NHA Medical Assistant (CCMA) — All Questions

A medical assistant receives a phone call from a patient's adult sister asking for the patient's laboratory results. The patient has not authorized any disclosure. What should the medical assistant do?

• a.Give only the abnormal results and withhold the normal ones
• b.Politely explain that results cannot be released without the patient's authorization✓
• c.Ask the sister to verify the patient's date of birth and then release everything
• d.Give the results, since a sister is immediate family

Protected health information may not be disclosed to family members without the patient's authorization or another permitted exception, so the request must be politely declined. Being a relative does not by itself create a right of access. Releasing partial results or accepting a demographic detail as identity verification still constitutes an unauthorized disclosure.HIPAA Privacy Rule (45 CFR Part 164)

What does the minimum necessary standard require of a medical assistant?

• a.Reviewing the entire chart of every patient in the office each morning
• b.Accessing and sharing only the protected health information needed to accomplish the specific task at hand✓
• c.Sharing the full record with any staff member who asks
• d.Storing all records on a personal phone for convenience

The minimum necessary standard limits access, use, and disclosure of protected health information to what is required for the specific purpose, such as looking only at the section relevant to today's visit. Browsing charts without a work reason is a privacy violation even for employees. Sharing full records on request or storing them on personal devices creates unnecessary and unsecured exposure.HIPAA Privacy Rule (45 CFR Part 164)

A patient calls and asks the medical assistant, "Do you think this rash is shingles, and should I take the antiviral my neighbor has?" How should the medical assistant respond?

• a.Tell the patient it is safe to take the neighbor's medication once
• b.Recommend an over-the-counter substitute for the antiviral
• c.Give a probable diagnosis based on the description
• d.Explain that diagnosing and prescribing are outside the medical assistant's scope, document the call, and route it to the provider✓

Diagnosing conditions and recommending or authorizing medications are provider functions, so the medical assistant must document the call and forward it for the provider's decision. Offering a probable diagnosis over the phone is practicing medicine without a license. Advising a patient to take another person's prescription is both unsafe and outside any assistant's authority.

Who is responsible for explaining the risks, benefits, and alternatives of a procedure so the patient can give informed consent?

• a.The provider performing the procedure✓
• b.The front desk receptionist at check-in
• c.The insurance company representative
• d.The medical assistant who rooms the patient

Informed consent requires the treating provider to explain the nature of the procedure, its risks, benefits, and alternatives, and to answer the patient's questions. A medical assistant may witness the signature and confirm the form is complete, but cannot supply the clinical explanation. Reception staff and insurers have no role in the clinical consent discussion.

In a SOAP note, which entry belongs in the objective section?

• a.The patient will return in two weeks for reevaluation
• b.Blood pressure 128/76 mmHg, temperature 99.1°F, no visible rash on examination✓
• c.The patient reports a throbbing headache for two days
• d.The patient states that the pain is worse in the morning

Objective data are measurable or observable findings such as vital signs and examination results, so the blood pressure, temperature, and skin findings belong there. Statements the patient reports about symptoms are subjective. A return visit instruction belongs in the plan, and the provider's conclusion about the cause belongs in the assessment.

A medical assistant realizes a vital sign was charted in the wrong patient's paper record. How should the error be corrected?

• a.Erase the entry and rewrite it as if nothing happened
• b.Draw a single line through the entry so it remains readable, write the correction, and add the date and initials✓
• c.Use correction fluid to cover the entry completely
• d.Tear out the page and start a fresh one

Correcting a paper record requires a single line through the error so the original remains legible, the correct information written nearby, and the date plus initials of the person making the change. Correction fluid, erasing, and removing pages destroy the original entry and can be seen as tampering. The medical record is a legal document, so its history must remain visible.

Which scheduling method books several patients at the start of each hour and then leaves the rest of the hour open to absorb delays?

• a.Double booking
• b.Cluster scheduling
• c.Wave scheduling✓
• d.Open hours scheduling

Wave scheduling brings a group of patients in at the top of the hour and staff see them in the order they are ready, which absorbs no-shows and short visits within that hour. Open hours means patients arrive any time without appointments. Double booking places two patients in the same slot, and cluster scheduling groups similar visit types together on certain days.

A patient does not show up for a scheduled appointment. What is the appropriate action?

