real-time clinical decision support across distributed
sites?
Bachelor Of Science In Health Informatics Practice Exam
Questions And Correct Answers With Rationales| Instant
Download
This exam assesses advanced understanding of healthcare information systems and technology, including system
architecture, interoperability standards, clinical decision support, security, and emerging technologies. Questions
require synthesis of technical, regulatory, and operational concepts to solve complex scenarios. It contains 147
multiple-choice questions, each with four distractors and a fully worked rationale that explains why the keyed
answer is correct. Content is organized into 12 focused sections: Healthcare Information Systems and Technology,
Health Information Management and Data Governance, Healthcare Data Standards, Coding, and Classification
Systems, Electronic Health Records and Clinical Information Systems, Healthcare Privacy, Security, and
Regulatory Compliance (HIPAA, HITECH), Healthcare Quality Improvement and Patient Safety, Health
Informatics Leadership, Strategy, and Project Management, Healthcare Data Analytics and Decision Support,
Interoperability and Health Information Exchange, Consumer Health Informatics and Telehealth, Ethical and
Legal Issues in Health Information Management, Financial and Administrative Applications in Healthcare
Information Systems. Targeted learning outcomes include: Evaluate healthcare information system architectures
and integration strategies to meet organizational needs.; Apply interoperability standards (HL7, FHIR, USCDI)
to design and assess health information exchange solutions.; Analyze security, privacy, and reliability
requirements in healthcare IT systems, including HIPAA and HITECH compliance.; Synthesize clinical decision
Section 1: Healthcare Information Systems and Technology (Questions 1-12)
1 Which architectural approach best enables real-time clinical decision support
across a multi-hospital system while minimizing latency?
A) Centralized data warehouse with nightly batch ETL
B) Federated query engine over distributed databases
C) Event-driven architecture with complex event processing
D) Point-to-point HL7 v2 interface connections
Answer: C
Rationale: Event-driven architecture with complex event processing enables
real-time ingestion and analysis of clinical events, providing low-latency
decision support. Batch ETL introduces delay, federated queries may have
variable latency, and point-to-point interfaces lack scalability for real-time
analytics.
2 When implementing FHIR R4 for interoperability, which resource is most
appropriate to represent a patient's current medication list?
A) MedicationRequest
B) MedicationStatement
,C) MedicationAdministration
D) MedicationDispense
Answer: B
Rationale: MedicationStatement is designed to capture a patient's reported or
current medication use, including historical and current lists.
MedicationRequest is for orders, MedicationAdministration records actual
administration events, and MedicationDispense records pharmacy dispensing.
3 A hospital's EHR experiences intermittent downtime due to database
deadlocks. Which resilience strategy best ensures continuous clinical
operations?
A) Implement read-only replicas for reporting
B) Deploy a redundant active-active database cluster
C) Schedule regular database index rebuilds
D) Increase transaction timeout thresholds
Answer: B
Rationale: An active-active database cluster provides high availability by
allowing multiple nodes to handle transactions simultaneously, reducing single
points of failure. Read-only replicas help reporting but not write operations,
index rebuilds and timeout adjustments do not eliminate deadlocks.
4 Which USCDI data class is essential for exchanging social determinants of
health information?
A) Laboratory Results
B) Health Status Assessments
C) Provenance
D) Care Team Members
Answer: B
Rationale: Health Status Assessments in USCDI include social determinants of
health data such as food insecurity and housing instability. Laboratory Results,
Provenance, and Care Team Members do not capture SDOH.
5 In a clinical decision support system, which technique best addresses alert
fatigue while maintaining safety?
A) Disabling all low-specificity alerts
B) Implementing tiered alerting with override tracking
,C) Increasing alert volume to ensure coverage
D) Using only hard stops for all alerts
Answer: B
Rationale: Tiered alerting with override tracking allows prioritization of critical
alerts and monitoring of clinician responses to refine rules. Disabling alerts
may miss important warnings, increasing volume worsens fatigue, and hard
stops for all alerts disrupt workflow.
6 Which cloud deployment model poses the greatest challenge for HIPAA
compliance due to shared responsibility?
A) Private cloud
B) Public cloud
C) Hybrid cloud
D) Community cloud
Answer: B
Rationale: Public cloud involves a shared responsibility model where the
provider manages infrastructure but the covered entity must ensure safeguards,
making compliance more complex. Private and hybrid clouds offer more
control, and community cloud is tailored to specific groups.
7 A health system wants to integrate a new AI-based sepsis prediction tool.
Which factor is most critical for regulatory clearance?
A) Algorithm training on local data
B) FDA clearance as a medical device
C) Real-time integration with EHR
D) Use of open-source libraries
Answer: B
Rationale: AI tools that inform clinical decisions are regulated as medical
devices and require FDA clearance (e.g., via 510(k) or De Novo). Local
training, integration, and open-source use are important but not the primary
regulatory requirement.
8 Which HITRUST CSF control domain directly addresses the confidentiality
of protected health information?
A) Access Control
B) Business Continuity
, C) Incident Management
D) Physical Security
Answer: A
Rationale: Access Control ensures only authorized users can access PHI,
directly supporting confidentiality. Business continuity, incident management,
and physical security are important but not primarily focused on
confidentiality.
9 When designing a health information exchange, which standard best supports
query-based exchange of patient data across disparate systems?
A) HL7 v2 ADT messages
B) IHE XDS
C) Direct Secure Messaging
D) FHIR RESTful API
Answer: B
Rationale: IHE XDS (Cross-Enterprise Document Sharing) provides a
standardized framework for query-based exchange of clinical documents across
organizations. HL7 v2 ADT is for notifications, Direct is for push messaging,
and FHIR supports RESTful exchange but XDS is specifically designed for
query-based document sharing.
10 Which security principle is violated if a system allows a user to access
patient records beyond their assigned care team?
A) Least privilege
B) Separation of duties
C) Defense in depth
D) Non-repudiation
Answer: A
Rationale: Least privilege requires users have only the access necessary for
their role. Access beyond the care team violates this principle. Separation of
duties, defense in depth, and non-repudiation address different security aspects.
11 A hospital's EHR uses a client-server architecture with a thick client. Which
change best supports real-time clinical decision support across distributed
sites?
