Free NHA CEHRS Practice Test
Answer 100 original questions for NHA’s Certified Electronic Health Records Specialist exam, with an explanation for every option and nothing to sign up for. This is unofficial, untimed practice—not a full-length exam; every patient, record and local policy in the questions is fictional.
Non-Clinical Operations — 28 questions
Question 1 of 100 · Non-Clinical Operations · CEHRS-D1-01
An outside radiology report arrives for “J. Alvarez.” A search returns two records for patients named J. Alvarez. The date of birth printed on the report matches neither record. What should you do next?
A. Change the date of birth in one record so it matches the report.
B. Stop and resolve the identity mismatch through your facility's patient-identification process before attaching anything.
C. Create a third record using the name and date of birth printed on the report.
D. Attach the report to whichever Alvarez record had the most recent visit.
Show answer and explanation
Correct answer: B. A matching name alone does not resolve conflicting identifiers. When a second identifier contradicts the record, the identification has failed and nothing should be filed until it is resolved. D is a guess dressed up as a decision — recency says nothing about whose report this is. A edits an identifier to force a match, corrupting the record and masking the mismatch. C may create a duplicate record without answering the actual question, which is whose report this is.
Review takeaway: Resolve an identity mismatch before you put anything in a chart.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.A.
Work in order or choose a domain: Non-Clinical Operations · Clinical Operations · Revenue Cycle/Finance · Regulatory Compliance · Reporting. Record your first answer before opening the explanation; use the score table when you finish.
Question 2 of 100 · Non-Clinical Operations · CEHRS-D1-02
Your facility requires two patient identifiers before any documentation is entered. Which pair meets that requirement?
A. Full name and date of birth
B. Insurance plan name and group number
C. Attending provider and visit date
D. Room number and admitting diagnosis
Show answer and explanation
Correct answer: A. Use the approved person-specific identifiers together. Full name and date of birth meet the stated requirement; a name can change and still be a patient identifier. D does not identify the person — a room changes during a stay and a diagnosis describes a condition, not a person. B identifies a coverage arrangement, not a patient; a plan can be shared by a whole family and can change mid-year. C identifies an encounter. Many patients can share one provider and one date.
Review takeaway: Use the approved patient identifiers, not the room, diagnosis or appointment.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification. Topic mapping: NHA CEHRS Test Plan — 1.A / 1.K2.
Question 3 of 100 · Non-Clinical Operations · CEHRS-D1-03
You have two charts open: Marcus Webb and Marcus Weber. A provider hands you a note to enter for “Marcus.” What is the correct next step?
A. Enter it in the chart with the earlier appointment time.
B. Enter it in whichever chart is currently in focus on screen.
C. Ask the provider to confirm the full patient name and a second identifier before you enter anything.
D. Enter it in both charts and delete the wrong one afterward.
Show answer and explanation
Correct answer: C. Similar surnames plus multiple open records is a well-recognised setup for wrong-patient entry, and the person who can settle it is the one who saw the patient. C asks them. B treats screen focus as clinical information, which it is not. D deliberately puts a note in a chart where it does not belong, and later removal does not make that wrong-patient entry appropriate. A uses schedule order as an identifier, which it is not.
Review takeaway: When two records could be right, confirm with a second identifier — do not pick.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.A.
Question 4 of 100 · Non-Clinical Operations · CEHRS-D1-04
After you verify her identity, a patient calls to report a new mailing address. Her chart currently lists her former address, her employer, her guarantor, and an allergy to penicillin. Which update is appropriate?
A. Update the mailing address only.
B. Update the mailing address and remove the employer, since she moved.
C. Update the mailing address and the guarantor to match the new address.
D. Update the mailing address and flag the allergy for review.
Show answer and explanation
Correct answer: A. Change what the patient actually reported and nothing else. B and C both invent facts: a move does not tell you she changed jobs, and it does not tell you who is financially responsible for her account. The guarantor is a separate question you would have to ask. D drags a clinical field into an administrative call for no stated reason; a phone call about an address gives you no information about her allergy.
Review takeaway: Update the field the patient reported. Do not infer the neighbouring ones.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification; HL7 FHIR R4: Patient Definitions; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.B.
Question 5 of 100 · Non-Clinical Operations · CEHRS-D1-05
Which item is coverage information rather than demographic information?
A. Marital status
B. Preferred language
C. Subscriber relationship to the patient
D. Home telephone number
Show answer and explanation
Correct answer: C. “Subscriber relationship to the patient” describes how the person is connected to an insurance policy — self, spouse, dependent — so it only exists because coverage exists. A, B and D all describe the person independently of any payer.