• a.Charge the patient's insurance for the visit as if it occurred
• b.Document the missed appointment in the patient's medical record and follow office policy for follow-up contact✓
• c.Discharge the patient from the practice immediately without notice
• d.Delete the appointment so the schedule looks clean

Missed appointments are documented in the medical record because a pattern of no-shows can be clinically and legally significant, and the office then follows its policy for contacting the patient. Deleting the entry destroys evidence that the appointment was offered. Billing insurance for a visit that never happened is fraudulent, and abrupt dismissal without proper notice risks a claim of patient abandonment.

Which code set is used to report the diagnosis or reason for a patient's visit?

• a.HCPCS Level II codes
• b.ICD-10-CM codes✓
• c.NDC codes
• d.CPT codes

ICD-10-CM codes describe diagnoses and the reason for the encounter, which supports medical necessity on a claim. CPT codes report the procedures and services performed, and HCPCS Level II covers supplies, equipment, and certain drugs. NDC codes identify specific drug products by manufacturer and package.

A patient's insurance plan has a $1,500 annual deductible and a $30 office visit copay. What does the deductible represent?

• a.The percentage of the bill the patient owes after the plan starts paying
• b.The monthly amount the patient pays to keep the policy active
• c.The amount the patient must pay out of pocket for covered services each year before the plan begins to pay✓
• d.The fixed amount collected at each visit

A deductible is the annual amount a patient must pay for covered services before insurance benefits begin. The monthly cost of keeping coverage is the premium, and the fixed per-visit amount is the copay. The percentage the patient owes after the deductible is met is coinsurance, so each term describes a different part of cost sharing.

A patient requests a copy of their complete medical record to take to a specialist. What is the correct process?

• a.Hand over the original paper chart, since the information belongs to the patient
• b.Have the patient complete a signed written authorization, then release a copy according to office policy✓
• c.Refuse, because records may never leave the practice
• d.Fax the record to any office the patient names without documentation

Patients have a right to access their health information, but release requires a signed authorization and the practice provides a copy while retaining the original, which is the property of the provider or facility. Handing over the original leaves the practice without its legal record. Refusing access outright or transmitting records without documented authorization both create compliance problems.

A patient who speaks limited English arrives with her 10-year-old son, who offers to translate the visit. What is the best practice?

• a.Let the child translate, since he knows his mother best
• b.Reschedule the visit until a bilingual family member can come
• c.Arrange a qualified medical interpreter, in person or by phone, and document that an interpreter was used✓
• d.Speak louder and use simple English so no interpreter is needed

Qualified interpreter services protect accuracy and confidentiality and are expected of health care organizations serving patients with limited English proficiency. Using a child as an interpreter risks serious mistranslation and places an inappropriate burden on the minor. Speaking louder does not create understanding, and delaying necessary care can harm the patient.

Which question best encourages a patient to describe a symptom in detail during intake?

• a.You are not having chest pain, are you?
• b.Can you describe what the pain feels like and what you were doing when it started?✓
• c.Does the pain hurt a lot?
• d.Is the pain gone now?

Open-ended questions invite the patient to describe quality, timing, and context in their own words, which yields far more clinically useful information. Yes-or-no questions close the conversation after a single word. Leading questions such as the chest pain example suggest the answer and can cause the patient to withhold important symptoms.

Two medical assistants are discussing a patient's positive test result in a crowded elevator. Why is this a problem?

• a.It is an impermissible disclosure of protected health information that could be overheard by others✓
• b.It is allowed as long as the patient's last name is not used
• c.It only becomes a violation if the patient personally hears the conversation
• d.It is acceptable because both are employees of the same practice

Discussing identifiable patient information where others can overhear is an impermissible disclosure, regardless of whether the speakers are coworkers. Omitting the last name does not protect privacy when other details make the patient identifiable. A violation depends on the improper disclosure itself, not on whether the patient happens to hear it.HIPAA Privacy Rule (45 CFR Part 164)

A medical assistant forgets to chart a wound care treatment until the following morning. How should the entry be made?

• a.Ask a coworker to sign it with yesterday's date
• b.Leave it undocumented, since the care was already given
• c.Insert it in yesterday's space so the sequence looks unbroken
• d.Make a late entry dated today, clearly labeled as a late entry and referencing the date and time the care was actually provided✓

A late entry is charted on the current date, labeled as a late entry, and states the date and time the care actually occurred, which preserves an accurate legal timeline. Backdating an entry or having someone else sign for the work is falsification. Leaving care undocumented creates the legal presumption that it was never performed.

A patient hands the front desk an advance directive naming a health care proxy. What should be done with the document?

