Certified Documentation Integrity Practitioner (CDIP) Domian 6 Practice Test

These questions are part of the practice quiz. Start practicing

• What best describes data ownership in cloud document integrity?
• Why is documentation of procedures and staff training important for Domain 6?
• What is the primary contribution of a Privacy Impact Assessment (PIA) in project planning?
• Which of the following is considered a technical safeguard?
• When should encryption be applied to electronic PHI (ePHI)?
• A patient requested his health records but was denied because the patient had not paid the bill. This is a violation of:
• Which of the following is considered an administrative safeguard?
• On what date are CPT annual coding updates released?
• Which program audits and recovers Medicare overpayments by contracting with external entities?
• What information belongs in a chain of custody record?
• What is a Security Risk Assessment (SRA) under HIPAA/HITECH?
• Which of the following is not typically considered a CDI professional duty?
• Which statement best describes data lineage and its value to an organization?
• Which government department coordinates fraud and abuse control along with the Office of Inspector General (OIG)?
• What is a typical requirement under data localization rules in some jurisdictions?
• Which measures should be used to protect PHI on mobile devices under BYOD policies?
• How is the HIPAA 'minimum necessary' standard applied to disclosures to business associates, and how is it enforced?
• The acronym OIG stands for which entity?
• What is the primary role of the Office of Inspector General (OIG) within the Department of Health and Human Services?
• Which organization takes a lead in advancing health data and information management and provides multiple resources?
• On what date are HCPCS Level II updates released annually?
• How do digital signatures contribute to document authenticity?
• What is a retention schedule, and how does it relate to Domain 6?
• Why is chain of custody critical for digital evidence?
• Coding Clinic is published quarterly by which organization?
• What is the primary objective of CDIP Domain 6?
• Under the breach rule, a breach is presumed unless the responsible party demonstrates what?
• Which safeguard category includes transmission security measures?
• Which item should be regularly reported to the compliance officer?
• In which scenario is data masking most appropriate?
• What are considerations unique to preserving documents for legal holds?
• Which statement about provenance is most accurate?
• What is a retention schedule and why is it critical for records management?
• Which organization coordinates all official disease classifications activities in the United States?
• Which metric is typically used to gauge incident response effectiveness in a documentation integrity program?
• Where would a HIM professional find fraud and abuse guidance?
• What is the difference between data lineage and data provenance in governance?
• How do you measure the effectiveness of a documentation integrity program (KPIs, audits)?
• Which of the following are data quality attributes?
• In which scenario is forensic readiness most relevant?
• How should records be classified and disposed of at the end of their lifecycle?
• Administrative safeguards: Which activity is part of Administrative Safeguards?
• The Observed versus Expected mortality Rate compares observed deaths to what?
• SOI stands for which concept, and what DRG system uses it?
• What is the primary purpose of defensible disposal in records management?
• Which mechanism is commonly used to legally transfer PHI data across borders?
• Which of the following is a CDI professional's duty in their role?
• Which practice supports auditable preservation workflows?
• Which term refers to the protection of health information from unauthorized access?
• CDI success is achieved by taking fundamental coding knowledge and advancing it through ______?
• Which health care reform law passed in 2010 includes incentives and penalties for employers providing health insurance?
• Which practice best supports defensible management of documents across their lifecycle?
• What is cryptographic erasure as a disposal method?
• Which of the following is a government program with the mission to decrease Medicare improper payments and implement actions to prevent future improper payments?
• Which statement describes Expert Determination as a de-identification approach?
• What metrics could be used to assess document integrity performance?
• How does metadata impact documentation integrity and searchability?
• Why are business continuity planning and disaster recovery important for maintaining records integrity?
• What is the primary purpose of the HIPAA Privacy Rule and what rights does it grant individuals?
• What does an audit trail primarily monitor?
• How does least privilege apply to document handling?
• Which acronym refers to Zone Program Integrity Contractors?
• Technical Safeguards: Which is a Technical safeguard component?
• Which option lists the complete set of typical incident response lifecycle phases for a PHI breach?
• What is the role of a Privacy Officer in an organization handling PHI?
• Which is not typically considered a control for protecting PHI in unstructured data?
• Which privacy right allows individuals to request limits on certain disclosures of their PHI?
• What is the importance of version control in maintaining integrity?
• The Continuity of Care Document is an XML-based standard used for what?
• Which of the following best defines a data breach under HIPAA?
• In the event of a HIPAA data breach, which entities must be notified?
• The Recovery Audit Contractor (RAC) program is designed to do what in Medicare?
• What is a legal hold, and why is it important for preservation?
• What does PSI stand for in patient safety metrics?
• Which of the following best describes non-repudiation in digital communications?
• Which metric uses APR-DRG to adjust for risk of death?
• Which statement about BAAs is accurate?
• Which practice supports defensible deletion of data?