Review takeaway: Ask whether the field would still exist if the patient had no insurance.
Answer basis: HL7 FHIR R4: Patient Definitions; HL7 FHIR R4: Coverage Definitions. Topic mapping: NHA CEHRS Test Plan — 1.B / 1.K1.
Question 6 of 100 · Non-Clinical Operations · CEHRS-D1-06
At check-in, a patient presents a new insurance card. His wife is identified as the subscriber, and he is listed as a dependent. Where does his wife's name belong?
A. In the patient-name field, since that is the name on the card
B. In the subscriber field, with the patient recorded as a dependent
C. In the emergency-contact field
D. Nowhere — record only the patient's own name
Show answer and explanation
Correct answer: B. The card identifies the wife as the subscriber and the patient as her dependent. Recording her as subscriber and him as a dependent is exactly what the coverage fields are for. A would overwrite the patient's identity with someone else's — an identity error, not a billing one. C confuses a coverage role with an emergency contact, which are unrelated. D throws away supplied coverage information rather than recording the subscriber relationship.
Review takeaway: Keep the subscriber and the patient in their respective fields.
Answer basis: HL7 FHIR R4: Coverage Definitions; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.B.
Question 7 of 100 · Non-Clinical Operations · CEHRS-D1-07
A fictional registration system generates a face sheet with patient name, date of birth, contact details, encounter number and coverage fields. What is the purpose of this document?
A. To itemise charges for the patient's statement
B. To summarise the patient's identifying, demographic, and coverage information for the encounter
C. To list the medications administered during the stay
D. To record the provider's assessment and plan
Show answer and explanation
Correct answer: B. A face sheet is the front-of-chart summary: who the patient is, how to reach them, and who is paying. C is the medication administration record. D is clinical documentation written by the provider. A describes an itemised billing document, not the registration summary in the stem. All three of those are real documents — they are just not this one.
Review takeaway: The face sheet answers “who is this and who pays,” not “what happened.”
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.C.
Question 8 of 100 · Non-Clinical Operations · CEHRS-D1-08
A wristband and chart labels print automatically when a registration is saved. You realise you saved the registration before finishing identity verification. Facility policy requires securely discarding identification materials printed before verification and reprinting them after verification. What should you do?
A. Keep the labels but write the corrected information on them by hand.
B. Apply the wristband and leave the labels unused.
C. Apply the wristband and verify the identity afterward.
D. Securely discard the printed wristband and labels, complete verification, then reprint.
Show answer and explanation
Correct answer: D. Anything printed from an unverified registration may carry the wrong identifiers, and staff use wristbands and labels in later identification checks. Follow the stated policy: securely discard, verify, reprint. C puts an unverified band on a patient and hopes. A creates a document whose printed and handwritten fields disagree, which is exactly what causes downstream mix-ups. B leaves an unverified wristband in use — the most consequential of the printed items — and solves nothing.
Review takeaway: Under this workflow, securely discard unverified output, complete verification, then reprint.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.C.
Question 9 of 100 · Non-Clinical Operations · CEHRS-D1-09
You need the National Provider Identifier for a referring physician. Your facility maintains verified provider NPIs in its provider database. Which internal source should you use?
A. The facility's provider database
B. The encounter's charge ticket
C. The patient's problem list
D. The patient's coverage record
Show answer and explanation
Correct answer: A. A provider database exists to hold provider attributes — names, specialties, NPIs. A is a direct lookup. D holds payer and policy data about the patient. B may show which provider was involved in one encounter but is not a reliable source for that provider's NPI. C is a clinical list about the patient, not the maintained provider directory specified here.
Review takeaway: Use the maintained provider directory for this provider lookup.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.D / 1.K24.
Question 10 of 100 · Non-Clinical Operations · CEHRS-D1-10
A referral form lists a referring provider's name but no NPI, and the claim requires one. The provider is in your facility's provider database. What is the best action?
A. Submit the claim without the NPI and add it if the payer asks.
B. Use the NPI of the provider the patient saw today.
C. Ask the patient for the provider's NPI.
D. Retrieve the NPI from the provider database and verify it matches the named provider.
Show answer and explanation
Correct answer: D. The data already exists in a maintained internal source, so retrieve it and confirm it belongs to the right person. C asks a patient for an administrative identifier they have no reason to know. A knowingly submits an incomplete claim and creates avoidable rework. B substitutes one provider's identifier for another's, which misstates who made the referral — a documentation problem before it is a billing problem.
Review takeaway: Pull identifiers from the maintained source, then confirm the match.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.D.