• a.Return it to the patient, since the office cannot accept legal documents
• b.Store it in the billing folder with the insurance card copy
• c.Scan or file a copy into the medical record and notify the provider that it is on file✓
• d.Discard it after the visit, because it applies only in hospitals

An advance directive becomes part of the medical record so the patient's wishes and designated decision maker are available to the care team, and the provider should be told it is on file. Returning or discarding it defeats the purpose of documenting the patient's wishes. Filing it with billing paperwork hides it from the clinicians who would need it.

A patient from a culture in which direct eye contact with authority figures is considered disrespectful avoids looking at the medical assistant. What is the most appropriate response?

• a.Assume the patient is being dishonest or hiding symptoms
• b.Insist that the patient make eye contact to show they are listening
• c.Respect the patient's communication style, continue speaking clearly, and confirm understanding through teach-back✓
• d.Document that the patient was uncooperative during the interview

Culturally competent care means recognizing that norms for eye contact, personal space, and touch differ, and adapting without judgment while verifying understanding through methods such as teach-back. Demanding eye contact can shame the patient and damage trust. Interpreting the behavior as dishonesty or noncooperation records a biased and inaccurate impression in the chart.

A patient telephones and reports crushing chest pain radiating to the left arm with sweating. What should the medical assistant do?

• a.Advise the patient to take an antacid and call back tomorrow
• b.Place the caller on hold until the provider finishes the current visit
• c.Offer the next available appointment in three days
• d.Instruct the patient to call 911 or emergency services immediately, stay on the line as facility protocol allows, and alert the provider✓

Crushing chest pain radiating to the arm with diaphoresis suggests a possible heart attack, so activating emergency medical services immediately is the priority, along with notifying the provider and documenting the call. Routine appointments, antacids, or being placed on hold delay time-critical treatment. Minutes matter because early intervention preserves heart muscle.

Which code set is used to report the procedures and services a provider performed at a visit?

• a.The ICD-10-CM code set, which describes the reason the patient came to be seen
• b.The CPT code set✓
• c.The National Drug Code, which identifies each medication down to its package size and is used by pharmacies to bill for a dispensed prescription rather than by a clinic for a visit
• d.The place of service code, which shows only where the service happened

Current Procedural Terminology codes report what was done, while ICD-10-CM codes report the diagnosis or reason. HCPCS Level II codes cover supplies, equipment and some drugs administered in the office. A claim generally needs both a procedure and a diagnosis code, and the pair has to make clinical sense together.

A patient's plan has a twenty percent coinsurance. What does that mean?

• a.The patient pays a fixed dollar amount at each visit regardless of what the visit cost
• b.The patient pays the first twenty percent of the annual deductible and the plan pays the rest of it, after which the plan covers every claim in full for the remainder of the benefit year
• c.The patient pays twenty percent of the allowed amount and the plan pays the rest✓
• d.The plan pays twenty percent of the bill and the patient is responsible for the balance

Coinsurance is a share expressed as a percentage of the allowed amount, so a twenty percent coinsurance leaves eighty percent to the plan once the deductible has been met. A copay is the fixed amount per visit, and a deductible is the amount the patient pays before cost sharing begins. Getting the direction backwards leaves a patient with the wrong estimate.

A procedure requires prior authorisation from the insurer. When must it be obtained?

• a.Within thirty days after the service, when the claim is submitted for payment
• b.Only if the claim is denied, at which point the authorisation is requested retroactively and the claim resubmitted, which is the normal route because most insurers prefer to review completed care
• c.At the patient's next visit, whenever that happens to fall in the calendar
• d.Before the service is provided, and the authorisation number is recorded✓

Prior authorisation means the insurer agrees in advance that it will consider the service covered, so it is obtained before the appointment and the number is recorded on the claim. Seeking it afterwards usually fails, and the patient can be left with the bill for care they believed was covered.

Which part of Medicare covers outpatient physician services?

• a.Part B✓
• b.Part A, which covers inpatient hospital stays, skilled nursing facility care after a qualifying hospital admission, some home health services and hospice care for a beneficiary who is terminally ill
• c.Part D, which covers outpatient prescription drugs
• d.Part C, which is the name for the original fee-for-service programme

Part B covers physician services, outpatient care, preventive services and durable medical equipment. Part A covers inpatient hospital and related institutional care, Part D covers outpatient prescription drugs, and Part C is Medicare Advantage, a private plan alternative to original Medicare rather than the original programme itself.

A patient is seen for an injury that happened at work. How is the visit handled?

• a.Bill the patient's own health plan and collect the usual copay at the front desk
• b.Bill the workers' compensation carrier, and keep the injury record separate from the chart✓
• c.Bill the employer directly and ask the patient to seek reimbursement from the employer afterwards, since a work injury is a private matter between the worker and the company they work for
• d.Bill nobody, since work injuries are treated at no charge by law

A work-related injury is billed to the employer's workers' compensation carrier rather than the patient's health plan, and there is normally no copay. The workers' compensation record is kept separate because the carrier and the employer are entitled to information about that injury and nothing else in the patient's history.

What is an explanation of benefits?

• a.A bill from the practice showing the amount the patient still owes after any payments
• b.A summary of the plan's covered services that is issued once each year at enrolment and lists every benefit the member is entitled to for the coming twelve months of coverage
• c.A statement from the insurer showing what was billed, allowed, paid and left to the patient✓
• d.A form the patient signs to authorise the insurer to pay the practice directly

An explanation of benefits is sent to the member after a claim is processed and shows the billed charge, the allowed amount, what the plan paid and what the patient owes, with reasons for any reduction. It is not a bill. An assignment of benefits is the form directing payment to the practice, and a summary of benefits is the annual coverage document.

A provider asks the medical assistant to code a fifteen minute visit as a longer one because the patient was difficult. What should happen?

• a.Code it as asked, since the provider decides what level of service was delivered at a visit
• b.Code it as asked but add a note in the chart recording that the instruction came from the provider, which transfers the responsibility for the coding decision to the person who gave it
• c.Code the visit at the higher level only for patients whose insurers rarely audit claims
• d.Decline; billing a level of service that was not provided is fraud, and raise it internally✓

Reporting a higher level of service than was delivered is upcoding, which is billing fraud whoever asks for it, and a note recording who instructed it does not make it lawful. The assistant codes what the documentation supports and raises the request through the practice's compliance route. Difficulty alone does not raise a service level; documented time and complexity do.

What is the purpose of building a matrix in the appointment schedule?

• a.To block out the times the provider is unavailable before any appointments are booked✓
• b.To record how long each patient actually waited so the practice can report on its punctuality at the end of each month and identify the appointment types that most often run over
• c.To group patients with similar needs into the same session of the day
• d.To decide which patients are offered the earliest appointments each morning

The matrix is the frame: meetings, hospital rounds, lunch, holidays and any other unavailable time are marked off first, so nobody is booked into a slot the provider was never going to be there for. Grouping similar visits is cluster scheduling, and wait times and triage are separate matters entirely.

Which scheduling method books two patients into the same slot on the assumption that one may not attend?

• a.Open hours scheduling, in which patients attend without any appointment at all
• b.Double booking✓
• c.Cluster scheduling, which groups patients who need the same type of visit into one session so that the room, the equipment and the staff can be set up once for the whole block of time
• d.Stream scheduling, which gives each patient an individual appointment time

Double booking puts two patients in one slot, which works when both visits are short or one is expected to be a no-show and produces a long wait when both attend and both need time. Stream scheduling gives each patient their own slot, cluster scheduling groups similar visits and open hours dispenses with appointments.

Which entry in a progress note is subjective rather than objective?

• a.A blood pressure of 128 over 82 taken by the medical assistant at the start of the visit
• b.A rash described as raised, red and covering the left forearm on inspection by the provider
• c.The patient's statement that the pain is worse at night and keeps them from sleeping✓
• d.A temperature of 99.1 degrees Fahrenheit recorded by tympanic thermometer

Subjective information is what the patient reports and cannot be measured by anyone else, such as pain, nausea, dizziness or a symptom history. Objective information is what is measured or observed, including vital signs, examination findings and test results. Sorting them correctly is what makes a note usable by the next clinician.

An error is discovered in an electronic health record entry made yesterday. How is it corrected?

• a.Delete the incorrect text and type the correct information over it in the same field
• b.Ask the system administrator to remove the entry so that the record shows only what is accurate, since a record containing a known error could be used against the practice if it is ever produced in a legal proceeding
• c.Leave the entry alone and write the correct information in the next visit's note instead
• d.Add an addendum that states the correction and the reason, leaving the original visible✓

An electronic record keeps an audit trail, so a correction is made as a dated, signed addendum that explains what was wrong and what is right while the original entry stays visible. Deleting or having an entry removed destroys the trail and looks like concealment, and burying the correction in a later note leaves the wrong information uncorrected where it will be read.

Which four elements must a patient establish to prove negligence against a provider?

• a.Duty, dereliction of that duty, direct cause and damages✓
• b.Intent, opportunity, motive and a documented complaint filed within the statutory period
• c.A written contract signed at the first visit, a fee schedule agreed in advance by both parties, a record of every telephone call between them, and a complaint made in front of a witness
• d.Consent, capacity, causation and the presence of an expert witness at the trial

The four Ds are duty, meaning a provider–patient relationship existed; dereliction, meaning the standard of care was not met; direct cause, meaning that failure caused the harm; and damages, meaning the patient suffered a compensable loss. Negligence does not require intent, and a contract or a witnessed complaint is not an element of it.

What does the doctrine of respondeat superior mean for a medical assistant's employer?

• a.The employer is protected from any claim arising from an employee's conduct at work
• b.The employer can be held liable for an employee's acts carried out within the scope of employment✓
• c.The employee is personally liable for everything and the employer cannot be named in a suit at all, which is why professional liability insurance is sold to individual employees rather than to practices
• d.The employer must supervise every task an employee performs in person and in real time

Respondeat superior means let the master answer: an employer may be held responsible for what an employee does within the scope of their job. It does not shield the employee, who remains responsible for their own actions, and it is one reason employers define scope, train, document competence and carry liability cover.

A subpoena duces tecum arrives at the practice. What does it require?

• a.That the provider appear in court on the stated date to give evidence in person
• b.That the practice stop treating the named patient until the legal matter has been resolved, because continuing care while a case is open can be presented as interference with the proceedings
• c.That specified documents or records be produced✓
• d.That the patient be notified within twenty-four hours and asked to consent to disclosure

Duces tecum means bring with you: the order is for records rather than testimony, and the practice identifies exactly which records are covered, produces them through the person responsible for health information, and keeps a log of what was released. A plain subpoena calls for testimony, and nothing about it suspends the patient's care.

A medical assistant suspects that a child seen today has been abused. What is the correct action?

• a.Question the child alone until enough detail has been gathered to be certain of the suspicion
• b.Photograph any marks with a personal phone so there is evidence before the family leaves
• c.Say nothing unless the child asks for help, since reporting without a request breaks confidence
• d.Report the concern to the provider and follow the state's mandatory reporting requirements✓

Health care workers are mandated reporters in every state, and the threshold is a reasonable suspicion rather than proof, so the concern goes to the provider and into the reporting route the state defines, with the observations documented in the patient's own words. Interrogating a child and taking photographs on a personal device are not the assistant's role.

What does a durable power of attorney for health care allow?

• a.A named person to make health decisions if the patient becomes unable to make them✓
• b.A named person to take over the patient's finances and property while the patient is still well
• c.The provider to make every treatment decision without consulting the patient or the family, on the basis that the clinician is the person best placed to judge what treatment the patient needs
• d.The patient to refuse treatment only in the specific situations the document lists

A durable power of attorney for health care appoints someone to speak for the patient about medical decisions once the patient cannot speak for themselves, and it stays in force through incapacity. A living will records the patient's own wishes about specific treatments, and a financial power of attorney is a separate document.

A patient asks the medical assistant to change a diagnosis in the record because it affects an insurance application. What should happen?

• a.Change it, because a patient has the right to decide what appears in their own record
• b.Explain that the record cannot be altered, and offer the process for requesting an amendment✓
• c.Change it and note in the file that the patient requested the change, which keeps the history transparent while giving the patient the version of events that they prefer to have on record
• d.Refuse and end the conversation, since a request of this kind is an attempt at fraud

A clinical record is not rewritten on request, but a patient does have a right to ask for an amendment, and the practice must consider it and respond, adding the request and the outcome to the record if the amendment is declined. Changing an entry to suit an insurance application is falsification; treating the request as a crime and refusing to explain the route is unhelpful.

Which situation generally allows disclosure of patient information without the patient's authorisation?

• a.A relative telephones asking how the patient's appointment went earlier that afternoon
• b.An employer asks for the result of a test their employee had at the practice last week
• c.A reportable communicable disease is diagnosed and public health must be notified✓
• d.A former partner asks whether the patient has attended the practice in the past year

Public health reporting of specified conditions is one of the disclosures permitted by law without authorisation, along with certain matters such as mandated abuse reporting and responses to valid legal process. Relatives, employers and former partners have no right of access, and even confirming that someone is a patient is a disclosure.