• What is redaction in the context of releasing information, and when is it appropriate?
• Which function is listed for the Centers for Medicare and Medicaid Services?
• Which of the following is NOT one of the seven characteristics of quality documentation?
• What are the roles and responsibilities typically found on governance committees overseeing documentation integrity?
• What is the chain of custody in health records, and name a key control?
• What is the purpose of an access review, and how often should it occur?
• How do data masking and pseudonymization differ, and when are they used?
• Define data lineage and data provenance and their importance in governance.
• A critical focus of CDI programs is to identify deficiencies in ______?
• What should be monitored in an ongoing integrity audit?
• What is the purpose of the Office of Inspector General?
• What is the role of data owners in governance of health information?
• What does a data migration integrity check verify?
• What are the timeframes for patient rights to access and amend PHI, and for accounting of disclosures?
• AHRQ is best described as which of the following?
• How do hash functions and digital signatures contribute to data integrity and non-repudiation?
• What does chain of custody ensure in electronic evidence handling?
• Distinguish between authorization and consent in HIPAA disclosures.
• Which item is essential to support provenance and traceability throughout a document's lifecycle?
• After a PHI incident, how should an organization assess breach risk and impact?
• Why is retention status included in integrity audits?
• Which statement about a Business Associate Agreement (BAA) is accurate?
• If a policy breach is suspected, which practice helps determine what happened?
• What is the primary purpose of risk assessments in a documentation integrity program?
• A resident is taught to copy and paste the last history and physical into the current encounter and bill for a full physical exam. This is an example of:
• What is version control, and how does it support auditability in documentation?
• What does HAC stand for in health care quality terms?
• What role do immutable audit trails play in CDIP Domain 6?
• Which organization is a nonprofit association of health information professionals that leads in advancing health data and information management?
• What is the purpose of an incident response plan in the context of integrity and regulatory compliance?
• Which is considered a physical safeguard?
• Which element is essential to prove provenance of a document?
• An individual within a healthcare setting repeatedly views a colleague's health records without permission. This is an example of which breach?
• What is the importance of tamper-evident logging in documentation systems?
• Which scenario best demonstrates the principle of least privilege in a healthcare setting?
• What is the role of naming conventions and versioning in document integrity?
• Which formats are permitted for compliant query questions?
• Why is chain of custody important in e-discovery?
• Given a scenario, identify a gap in a document integrity workflow and propose a remediation?
• Hot Topics with Compliance: Which item should always be included?
• What is the purpose of redaction audit trails?
• How policy and procedure alignment impact Domain 6 outcomes?
• What challenges do unstructured data pose to integrity management?
• What is the role of hash verification results in integrity audits?
• What best defines metadata provenance?
• Which federal act protects the privacy of patient-specific health care information and gives patients control over how this information is used and distributed?
• After a data migration, which activity verifies that the migrated data maintains original metadata and provenance?
• Which term is primarily concerned with individuals' right to control access to their personal health information?
• Which file formats are typically preferred for long-term preservation and why?
• How should you document and demonstrate compliance with regulatory requirements (audits, examinations)?
• How do hash values support document integrity?
• Which Act relates to fraud and abuse activities?
• Which standard describes data format and an application programming interface for exchanging electronic health records?
• Why are policies, procedures, and SOPs critical for maintaining documentation integrity?
• What does data minimization mean in privacy considerations?
• What is an audit trail and why is it essential for documentation integrity?
• How does change management influence document integrity?
• What is data lineage, and why is it valuable?
• What is a legal hold, and why is it important for records management?
• Which law makes it an offense to submit a false claim to the government for payment of health care services?
• Which term is associated with AHRQ and refers to metrics assessing patient safety?
• Which steps are included when managing litigation holds to preserve relevant PHI records?
• What is the purpose of a retention schedule?
• Which elements are typically involved in cross-border transfers of PHI and data localization requirements?
• Which activities are essential for a robust documentation integrity program?
• The Centers for Medicare and Medicaid Services (CMS) is part of which federal department?
• What is the legal term used to define the protection of health information in a patient provider relationship?
• The process would be initiated following a patient fall from the bed, to gather information and manage a claim if necessary. Which term describes this process?
• Which item is least likely to support provenance verification?
• The definition of fraud is the ________?
• Which statement best describes Physical Safeguards?
• In encryption for ePHI, why is key management essential?
• Which statement best describes role-based access control (RBAC) in protecting PHI?
• The acronym FCA stands for which act?
• What is an accounting of disclosures (AOD) and when must it be provided?
• Which items are typically included in a breach notification letter to affected individuals?
• What competence should CDIP practitioners demonstrate to support Domain 6?
• What should an integrity incident report include?
• How do version histories contribute to provenance and integrity?
• Define the HIPAA 'minimum necessary' standard and provide an example of its application.