Question 11 of 100 · Non-Clinical Operations · CEHRS-D1-11
A result arrives from an outside laboratory through an interface. Before it is filed to the chart, what must be confirmed?
A. That the patient's insurance covers the test
B. That the ordering provider is still employed at your facility
C. That the patient identifiers on the result match the intended chart
D. That the result value falls within the reference range
Show answer and explanation
Correct answer: C. The question tests identity matching: this result must belong to the intended patient before it is filed. B is an administrative matter that does not change where the result belongs. D is a clinical interpretation and is not the records specialist's call — abnormal results still get filed. A is a coverage question with its own workflow; it does not resolve whose result this is.
Review takeaway: Before filing anything, confirm whose record it belongs in.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification; ASTP/ONC SAFER Guide: Test Results Reporting and Follow-Up; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.E.
Question 12 of 100 · Non-Clinical Operations · CEHRS-D1-12
Which is an external source of patient data as the CEHRS test plan uses the term?
A. A diagnostic laboratory outside your organisation
B. The practice management system used by your billing office
C. The facility's scanning workstation
D. The facility's own provider database
Show answer and explanation
Correct answer: A. External means outside your organisation. An outside diagnostic laboratory is a different entity, which is why acquiring its data raises transmission and identity-matching questions. B and D are internal systems, even though they are separate applications. C is a device used to capture documents; a document it scans may itself have an outside source.
Review takeaway: External is about organisational boundaries, not about which application it is.
Answer basis: Original application of the task described in the test plan. Topic mapping: NHA CEHRS Test Plan — 1.E / 1.K4.
Question 13 of 100 · Non-Clinical Operations · CEHRS-D1-13
Your facility's rule is that scanned documents must be imported complete. A scanned consent form shows “Page 2 of 3” on its last page. The source office can supply the missing page. What should you do?
A. Obtain and scan the missing page, then import the complete document.
B. Import the two pages and ask the patient to sign a new form.
C. Import the two pages and mark the document complete.
D. Import the two pages and note in the chart that a page is missing.
Show answer and explanation
Correct answer: A. The document itself tells you a page is missing, and the stated rule requires complete imports — so complete it. C records a false status that later readers will rely on. D is more honest than C but still files a known-incomplete consent when the fix is available. B asks the patient to redo something they already did, and does not recover the missing page, which may contain terms the original signature covered.
Review takeaway: When the document says a page is missing, get the page.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.F.
Question 14 of 100 · Non-Clinical Operations · CEHRS-D1-14
An e-signature pad fails while a patient signs a consent, and no signature is captured. The patient is still at the desk. Facility policy requires the patient to sign this form on a working signature pad or on paper; staff may not substitute a typed name. What is the appropriate action?
A. Mark the consent as signed and correct it at the next visit.
B. Copy the patient's signature image from a consent she signed last year.
C. Type the patient's name into the signature field and note that the pad failed.
D. Ask the patient to sign again on a working device or on paper for scanning.
Show answer and explanation
Correct answer: D. The patient is right there, so capture a real signature. B reuses a signature the patient gave for a different document on a different date, which misrepresents what she agreed to now. C uses a method the stated consent workflow does not permit. A records a consent as captured when no signature was captured — a false entry in the record, and one that may matter if the consent is ever examined.
Review takeaway: Capture the signature through the approved process for this document.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.F.
Question 15 of 100 · Non-Clinical Operations · CEHRS-D1-15
Your hardware inventory lists model, serial number, assigned location, and assigned user for every device. Three tablets were retired last quarter but still appear as assigned. Facility policy requires retaining the device history after retirement. What does the inventory need?
A. A disposition field recording that the devices were retired and how they were handled
B. A duplicate entry for each retired device
C. Removal of the three rows from the inventory
D. A note in the assigned-user field saying “gone”
Show answer and explanation
Correct answer: A. Retired devices can hold stored data, so an inventory has to show what happened to them rather than just stop mentioning them. A adds the field that answers the question. B multiplies rows without recording anything new. C deletes the very history someone would need to confirm the devices were handled properly. D buries a status in a field meant for a person's name, rather than recording retirement in the designated status information.
Review takeaway: An inventory has to say what happened to a device, not just where it used to be.
Answer basis: 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.G / 1.K8.
Question 16 of 100 · Non-Clinical Operations · CEHRS-D1-16
Dr. Osei sees patients in 30-minute slots from 9:00 to 11:00. Today she has appointments booked 9:00–9:30 and 10:00–10:30, and slots may not overlap. A patient needs the earliest available 30-minute appointment. Which slot do you book?
A. 9:00
B. 9:30
C. 10:00
D. 10:30
Show answer and explanation
Correct answer: B. Lay the booked time against the available time. Between 9:00 and 11:00 there are four 30-minute slots: 9:00, 9:30, 10:00, 10:30. The 9:00 and 10:00 slots are taken, leaving 9:30 and 10:30 open. The earliest of those is 9:30. A and C are already booked and the no-overlap rule rules them out. D is open but later.
Review takeaway: Work the schedule against the stated rule instead of eyeballing the gaps.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.H.
Question 17 of 100 · Non-Clinical Operations · CEHRS-D1-17
At a clinic that verifies registration details at check-in and books new follow-up orders at check-out, which task belongs to check-out?
A. Verifying the patient's identity
B. Confirming current insurance coverage
C. Scheduling the follow-up visit the provider ordered
D. Collecting the patient's updated address
Show answer and explanation
Correct answer: C. Check-out handles what the visit produced, and a follow-up ordered during the encounter is one of those things. In this clinic's workflow, A, B and D are registration checks: identity so documentation lands in the right chart, coverage so the encounter can be billed, and contact details so results and statements reach the patient.
Review takeaway: Check-in prepares the encounter; check-out handles what it produced.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.H / 1.K11.
Question 18 of 100 · Non-Clinical Operations · CEHRS-D1-18
A provider orders a referral to cardiology and asks you to coordinate it. Your assigned role is non-clinical referral coordination, not clinical assessment or referral selection. Which action is within that role?
A. Deciding whether the referral is medically necessary
B. Advising the patient on what the cardiologist will likely recommend
C. Selecting which cardiologist is clinically most appropriate
D. Entering the referral, attaching the required records, and tracking that it was received
Show answer and explanation
Correct answer: D. Coordinating means moving the referral through the system reliably — entering it, attaching what the receiving office needs, confirming it arrived. A, B and C are all clinical judgements that belong to the ordering provider. Predicting another clinician's recommendation to a patient is not part of this non-clinical coordination task.
Review takeaway: Coordinate the referral; do not make the clinical decisions inside it.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.H.
Question 19 of 100 · Non-Clinical Operations · CEHRS-D1-19
You are running a routine EHR lesson for three new registration clerks. The facility provides a separate training environment populated with fictional records for this lesson. Which environment should the lesson use?
A. The designated training environment, using its fictional records
B. The live production system, using the trainer's own chart
C. Any environment, provided the trainees do not save their entries
D. The live production system, using a current patient's chart
Show answer and explanation
Correct answer: A. A training environment exists precisely so practice entries cannot reach a real chart, and its records are fictional, so no one's privacy is at stake. D uses a real patient's record as a teaching aid and risks practice data landing in it. B is still a real chart in the live system rather than the designated environment for this lesson. C relies on trainees remembering not to save, which is not a control — and in the live system an unsaved action can still leave an access-log entry.
Review takeaway: Practice belongs in the environment built for practice.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.I.
Question 20 of 100 · Non-Clinical Operations · CEHRS-D1-20
Why does a facility document which staff completed EHR training and when?
A. To determine each employee's pay grade
B. To decide which staff may view protected health information without restriction
C. To satisfy the requirement that all staff receive identical training
D. To show who needs training, that it was delivered, and when it was completed
Show answer and explanation
Correct answer: D. Training documentation answers three questions — who needs it, who got it, and how recently. A completion record does not, by itself, prove competency. A is unrelated to training records. B confuses training with authorisation: completing training does not grant unrestricted access, which is set by role-based privileges. C confuses documenting completion with requiring identical training; the training must fit the staff member's responsibilities.
Review takeaway: Training records document completion, not unrestricted access or proof of competence.
Answer basis: HHS: Summary of the HIPAA Security Rule. Topic mapping: NHA CEHRS Test Plan — 1.I / 1.K16.
Question 21 of 100 · Non-Clinical Operations · CEHRS-D1-21
An upgrade moves the allergy-entry button to a different screen. Registration staff do not enter allergies, but clinical staff do. What is the most useful way to share this?
A. Send the full vendor release notes to every employee
B. Tell the clinical staff who use that screen what changed and where the button now is
C. Wait for staff to find the change and ask
D. Post a printed notice at the reception desk
Show answer and explanation
Correct answer: B. Useful communication reaches the people whose work actually changes and tells them the specific thing they need. B does both. A does not highlight the specific workflow change for the people who need it. C leaves those staff to discover the change while using the system. D does not directly reach the clinical staff who use the affected screen.