A patient who uses a wheelchair cannot reach the check-in counter. What does reasonable accommodation require?

• a.That the patient bring someone who can complete the check-in on their behalf each visit
• b.That the practice rebuild the reception area before the patient's next scheduled appointment, since any counter a wheelchair user cannot reach is a permanent structural barrier that must be removed
• c.That staff explain that the counter height is fixed and cannot be altered for one patient
• d.That staff bring the paperwork to the patient or provide another accessible way to check in✓

An accommodation removes the barrier for that patient by a reasonable means, and stepping around the counter with a clipboard or offering an accessible desk or an electronic check-in does that immediately. Requiring a companion pushes the problem onto the patient, and refusing to adapt is the position the law was written to prevent.

A patient telephones asking for advice about whether to increase a prescribed dose. What should the medical assistant do?

• a.Take the details, tell the patient when to expect a reply, and route it to the provider✓
• b.Suggest a small increase, since a modest change to an existing prescription carries little risk and the patient will otherwise wait several days for an answer they are unlikely to disagree with
• c.Tell the patient to look the medication up online and decide based on what is written there
• d.Say that the practice cannot discuss medication over the telephone under any circumstances

Adjusting a dose is a prescribing decision, so the assistant records the question accurately, tells the patient when they will hear back and passes it to the provider, following up if no answer comes. Suggesting a change is practising outside the role, and sending a patient to the internet or refusing to engage abandons them with the question.

A patient is being discharged from the practice for repeated abusive behaviour. What does the practice owe the patient?

• a.Nothing, since the relationship ended the moment the behaviour occurred in the office
• b.Written notice, continued care for a reasonable period, and help finding another provider✓
• c.An immediate stop to all care including any prescription refills, effective the same day, because continuing to treat someone after ending the relationship creates an obligation to keep treating them
• d.A refund of every fee the patient has paid to the practice over the past twelve months

Ending a provider–patient relationship without proper notice can amount to abandonment, so the practice sends written notice, remains available for an interval commonly around thirty days, offers help in finding another provider and transfers records on request. Stopping care and refills the same day is the exposure the notice period exists to prevent.

How long must a practice retain a patient's medical record?

• a.Until the patient's account has been paid in full and the balance closed
• b.Exactly seven years from the date of the first visit in every state of the country
• c.For the period the state and any applicable federal or payer rule requires✓
• d.Until the patient transfers to another practice and the records have been sent on

Retention periods are set by state law and can be extended by federal programme or payer requirements, and they usually run longer for the records of minors, often to a set age. The practice follows the longest applicable period. Payment status and a transfer of care do not end the obligation, and there is no single national number.

A patient asks whether the medical assistant can diagnose the rash they have shown during the visit.

• a.Offer a likely diagnosis and suggest an over-the-counter product that usually helps with it
• b.Say the rash looks harmless so the patient does not worry while waiting for the provider
• c.Compare the rash with images found online and tell the patient which one it most resembles, so that the patient has something concrete to discuss when the provider comes into the room
• d.Explain that diagnosis is outside the role and that the provider will examine and advise✓

Diagnosing, and recommending treatment on the strength of a diagnosis, is outside a medical assistant's scope wherever they practise, and a reassuring guess is still a diagnosis, one the patient may act on by not returning. The assistant documents what the patient reports and what can be observed, and hands the question to the provider.

What is the purpose of the notice of privacy practices a practice gives to patients?

• a.To obtain the patient's consent for every future disclosure the practice may ever make
• b.To tell patients how their information may be used and disclosed and what rights they have✓
• c.To record that the patient has agreed not to discuss their care with anyone outside the family, which protects the practice if information later reaches someone it should not have reached
• d.To list the fees the practice charges for producing copies of a medical record

The notice explains the practice's uses and disclosures of protected health information and the patient's rights to access, amend, restrict and receive an accounting, and the practice makes a good faith effort to obtain acknowledgement that it was received. It is not a blanket consent, not a promise extracted from the patient and not a fee schedule.HIPAA

A billing company processes claims for the practice. What governs its handling of patient information?