• What is the primary purpose of maintaining an audit trail in documentation systems?
• Which privacy and regulatory considerations are commonly relevant to Domain 6?
• Which of the following is considered a hot topic in compliance?
• What is the purpose of a data retention policy in document integrity?
• A breach is generally defined as:
• According to the AHIMA Ethical Standards for CDI professionals, CDI professional shall do which of the following?
• What are tamper-evident controls and give two examples?
• Which frameworks or standards are commonly relevant to CDIP Domain 6?
• What is a key purpose of hash values in ongoing integrity verification?
• Differentiate between data integrity and data quality in healthcare documentation.
• Which practice mitigates provenance loss during system migrations?
• Name four data quality dimensions relevant to document integrity.
• Why are independent verification and dual control important?
• Which statement about non-repudiation in digital signatures is correct?
• What are secure disposal methods for obsolete electronic records?
• Who sets the official ICD-10 coding guidelines?
• Which organization publishes the AHA Coding Clinic, updated quarterly?
• What does RAC stand for in Medicare program integrity?
• What does forensic readiness mean in the context of documentation?
• When redacting PHI in ROI requests, which practice best ensures readability and compliance?
• What is the importance of provenance metadata in document integrity?
• Which role is commonly involved in governance committees overseeing documentation integrity?
• Which organization serves as a clearinghouse for ICD-10 code issues and participates in representation and advocacy on national classification and data issues?
• Describe the records lifecycle and the importance of proper archiving and destruction.
• When is a Business Associate Agreement (BAA) required and what should it cover?
• In what situation may prior encounter information be used in queries?
• Why is metadata essential for verifying provenance?
• What does CERT stand for in Medicare program integrity?
• On what date are ICD-10-CM/PCS updates released annually?
• Define e-discovery and its relevance to documentation integrity and preservation.
• What do imaging and digitization quality controls ensure?
• Which government organization is at the forefront of fighting waste, fraud, and abuse in Medicare, Medicaid and more than 300 other federal programs?
• How should cloud-based documents be secured to preserve integrity?
• Which online CPT coding journal is supported by the American Medical Association and discusses topics such as appealing insurance denials?
• In what year was the Office of Inspector General (OIG) developed?
• What is an appropriate end-of-life disposal method for highly sensitive PHI?
• Which document standard provides a structured summary of a patient's care used for inter-system data exchange?
• Why are backups important for maintaining document integrity?
• Which phase of the incident response lifecycle involves reviewing the handling of the incident to improve future responses?
• Which acronym stands for Hospital Acquired Condition?
• What considerations arise from cross-border data handling in Domain 6?
• The acronym HCC stands for which of the following?
• Which statement most accurately describes the role of access controls in CDIP Domain 6?
• In the incident response lifecycle, which phase directly addresses determining that an incident has occurred?
• What information qualifies as PHI under HIPAA?
• How does eDiscovery intersect with Domain 6 principles?
• What is a sampling strategy for integrity verification?
• Which statement best describes an effective governance structure for documentation integrity?
• Which statement best describes the difference between privacy and security in healthcare data?
• On January 1st, which coding updates are released?
• Which of the following is NOT a primary purpose of an audit trail?
• Under Title XI of the Social Security Act, what may happen to a provider convicted of misconduct?
• _____ is a comprehensive multilingual clinical healthcare terminology with scientifically validated clinical content.
• Which term describes the intentional and mistaken misrepresentation of reimbursement claims submitted to government-sponsored health programs?
• What is a primary governance benefit of maintaining data lineage and provenance?
• What does the principle of least privilege require?
• ______ scores are submitted at least once every 12 months.
• What is a primary objective of auditing access logs?
• What are data masking and pseudonymization, and when are they appropriate?
• Which metrics are commonly used to monitor data integrity in health records?
• A _____ is a communication tool or process used to clarify documentation in the health record.
• What is a key challenge in maintaining integrity during data redaction?
• Which elements comprise effective third-party risk management for PHI and health information systems?
• Which statement best describes redaction in preserved documents?
• Why is an evidence-friendly document taxonomy important?
• Physical Safeguards: Which is a Physical Safeguard activity?
• Three core attributes underpin document integrity and provenance.
• How should organizations document integrity incidents for future audits?
• When ingesting documents, what metadata should be captured to support discovery and integrity?
• _________ is a federal agency charged with improving quality and safety in American healthcare.
• Which practice in a compliance program best addresses the risk of unauthorized changes to critical documents?
• Which statement best describes the role of the data steward in governance of health information?
• How should an organization respond to a suspected integrity breach?
• Which should always be included in a compliant documentation query?
• Which organization serves as the World Health Organization collaboration center for the ICD in North America?
• Which of the following is typically an administrative safeguard?
• A CDI professional leaves their laptop unattended and it's stolen; 500 patient names on it. This is an example of: