Wgu C802 Foundation In Healthcare Information Management
Actual-Style Practice Questions And Answers With Rationales
2026| Instant Download
This exam evaluates advanced understanding of healthcare information systems, including EHR architecture,
interoperability standards, security, and emerging technologies. Questions require synthesis of technical,
regulatory, and operational concepts to solve complex scenarios. It contains 146 multiple-choice questions, each
with four distractors and a fully worked rationale that explains why the keyed answer is correct. Content is
organized into 12 focused sections: Healthcare Information Systems and Technology, Healthcare Data
Management and Standards, Health Information Privacy, Security, and Confidentiality, Legal and Regulatory
Requirements in Healthcare (HIPAA, HITECH), Electronic Health Records and Meaningful Use, Healthcare Data
Analytics and Quality Improvement, Health Information Governance and Lifecycle Management, Reimbursement
and Revenue Cycle Management, Healthcare Informatics and Interoperability, Ethics in Health Information
Management, Leadership and Management in HIM, Emerging Trends and Technologies in Healthcare
Information. Targeted learning outcomes include: Analyze healthcare information system architectures and their
integration with clinical workflows.; Evaluate interoperability standards (HL7, FHIR) and their application in
health information exchange.; Assess security and privacy controls in healthcare IT systems to ensure compliance
with HIPAA and HITECH.. Every item has been reviewed for clinical accuracy, current guidelines, and clarity so
that students can study with confidence and self-correct as they work through the bank. Use it as a high-yield
Section 1: Healthcare Information Systems and Technology (Questions 1-13)
1 Which HITRUST CSF control domain most directly mitigates ransomware
attacks on EHR systems?
A) Access Control
B) Endpoint Protection
C) Network Security
D) Data Backup and Recovery
Answer: B
Rationale: HITRUST CSF domain 09 (Endpoint Protection) specifically
addresses malware prevention, including ransomware, through antimalware
and endpoint detection. Access control, network security, and backup are
important but do not directly prevent ransomware execution.
2 In HL7 FHIR, which resource is used to exchange patient demographic and
administrative data?
A) Observation
B) Patient
C) Encounter
D) Condition
,Answer: B
Rationale: The FHIR Patient resource contains demographic and administrative
information about an individual receiving care. Observation, Encounter, and
Condition are clinical resources for findings, visits, and diagnoses,
respectively.
3 A hospital wants to query a community health information exchange for
patient data. Which standard is most appropriate?
A) HL7 v2 ADT messages
B) HL7 FHIR RESTful API
C) DICOM
D) X12 837 claims
Answer: B
Rationale: HL7 FHIR RESTful APIs enable standardized, query-based
exchange of patient data across systems, supporting HIE interoperability. HL7
v2 ADT is for notifications, DICOM for imaging, and X12 837 for claims, not
query-based clinical data exchange.
4 Which ONC certification criterion ensures EHRs support electronic
prescribing of controlled substances?
A) §170.315(b)(3) ePrescribing
B) §170.315(a)(1) CPOE
C) §170.315(e)(1) View, Download, Transmit
D) §170.315(g)(7) Application Access
Answer: A
Rationale: ONC certification criterion §170.315(b)(3) specifically requires
ePrescribing capabilities, including controlled substances. CPOE is for orders,
VDT is for patient access, and Application Access is for API access.
5 Which security control is required by the HIPAA Security Rule to protect
ePHI at rest?
A) Encryption
B) Firewall
C) Access logs
D) Biometric authentication
Answer: A
,Rationale: The HIPAA Security Rule addresses encryption as an addressable
implementation specification for data at rest. Firewalls, access logs, and
biometrics are optional or address other safeguards.
6 Which term describes the ability of disparate systems to exchange and use
health information?
A) Interoperability
B) Integration
C) Interface
D) Connectivity
Answer: A
Rationale: Interoperability is the ability of different information systems to
exchange and use data. Integration, interface, and connectivity are related but
narrower concepts.
7 Which data standard is used for exchanging clinical laboratory results?
A) HL7 v2 ORU
B) HL7 FHIR DiagnosticReport
C) LOINC
D) SNOMED CT
Answer: A
Rationale: HL7 v2 ORU messages are the traditional standard for laboratory
result reporting. FHIR DiagnosticReport is newer, LOINC codes tests, and
SNOMED CT codes clinical findings.
8 Which component of an EHR system directly supports clinical decision
support?
A) CPOE
B) CDS engine
C) Data warehouse
D) Registration module
Answer: B
Rationale: A clinical decision support (CDS) engine provides alerts, guidelines,
and recommendations. CPOE is order entry, data warehouse stores data, and
registration handles demographics.
, 9 Which technology enables remote monitoring of patients with chronic
diseases?
A) Telehealth
B) Wearable sensors
C) mHealth apps
D) Remote patient monitoring (RPM)
Answer: D
Rationale: Remote patient monitoring (RPM) uses technology to collect patient
data outside clinical settings. Telehealth is broader, wearables and mHealth are
tools, but RPM is the specific application.
10 Which standard is used for exchanging medical imaging data?
A) HL7 FHIR ImagingStudy
B) DICOM
C) XDS-I
D) HL7 v2
Answer: B
Rationale: DICOM is the standard for medical imaging data exchange. FHIR
ImagingStudy references DICOM, XDS-I is for cross-enterprise sharing, and
HL7 v2 is not imaging-specific.
11 A hospital's CPOE lacks CDS for renal dosing. Which system architecture
best mitigates this gap?
A) Standalone pharmacy database with manual renal-function checks
B) Integrated EHR with rule-based CDS alerts using eGFR and weight-based
dosing
C) Barcode medication administration (BCMA) with hard stops on high-risk
drugs
D) Clinical data warehouse with retrospective renal dosing analytics
Answer: B
Rationale: An integrated EHR with rule-based CDS can provide real-time,
patient-specific renal dosing alerts at order entry, directly addressing the CPOE
gap. Standalone databases and retrospective analytics lack real-time
integration, and BCMA targets administration, not ordering.
Actual-Style Practice Questions And Answers With Rationales
2026| Instant Download
This exam evaluates advanced understanding of healthcare information systems, including EHR architecture,
interoperability standards, security, and emerging technologies. Questions require synthesis of technical,
regulatory, and operational concepts to solve complex scenarios. It contains 146 multiple-choice questions, each
with four distractors and a fully worked rationale that explains why the keyed answer is correct. Content is
organized into 12 focused sections: Healthcare Information Systems and Technology, Healthcare Data
Management and Standards, Health Information Privacy, Security, and Confidentiality, Legal and Regulatory
Requirements in Healthcare (HIPAA, HITECH), Electronic Health Records and Meaningful Use, Healthcare Data
Analytics and Quality Improvement, Health Information Governance and Lifecycle Management, Reimbursement
and Revenue Cycle Management, Healthcare Informatics and Interoperability, Ethics in Health Information
Management, Leadership and Management in HIM, Emerging Trends and Technologies in Healthcare
Information. Targeted learning outcomes include: Analyze healthcare information system architectures and their
integration with clinical workflows.; Evaluate interoperability standards (HL7, FHIR) and their application in
health information exchange.; Assess security and privacy controls in healthcare IT systems to ensure compliance
with HIPAA and HITECH.. Every item has been reviewed for clinical accuracy, current guidelines, and clarity so
that students can study with confidence and self-correct as they work through the bank. Use it as a high-yield
Section 1: Healthcare Information Systems and Technology (Questions 1-13)
1 Which HITRUST CSF control domain most directly mitigates ransomware
attacks on EHR systems?
A) Access Control
B) Endpoint Protection
C) Network Security
D) Data Backup and Recovery
Answer: B
Rationale: HITRUST CSF domain 09 (Endpoint Protection) specifically
addresses malware prevention, including ransomware, through antimalware
and endpoint detection. Access control, network security, and backup are
important but do not directly prevent ransomware execution.
2 In HL7 FHIR, which resource is used to exchange patient demographic and
administrative data?
A) Observation
B) Patient
C) Encounter
D) Condition
,Answer: B
Rationale: The FHIR Patient resource contains demographic and administrative
information about an individual receiving care. Observation, Encounter, and
Condition are clinical resources for findings, visits, and diagnoses,
respectively.
3 A hospital wants to query a community health information exchange for
patient data. Which standard is most appropriate?
A) HL7 v2 ADT messages
B) HL7 FHIR RESTful API
C) DICOM
D) X12 837 claims
Answer: B
Rationale: HL7 FHIR RESTful APIs enable standardized, query-based
exchange of patient data across systems, supporting HIE interoperability. HL7
v2 ADT is for notifications, DICOM for imaging, and X12 837 for claims, not
query-based clinical data exchange.
4 Which ONC certification criterion ensures EHRs support electronic
prescribing of controlled substances?
A) §170.315(b)(3) ePrescribing
B) §170.315(a)(1) CPOE
C) §170.315(e)(1) View, Download, Transmit
D) §170.315(g)(7) Application Access
Answer: A
Rationale: ONC certification criterion §170.315(b)(3) specifically requires
ePrescribing capabilities, including controlled substances. CPOE is for orders,
VDT is for patient access, and Application Access is for API access.
5 Which security control is required by the HIPAA Security Rule to protect
ePHI at rest?
A) Encryption
B) Firewall
C) Access logs
D) Biometric authentication
Answer: A
,Rationale: The HIPAA Security Rule addresses encryption as an addressable
implementation specification for data at rest. Firewalls, access logs, and
biometrics are optional or address other safeguards.
6 Which term describes the ability of disparate systems to exchange and use
health information?
A) Interoperability
B) Integration
C) Interface
D) Connectivity
Answer: A
Rationale: Interoperability is the ability of different information systems to
exchange and use data. Integration, interface, and connectivity are related but
narrower concepts.
7 Which data standard is used for exchanging clinical laboratory results?
A) HL7 v2 ORU
B) HL7 FHIR DiagnosticReport
C) LOINC
D) SNOMED CT
Answer: A
Rationale: HL7 v2 ORU messages are the traditional standard for laboratory
result reporting. FHIR DiagnosticReport is newer, LOINC codes tests, and
SNOMED CT codes clinical findings.
8 Which component of an EHR system directly supports clinical decision
support?
A) CPOE
B) CDS engine
C) Data warehouse
D) Registration module
Answer: B
Rationale: A clinical decision support (CDS) engine provides alerts, guidelines,
and recommendations. CPOE is order entry, data warehouse stores data, and
registration handles demographics.
, 9 Which technology enables remote monitoring of patients with chronic
diseases?
A) Telehealth
B) Wearable sensors
C) mHealth apps
D) Remote patient monitoring (RPM)
Answer: D
Rationale: Remote patient monitoring (RPM) uses technology to collect patient
data outside clinical settings. Telehealth is broader, wearables and mHealth are
tools, but RPM is the specific application.
10 Which standard is used for exchanging medical imaging data?
A) HL7 FHIR ImagingStudy
B) DICOM
C) XDS-I
D) HL7 v2
Answer: B
Rationale: DICOM is the standard for medical imaging data exchange. FHIR
ImagingStudy references DICOM, XDS-I is for cross-enterprise sharing, and
HL7 v2 is not imaging-specific.
11 A hospital's CPOE lacks CDS for renal dosing. Which system architecture
best mitigates this gap?
A) Standalone pharmacy database with manual renal-function checks
B) Integrated EHR with rule-based CDS alerts using eGFR and weight-based
dosing
C) Barcode medication administration (BCMA) with hard stops on high-risk
drugs
D) Clinical data warehouse with retrospective renal dosing analytics
Answer: B
Rationale: An integrated EHR with rule-based CDS can provide real-time,
patient-specific renal dosing alerts at order entry, directly addressing the CPOE
gap. Standalone databases and retrospective analytics lack real-time
integration, and BCMA targets administration, not ordering.
