ACHE Board of Governors
Exam Practice Test:
2026/2027 Elite Edition
PART I: THE PRIMER
Professional healthcare leadership is unforgiving; mastering the core competencies bridges the
gap between mid-level management and enterprise survival. Under the aggressive regulatory
shifts of 2026/2027, academic memorization fails; only razor-sharp, synthesized intuition
guarantees operational solvency, regulatory compliance, and patient safety.
The "Panic Button" Cheat Sheet:
● JC NPG 12 (2026): Nurse staffing is a National Performance Goal. Static ratios are
obsolete; acuity-driven, competency-validated staffing overseen by a licensed Nurse
Executive is an accreditation mandate.
● CMS-0057-F (2026/2027): Prior authorizations require a 72-hour turnaround for urgent
requests, 7 days for standard (2026). Full FHIR API integration is mandatory by January
1, 2027.
● HIPAA Security Rule (2026): "Addressable" safeguards are eliminated. 72-hour disaster
recovery of ePHI is strictly enforced.
● CMS Star Ratings (2027): The Health Equity Index (HEI/EHO4all) is removed; historical
reward factors remain. Depression screening is the new critical metric.
PART II: THE ELITE TEST BANK
Q1: A Chief Financial Officer is evaluating the liquidity of a mid-sized community hospital
facing delayed payer reimbursements under the new CMS-0057-F prior authorization
guidelines. To determine the organization's immediate survival capacity without
liquidating long-term investments, which metric is the definitive indicator? A) Net Profit
Margin B) Debt-to-Capitalization Ratio C) Days Cash on Hand D) Fixed Asset Turnover
● The Answer: C (Days Cash on Hand)
● Distractor Analysis: Option A measures overall profitability, not immediate liquidity.
Option B assesses long-term leverage and solvency risk. Option D evaluates how
efficiently equipment and property generate revenue. None of these address an
immediate, catastrophic cash flow crisis.
● The Mentor's Analysis: In healthcare finance, accrued revenue is theoretical; liquid cash
is absolute reality. Days Cash on Hand (DCOH) is the ultimate survival metric, measuring
exactly how many days the hospital can meet its operating expenses if all incoming cash
flow instantly ceases. Under 2026 margin pressures, tracking DCOH against median
industry benchmarks is a primary fiduciary duty.
,2026 Hospital Financial Median Target Value Implication of Variance
Benchmarks
Days Cash on Hand (DCOH) 215 Days < 100 days signals severe
liquidity distress.
Operating Margin 2.0% - 2.9% Negative values indicate core
business insolvency.
Debt Service Coverage > 1.25x < 1.0 triggers technical default
on bond covenants.
Q2: Effective January 2026, the Joint Commission implemented National Performance
Goal (NPG) 12 regarding hospital staffing. Which of the following constitutes an explicit
compliance mandate under this standard? A) Maintaining a static 1:4 nurse-to-patient ratio
across all medical-surgical units. B) Designating a licensed Nurse Executive to participate in
senior-level hospital governance and oversee acuity-based staffing. C) Utilizing artificial
intelligence to autonomously execute shift scheduling and patient assignments. D) Outsourcing
all dietary, infection prevention, and pharmacy leadership to third-party administrative vendors.
● The Answer: B (Designating a licensed Nurse Executive to participate in senior
governance and oversee staffing)
● Distractor Analysis: Option A relies on static ratios, which NPG 12 expressly rejects in
favor of dynamic, acuity-driven and competency-based models. Option C removes human
oversight, violating safety protocols. Option D violates the mandate that key support
services possess qualified internal professional oversight.
● The Mentor's Analysis: NPG 12 legally elevates staffing from a baseline operational
line-item to a boardroom-level patient safety mandate. The standard requires that a
licensed Nurse Executive sit at the senior decision-making table to ensure financial
restrictions do not compromise clinical competency matrices and patient acuity demands.
Q3: A multi-state managed care organization must comply with the interoperability
standards of CMS-0057-F. By January 1, 2027, the organization must fully operationalize
which specific technological architecture to maintain federal compliance? A) Centralized,
patient-mediated optical character recognition (OCR) scanning for medical records. B) A
proprietary, closed-loop ledger system for decentralized clinical trials. C) Four specific FHIR
APIs: Patient Access, Provider Access, Payer-to-Payer, and Prior Authorization. D) Unilateral
fax infrastructure dedicated solely to expedited prior authorizations.
● The Answer: C (Four specific FHIR APIs: Patient Access, Provider Access,
Payer-to-Payer, and Prior Authorization)
● Distractor Analysis: Option A is an inefficient, manual stopgap. Option B is irrelevant to
the specific CMS mandate. Option D represents the archaic, paper-based system the
federal rule explicitly seeks to eradicate.
● The Mentor's Analysis: CMS-0057-F fundamentally forces the healthcare industry onto
shared digital rails to eliminate administrative waste. By 2027, payers must deploy
specific Fast Healthcare Interoperability Resources (FHIR) APIs to automate prior
authorizations, allow in-network providers to access patient histories, and seamlessly
transfer longitudinal data when patients switch plans.
Q4: Under the finalized 2026 updates to the HIPAA Security Rule, a covered entity suffers
a catastrophic ransomware attack targeting its primary data center. What is the strict
federal requirement regarding the recovery of electronic protected health information
(ePHI)? A) The organization is granted 30 days to attempt data decryption before notifying the
Department of Health and Human Services. B) The organization must deploy disaster recovery
, procedures capable of restoring lost systems and ePHI within a maximum of 72 hours. C) The
organization may classify backup encryption protocols as "addressable" rather than "required"
safeguards. D) The organization is exempt from federal recovery timelines provided they pay
the requested ransom.
● The Answer: B (Disaster recovery procedures capable of restoring systems within 72
hours)
● Distractor Analysis: Option A guarantees massive operational failure and patient harm.
Option C is demonstrably false; the 2026 update eliminated the "addressable" distinction
entirely, making all listed safeguards mandatory. Option D is illegal and violates federal
guidance.
● The Mentor's Analysis: The 2026 HIPAA updates aggressively target the systemic
vulnerability of healthcare cyberattacks. True enterprise risk management demands
operational resilience, not just perimeter defense. The 72-hour restoration mandate forces
organizations to maintain immutable, air-gapped cloud backups, shifting the regulatory
focus from mere breach prevention to rapid survivability.
Q5: The ACHE Code of Ethics was revised to confront modern systemic barriers in
healthcare delivery. Which specific concept was formally introduced to explicitly
condemn behaviors that deny patients their full humanity, moral worth, and agency? A)
Value-based purchasing initiatives. B) Dehumanization, encompassing both interpersonal
microaggressions and systemic macroaggressions. C) The legal doctrine of corporate
negligence. D) Technological interoperability.
● The Answer: B (Dehumanization, encompassing both microaggressions and
macroaggressions)
● Distractor Analysis: Options A and D are operational and technical concepts, not ethical
behavioral standards. Option C is a specific legal liability doctrine regarding credentialing
and safety, not a direct behavioral ethic.
● The Mentor's Analysis: The ethical evolution of healthcare leadership demands
recognizing systemic threats to patient dignity. The 2025/2026 ACHE updates condemn
"dehumanization" to force executives to actively dismantle toxic clinical cultures and
structural barriers that treat "recipients of care" as mere statistics rather than complex
human beings.
Q6: To prepare for the 2027 Star Ratings, a Medicare Advantage plan's executive team
analyzes CMS's finalized policy regarding the Health Equity Index (HEI / EHO4all). What is
the correct strategic understanding of this finalized rule? A) The HEI reward will be doubled
to heavily incentivize care for dual-eligible populations. B) The HEI reward is entirely eliminated,
and CMS will revert to the historical reward factor while introducing new clinical metrics such as
Depression Screening. C) The HEI will apply exclusively to end-stage renal disease (ESRD)
patients. D) The HEI permanently replaces all CAHPS patient experience measures.
● The Answer: B (The HEI reward is eliminated, reverting to historical reward factors and
clinical metrics)
● Distractor Analysis: Option A represents the abandoned previous policy trajectory.
Options C and D are factually incorrect fabrications regarding the CMS proposed rule
framework.
● The Mentor's Analysis: Regulatory agility is paramount for survival. While managed care
plans spent years preparing for the HEI, the 2027 proposed rule pivot demonstrated a
stark policy shift toward core clinical outcomes and broad population health (e.g.,
Depression Screening and Follow-Up) rather than segmented equity indices. Executives
must dynamically reallocate Quality Bonus Payment (QBP) strategies immediately.
Exam Practice Test:
2026/2027 Elite Edition
PART I: THE PRIMER
Professional healthcare leadership is unforgiving; mastering the core competencies bridges the
gap between mid-level management and enterprise survival. Under the aggressive regulatory
shifts of 2026/2027, academic memorization fails; only razor-sharp, synthesized intuition
guarantees operational solvency, regulatory compliance, and patient safety.
The "Panic Button" Cheat Sheet:
● JC NPG 12 (2026): Nurse staffing is a National Performance Goal. Static ratios are
obsolete; acuity-driven, competency-validated staffing overseen by a licensed Nurse
Executive is an accreditation mandate.
● CMS-0057-F (2026/2027): Prior authorizations require a 72-hour turnaround for urgent
requests, 7 days for standard (2026). Full FHIR API integration is mandatory by January
1, 2027.
● HIPAA Security Rule (2026): "Addressable" safeguards are eliminated. 72-hour disaster
recovery of ePHI is strictly enforced.
● CMS Star Ratings (2027): The Health Equity Index (HEI/EHO4all) is removed; historical
reward factors remain. Depression screening is the new critical metric.
PART II: THE ELITE TEST BANK
Q1: A Chief Financial Officer is evaluating the liquidity of a mid-sized community hospital
facing delayed payer reimbursements under the new CMS-0057-F prior authorization
guidelines. To determine the organization's immediate survival capacity without
liquidating long-term investments, which metric is the definitive indicator? A) Net Profit
Margin B) Debt-to-Capitalization Ratio C) Days Cash on Hand D) Fixed Asset Turnover
● The Answer: C (Days Cash on Hand)
● Distractor Analysis: Option A measures overall profitability, not immediate liquidity.
Option B assesses long-term leverage and solvency risk. Option D evaluates how
efficiently equipment and property generate revenue. None of these address an
immediate, catastrophic cash flow crisis.
● The Mentor's Analysis: In healthcare finance, accrued revenue is theoretical; liquid cash
is absolute reality. Days Cash on Hand (DCOH) is the ultimate survival metric, measuring
exactly how many days the hospital can meet its operating expenses if all incoming cash
flow instantly ceases. Under 2026 margin pressures, tracking DCOH against median
industry benchmarks is a primary fiduciary duty.
,2026 Hospital Financial Median Target Value Implication of Variance
Benchmarks
Days Cash on Hand (DCOH) 215 Days < 100 days signals severe
liquidity distress.
Operating Margin 2.0% - 2.9% Negative values indicate core
business insolvency.
Debt Service Coverage > 1.25x < 1.0 triggers technical default
on bond covenants.
Q2: Effective January 2026, the Joint Commission implemented National Performance
Goal (NPG) 12 regarding hospital staffing. Which of the following constitutes an explicit
compliance mandate under this standard? A) Maintaining a static 1:4 nurse-to-patient ratio
across all medical-surgical units. B) Designating a licensed Nurse Executive to participate in
senior-level hospital governance and oversee acuity-based staffing. C) Utilizing artificial
intelligence to autonomously execute shift scheduling and patient assignments. D) Outsourcing
all dietary, infection prevention, and pharmacy leadership to third-party administrative vendors.
● The Answer: B (Designating a licensed Nurse Executive to participate in senior
governance and oversee staffing)
● Distractor Analysis: Option A relies on static ratios, which NPG 12 expressly rejects in
favor of dynamic, acuity-driven and competency-based models. Option C removes human
oversight, violating safety protocols. Option D violates the mandate that key support
services possess qualified internal professional oversight.
● The Mentor's Analysis: NPG 12 legally elevates staffing from a baseline operational
line-item to a boardroom-level patient safety mandate. The standard requires that a
licensed Nurse Executive sit at the senior decision-making table to ensure financial
restrictions do not compromise clinical competency matrices and patient acuity demands.
Q3: A multi-state managed care organization must comply with the interoperability
standards of CMS-0057-F. By January 1, 2027, the organization must fully operationalize
which specific technological architecture to maintain federal compliance? A) Centralized,
patient-mediated optical character recognition (OCR) scanning for medical records. B) A
proprietary, closed-loop ledger system for decentralized clinical trials. C) Four specific FHIR
APIs: Patient Access, Provider Access, Payer-to-Payer, and Prior Authorization. D) Unilateral
fax infrastructure dedicated solely to expedited prior authorizations.