• a.Nothing, because the company is not a health care provider and treats no patients itself
• b.The practice's own internal policies only, which the company may adopt or decline as it wishes since it is a separate business with its own management and its own operating procedures
• c.A business associate agreement setting out how the information may be used and protected✓
• d.The patient's signature on a separate release form before each individual claim is sent

A vendor that handles protected health information on a practice's behalf is a business associate, and a written agreement binds it to safeguard the information, use it only as permitted, report breaches and return or destroy it at the end of the arrangement. Billing is a permitted use, so no separate patient release is needed for each claim.HIPAA

A medical assistant is asked to perform a task not permitted in that state for the credential held. What is the correct response?

• a.Decline, explain why, and raise it with the supervising provider✓
• b.Perform it once under direct observation, then decide whether to continue doing it in future
• c.Perform it and record in the chart that the provider directed it, since a delegated task carried out under a provider's instruction becomes that provider's responsibility rather than the assistant's
• d.Perform it if a colleague with the same credential has been doing it for some time

Scope of practice is set by state law and by what the employer has trained and assessed, and neither a supervisor's instruction nor a colleague's habit expands it. Performing a task outside scope exposes the patient, the assistant and the practice, and delegation does not transfer the consequences. The disagreement goes up the chain of command.

A grateful patient offers the medical assistant an expensive gift at the end of a course of treatment. What is the appropriate response?

• a.Accept it privately so the patient is not embarrassed in front of the reception staff
• b.Accept it and share it among the whole team, which turns a personal gift into a shared one and therefore removes any possibility that it could influence how that patient is treated in future
• c.Accept it but record the value in the patient's chart so the practice has a written record
• d.Thank the patient warmly, decline, and explain the practice's policy on gifts✓

A gift of significant value creates an obligation and can look like it buys preferential treatment, so most practices set a policy and staff decline gracefully rather than accepting on any condition. Sharing it or writing its value into the chart does not remove the obligation, and the chart is a clinical record rather than a register of gifts.

Two calls come in at once and the medical assistant must place one on hold. What is the correct practice?

• a.Place the second caller on hold immediately and return when the first call is finished
• b.Ask permission before holding, and find out first whether the call is an emergency✓
• c.Take the second call fully first, since the person who called most recently is still waiting for any acknowledgement at all and the first caller has already been greeted and knows help is coming
• d.Let the second call go to voicemail so the first caller is never interrupted at all

The caller is asked whether this is an emergency and whether they can hold, and permission is obtained before the button is pressed, because the one call that must never wait is the one nobody screened. Holds are kept short and the caller is thanked on return. Silence, an unannounced hold and voicemail all risk parking an emergency.

A patient's account is one hundred and twenty days overdue. Where does it appear in the practice's records?

• a.On the day sheet, which lists the charges and payments recorded on a single business day
• b.On the encounter form, which records the services provided at one particular visit
• c.In the accounts receivable ageing report, in the column for the oldest outstanding balances✓
• d.On the patient's clinical chart, alongside the notes from the visit that generated the charge

An ageing report sorts outstanding balances by how long they have been unpaid, commonly in thirty day columns, so the practice can see which accounts need action. A day sheet is a daily log and an encounter form records one visit's services. Financial status is not recorded in the clinical chart, where it has no place.

What is an advance beneficiary notice used for?

• a.To notify the patient's family in advance that the patient is being discharged from the practice
• b.To tell a Medicare patient in advance that a service may not be covered and that they may owe✓
• c.To record in advance which relatives the patient agrees may be told about their care, so that staff can answer a telephone call from any of those people without having to check the record first
• d.To advise the insurer in advance that an unusually expensive service is going to be billed

An advance beneficiary notice is given to a Medicare beneficiary before a service the practice expects Medicare may not cover, so the patient can decide whether to go ahead knowing they may be responsible for the cost. It is signed before the service. It is not a discharge letter, a family authorisation or a notice to the insurer.

What protection do Good Samaritan laws generally provide?

• a.Immunity from any claim arising from care given anywhere, including at the workplace
• b.Limited protection for someone who voluntarily gives emergency aid without expecting payment✓
• c.A guarantee that the person who stops to help will be reimbursed for any supplies or equipment used at the scene, and for any income lost while remaining with the casualty until help arrives
• d.Protection only for licensed physicians, and only when they are on duty at the time

These laws exist to encourage bystanders to help, and they typically protect a volunteer who acts in good faith, within their level of training and without expecting payment. They vary by state, generally do not cover gross negligence and do not apply to care given as part of a job, where the ordinary standard of care applies.

A patient's record must be faxed to a specialist. Which precaution matters most?

