MHI - MASTER OF HEALTH INFORMATICS
COMPREHENSIVE EXAM PREP STUDY GUIDE
200 EXAM QUESTIONS WITH ANSWERS AND DETAILED
RATIONALES
Question 1: Which federal regulation establishes the minimum security
and privacy requirements for protecting individually identifiable health
information held by covered entities?
A. HIPAA Security Rule
B. HITECH Act
C. GDPR
D. FISMA
CORRECT ANSWER: A. HIPAA Security Rule
Rationale: The HIPAA Security Rule establishes national standards to
protect individuals' electronic personal health information that is
created, received, used, or maintained by a covered entity. It addresses
administrative, physical, and technical safeguards.
Question 2: In interoperability terminology, what does "syntactic
interoperability" refer to?
A. The meaning and context of exchanged data
B. The format and structure of exchanged data
,C. The security protocols for data transmission
D. The storage mechanisms for health data
CORRECT ANSWER: B. The format and structure of exchanged data
Rationale: Syntactic interoperability ensures that the format and
structure of data exchanged between systems can be understood at the
data field level. This is typically achieved through standards like HL7 v2.x
or FHIR, which define message structures.
Question 3: Which type of clinical decision support system uses pattern
recognition algorithms to generate recommendations without
predefined rules?
A. Knowledge-based CDSS
B. Non-knowledge-based CDSS
C. Rules-based CDSS
D. Alert-based CDSS
CORRECT ANSWER: B. Non-knowledge-based CDSS
Rationale: Non-knowledge-based CDSS employs machine learning,
artificial neural networks, or statistical pattern recognition to identify
patterns in data. These systems learn from historical data to make
predictions rather than relying on explicit rules defined by human
experts.
Question 4: The principle of data minimization requires that healthcare
organizations should:
A. Collect all possible patient data to ensure completeness
B. Collect only the minimum amount of personal data necessary for the
intended purpose
,C. Minimize the number of employees with data access
D. Reduce data storage costs
CORRECT ANSWER: B. Collect only the minimum amount of personal
data necessary for the intended purpose
Rationale: Data minimization is a privacy principle that states
organizations should limit the collection, processing, and storage of
personal data to what is strictly necessary to achieve the specified
purpose. This reduces privacy risks and complies with regulations like
GDPR.
Question 5: Which type of database structure is most commonly used
in modern Electronic Health Records for handling complex relationships
between clinical concepts?
A. Hierarchical database
B. Network database
C. Relational database
D. Flat file database
CORRECT ANSWER: C. Relational database
Rationale: Relational databases organize data into tables with rows and
columns, using primary and foreign keys to establish relationships
between different data entities. This structure is ideal for EHRs, which
need to manage complex relationships between patients, providers,
encounters, diagnoses, and treatments.
Question 6: Under HIPAA, which of the following is considered a
covered entity?
, A. Health insurance companies
B. Medical device manufacturers
C. Pharmaceutical research companies
D. Health app developers
CORRECT ANSWER: A. Health insurance companies
Rationale: HIPAA defines covered entities as health plans, healthcare
clearinghouses, and healthcare providers who transmit health
information electronically for covered transactions. Health insurance
companies qualify as health plans and are therefore covered entities.
Question 7: The FHIR standard uses which architectural approach to
represent healthcare resources?
A. Document-centric approach
B. Message-centric approach
C. Resource-based approach with RESTful APIs
D. Batch processing approach
CORRECT ANSWER: C. Resource-based approach with RESTful APIs
Rationale: FHIR (Fast Healthcare Interoperability Resources) organizes
healthcare information into discrete resources (Patient, Observation,
Medication, etc.) and uses a RESTful API architecture. This approach
makes it easier to implement and more flexible than previous HL7
standards.
Question 8: Secondary use of health data refers to:
A. Using data for direct patient care
B. Using data for purposes other than the original clinical purpose
COMPREHENSIVE EXAM PREP STUDY GUIDE
200 EXAM QUESTIONS WITH ANSWERS AND DETAILED
RATIONALES
Question 1: Which federal regulation establishes the minimum security
and privacy requirements for protecting individually identifiable health
information held by covered entities?
A. HIPAA Security Rule
B. HITECH Act
C. GDPR
D. FISMA
CORRECT ANSWER: A. HIPAA Security Rule
Rationale: The HIPAA Security Rule establishes national standards to
protect individuals' electronic personal health information that is
created, received, used, or maintained by a covered entity. It addresses
administrative, physical, and technical safeguards.
Question 2: In interoperability terminology, what does "syntactic
interoperability" refer to?
A. The meaning and context of exchanged data
B. The format and structure of exchanged data
,C. The security protocols for data transmission
D. The storage mechanisms for health data
CORRECT ANSWER: B. The format and structure of exchanged data
Rationale: Syntactic interoperability ensures that the format and
structure of data exchanged between systems can be understood at the
data field level. This is typically achieved through standards like HL7 v2.x
or FHIR, which define message structures.
Question 3: Which type of clinical decision support system uses pattern
recognition algorithms to generate recommendations without
predefined rules?
A. Knowledge-based CDSS
B. Non-knowledge-based CDSS
C. Rules-based CDSS
D. Alert-based CDSS
CORRECT ANSWER: B. Non-knowledge-based CDSS
Rationale: Non-knowledge-based CDSS employs machine learning,
artificial neural networks, or statistical pattern recognition to identify
patterns in data. These systems learn from historical data to make
predictions rather than relying on explicit rules defined by human
experts.
Question 4: The principle of data minimization requires that healthcare
organizations should:
A. Collect all possible patient data to ensure completeness
B. Collect only the minimum amount of personal data necessary for the
intended purpose
,C. Minimize the number of employees with data access
D. Reduce data storage costs
CORRECT ANSWER: B. Collect only the minimum amount of personal
data necessary for the intended purpose
Rationale: Data minimization is a privacy principle that states
organizations should limit the collection, processing, and storage of
personal data to what is strictly necessary to achieve the specified
purpose. This reduces privacy risks and complies with regulations like
GDPR.
Question 5: Which type of database structure is most commonly used
in modern Electronic Health Records for handling complex relationships
between clinical concepts?
A. Hierarchical database
B. Network database
C. Relational database
D. Flat file database
CORRECT ANSWER: C. Relational database
Rationale: Relational databases organize data into tables with rows and
columns, using primary and foreign keys to establish relationships
between different data entities. This structure is ideal for EHRs, which
need to manage complex relationships between patients, providers,
encounters, diagnoses, and treatments.
Question 6: Under HIPAA, which of the following is considered a
covered entity?
, A. Health insurance companies
B. Medical device manufacturers
C. Pharmaceutical research companies
D. Health app developers
CORRECT ANSWER: A. Health insurance companies
Rationale: HIPAA defines covered entities as health plans, healthcare
clearinghouses, and healthcare providers who transmit health
information electronically for covered transactions. Health insurance
companies qualify as health plans and are therefore covered entities.
Question 7: The FHIR standard uses which architectural approach to
represent healthcare resources?
A. Document-centric approach
B. Message-centric approach
C. Resource-based approach with RESTful APIs
D. Batch processing approach
CORRECT ANSWER: C. Resource-based approach with RESTful APIs
Rationale: FHIR (Fast Healthcare Interoperability Resources) organizes
healthcare information into discrete resources (Patient, Observation,
Medication, etc.) and uses a RESTful API architecture. This approach
makes it easier to implement and more flexible than previous HL7
standards.
Question 8: Secondary use of health data refers to:
A. Using data for direct patient care
B. Using data for purposes other than the original clinical purpose