● The Answer: C (Four specific FHIR APIs: Patient Access, Provider Access,
Payer-to-Payer, and Prior Authorization)
● Distractor Analysis: Option A is an inefficient, manual stopgap. Option B is irrelevant to
the specific CMS mandate. Option D represents the archaic, paper-based system the
federal rule explicitly seeks to eradicate.
● The Mentor's Analysis: CMS-0057-F fundamentally forces the healthcare industry onto
shared digital rails to eliminate administrative waste. By 2027, payers must deploy
specific Fast Healthcare Interoperability Resources (FHIR) APIs to automate prior
authorizations, allow in-network providers to access patient histories, and seamlessly
transfer longitudinal data when patients switch plans.
Q4: Under the finalized 2026 updates to the HIPAA Security Rule, a covered entity suffers
a catastrophic ransomware attack targeting its primary data center. What is the strict
federal requirement regarding the recovery of electronic protected health information
(ePHI)? A) The organization is granted 30 days to attempt data decryption before notifying the
Department of Health and Human Services. B) The organization must deploy disaster recovery
, procedures capable of restoring lost systems and ePHI within a maximum of 72 hours. C) The
organization may classify backup encryption protocols as "addressable" rather than "required"
safeguards. D) The organization is exempt from federal recovery timelines provided they pay
the requested ransom.
● The Answer: B (Disaster recovery procedures capable of restoring systems within 72
hours)
● Distractor Analysis: Option A guarantees massive operational failure and patient harm.
Option C is demonstrably false; the 2026 update eliminated the "addressable" distinction
entirely, making all listed safeguards mandatory. Option D is illegal and violates federal
guidance.
● The Mentor's Analysis: The 2026 HIPAA updates aggressively target the systemic
vulnerability of healthcare cyberattacks. True enterprise risk management demands
operational resilience, not just perimeter defense. The 72-hour restoration mandate forces
organizations to maintain immutable, air-gapped cloud backups, shifting the regulatory
focus from mere breach prevention to rapid survivability.
Q5: The ACHE Code of Ethics was revised to confront modern systemic barriers in
healthcare delivery. Which specific concept was formally introduced to explicitly
condemn behaviors that deny patients their full humanity, moral worth, and agency? A)
Value-based purchasing initiatives. B) Dehumanization, encompassing both interpersonal
microaggressions and systemic macroaggressions. C) The legal doctrine of corporate
negligence. D) Technological interoperability.
● The Answer: B (Dehumanization, encompassing both microaggressions and
macroaggressions)
● Distractor Analysis: Options A and D are operational and technical concepts, not ethical
behavioral standards. Option C is a specific legal liability doctrine regarding credentialing
and safety, not a direct behavioral ethic.
● The Mentor's Analysis: The ethical evolution of healthcare leadership demands
recognizing systemic threats to patient dignity. The 2025/2026 ACHE updates condemn
"dehumanization" to force executives to actively dismantle toxic clinical cultures and
structural barriers that treat "recipients of care" as mere statistics rather than complex
human beings.
Q6: To prepare for the 2027 Star Ratings, a Medicare Advantage plan's executive team
analyzes CMS's finalized policy regarding the Health Equity Index (HEI / EHO4all). What is
the correct strategic understanding of this finalized rule? A) The HEI reward will be doubled
to heavily incentivize care for dual-eligible populations. B) The HEI reward is entirely eliminated,
and CMS will revert to the historical reward factor while introducing new clinical metrics such as
Depression Screening. C) The HEI will apply exclusively to end-stage renal disease (ESRD)
patients. D) The HEI permanently replaces all CAHPS patient experience measures.
● The Answer: B (The HEI reward is eliminated, reverting to historical reward factors and
clinical metrics)
● Distractor Analysis: Option A represents the abandoned previous policy trajectory.
Options C and D are factually incorrect fabrications regarding the CMS proposed rule
framework.
● The Mentor's Analysis: Regulatory agility is paramount for survival. While managed care
plans spent years preparing for the HEI, the 2027 proposed rule pivot demonstrated a
stark policy shift toward core clinical outcomes and broad population health (e.g.,
Depression Screening and Follow-Up) rather than segmented equity indices. Executives
must dynamically reallocate Quality Bonus Payment (QBP) strategies immediately.