• a.Sending it outside office hours so the receiving machine is unlikely to be busy at that time
• b.Sending only the first page and telephoning the rest of the content through afterwards, which keeps the sensitive detail out of any document that could sit in a tray at the other end
• c.Confirming the number, using a cover sheet with a confidentiality notice, and verifying receipt✓
• d.Removing the patient's name so that nobody at the other end can identify the record

Most fax breaches are misdialled numbers and pages left in a tray, so the number is confirmed against a verified entry, a cover sheet identifies the intended recipient and states that the contents are confidential, and receipt is verified. Removing the name makes the record useless to the specialist, and reading a record aloud by telephone is not more secure.

A provider gives a verbal order during a busy clinic. What should the medical assistant do?

• a.Carry it out and rely on the provider to enter the order in the record afterwards
• b.Ask the provider to write it down before anything is done, and decline to act until they do
• c.Carry it out and enter it in the record as though the provider had entered it themselves, which keeps the documentation consistent and saves the provider a step during a busy clinic session
• d.Repeat it back to confirm it, carry it out within scope, and document it for the provider to sign✓

Reading the order back catches the misheard drug, dose or patient before anything happens, and the order is then documented as a verbal order with the time, the provider's name and the assistant's signature, for the provider to authenticate. Acting without a read-back or documenting it as the provider's own entry both remove the check the process exists for.

A message arrives through the patient portal describing worsening symptoms. How should it be handled?

• a.Triage it the same way as a telephone call and escalate urgent content immediately✓
• b.Reply that portal messages are answered within five working days and take no further action
• c.Print it and place it in the provider's paper tray to be seen at the end of the clinic session, since a written message is by its nature less urgent than one the patient made the effort to telephone
• d.Delete it and telephone the patient to ask them to book a routine appointment instead

A portal message is a clinical communication and is screened against the same urgency criteria as a call, because a patient describing new chest pain in writing is in the same danger as one who telephones. Content that cannot wait goes to a clinician now, everything is documented in the record, and no message is deleted.

What does the phrase res ipsa loquitur describe in a malpractice context?

• a.That an expert witness must always testify in person before negligence can be established at trial
• b.That the injury is of a kind that does not happen without negligence, so it speaks for itself✓
• c.That the patient consented to the risk in writing before the procedure took place
• d.That the employer answers for acts an employee committed within the scope of employment

Res ipsa loquitur applies where the harm could not ordinarily occur without negligence and the instrumentality was under the defendant's control, the classic example being an instrument left inside a patient. Respondeat superior is the employer liability doctrine, and consent and expert testimony are separate matters.

A sixteen-year-old asks to be seen without a parent present. What determines whether that is permitted?

• a.The medical assistant's judgement of how mature the patient seems during the intake
• b.The parent's written permission, which is required in every state for a patient under eighteen
• c.State law and practice policy, which allow certain minors or services to be handled directly✓
• d.Whether the patient is able to pay for the visit without using a parent's insurance plan

States define which minors may consent for themselves, such as emancipated minors or those who are married or serving in the military, and which services a minor may seek directly, commonly including sexually transmitted infection testing, contraception and mental health or substance use care. The practice follows its state's rules rather than a judgement made at the desk.

What is the purpose of an encounter form, sometimes called a superbill?

• a.To record the clinical findings and the plan agreed with the patient at the visit
• b.To collect the patient's insurance details and demographic information at registration
• c.To capture the diagnoses and services from one visit so the charge can be generated✓
• d.To document that the patient received and understood the practice's privacy notice, which the practice must be able to demonstrate if it is ever asked to show that the notice was provided

The encounter form links the visit to the codes that will be billed: the diagnoses that explain why the patient was seen and the procedures and services provided. Clinical detail belongs in the progress note, demographics are collected at registration and the privacy notice acknowledgement is a separate document.

A medical assistant recognises a patient in the waiting room as a neighbour. What is the correct behaviour?

• a.Greet the patient normally but do not mention the visit or the reason for it outside work✓
• b.Avoid all eye contact so that nobody in the waiting room can connect the two of them at all
• c.Mention to the patient afterwards, outside work, that they were seen at the clinic, so the neighbour knows the assistant was discreet and did not say anything to anyone else about it
• d.Ask a colleague to take the patient through so that no professional contact takes place

The fact that someone attended is itself protected, so the assistant behaves normally at work and says nothing about the visit outside it, including to the patient in a social setting, which invites a conversation others may overhear. Refusing all contact is conspicuous, and handing the patient to a colleague may be courteous but is not the requirement.