Review takeaway: Tell the people the change affects, and tell them the specific change.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.J.
Question 22 of 100 · Non-Clinical Operations · CEHRS-D1-22
A patient's record in the practice management system lists the policy number as GHX-4471. The same patient's record in the EHR lists GHX-4417. Everything else matches. What have you found?
A. A duplicate medical record
B. A data discrepancy between two systems for one patient
C. An expired insurance policy
D. Two patients with similar policy numbers
Show answer and explanation
Correct answer: B. One patient, one identity, two systems that disagree about a single field — that is a discrepancy, and naming it correctly determines what you do next. D mistakes disagreement in a field for evidence of two people. A would require evidence of duplicate records for the person, not merely different values in two connected systems. C adds a fact the stem does not supply; nothing here says the policy ended.
Review takeaway: Name the problem correctly — discrepancy, duplicate and overlay each get a different fix.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.K.
Question 23 of 100 · Non-Clinical Operations · CEHRS-D1-23
Your MRN specification requires seven characters, including leading zeros. An export file shows MRN 45829 for a patient whose MRN is 0045829. What has happened?
A. The export truncated the end of the MRN.
B. The MRN was assigned incorrectly at registration.
C. The export dropped the leading zeros, so the value no longer matches the specification.
D. The patient has two MRNs.
Show answer and explanation
Correct answer: C. Compare the two strings. 0045829 and 45829 are the same digits with two zeros missing from the front — a formatting loss that can occur when an identifier is handled as a number rather than as text. B blames registration for something that happened during export. D invents a second MRN the stem does not describe. A is the right idea in the wrong place: the end of the value is intact; the front is not.
Review takeaway: Preserve the identifier exactly, including any required leading zeros.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.K23.
Question 24 of 100 · Non-Clinical Operations · CEHRS-D1-24
You confirm that a patient's address differs between two systems. Facility policy routes all cross-system data discrepancies to the data-integrity team. What should you do?
A. Leave both records unchanged and take no further action.
B. Correct whichever record looks wrong to you.
C. Report the discrepancy through the data-integrity process with both values and their sources.
D. Correct both records to the address the patient gave you last week.
Show answer and explanation
Correct answer: C. The policy in the stem is the answer: report it with enough detail that someone can resolve it. B and D both edit systems outside the defined process; D is more tempting because you do have a plausible correct value, but manual changes outside that process may not address which source is authoritative or how the next interface run handles the values. A leaves a known discrepancy in place, which is how statements and results end up at the wrong address.
Review takeaway: Report through the process that reconciles the values and their sources.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.L.
Question 25 of 100 · Non-Clinical Operations · CEHRS-D1-25
Two records exist for the same verified person within one organisation, each with its own MRN. What is this called?
A. An overlay
B. A duplicate record
C. A merge conflict
D. An external mismatch
Show answer and explanation
Correct answer: B. One person, two records, two MRNs is a duplicate. The distinction matters because the remedy differs. An overlay is the opposite failure — one record holding data from two different people, which can expose a clinician to information belonging to the wrong patient. C describes a step that may happen during the fix, not the condition itself. D is not a defined term for this situation.
Review takeaway: Duplicate: one person split across records. Overlay: two people sharing one.
Answer basis: ASTP/ONC SAFER Guide: Patient Identification. Topic mapping: NHA CEHRS Test Plan — 1.L / 1.K3.
Question 26 of 100 · Non-Clinical Operations · CEHRS-D1-26
Someone calls and says she cannot get into her mother's patient portal account. She does not know her mother's date of birth or MRN. What should you do?
A. Confirm the caller's identity and her authority to access that account using the approved process before taking any action.
B. Read the mother's recent results aloud so the caller does not need the portal.
C. Add the caller as a proxy on the account so she can sign in.
D. Reset the account password and read the new one to the caller.
Show answer and explanation
Correct answer: A. You have not verified who this caller is or whether she is authorised, and every other option acts as if you had. D hands account control to an unverified person. B discloses records over the phone without establishing identity and authority. C grants standing access based on nothing but a claimed relationship; proxy access must follow the applicable authority and account-access process, and a claimed family relationship alone does not establish access to an adult's portal.
Review takeaway: Verify identity and authority first. Everything else waits.
Answer basis: HHS: Personal Representatives; 45 CFR Part 164: Authorisations and Verification; ASTP/ONC SAFER Guide: Clinician Communication; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.M.
Question 27 of 100 · Non-Clinical Operations · CEHRS-D1-27
A father asks for portal access to his 8-year-old son's record. Your facility has a documented proxy-access process for parents of minors. What is the correct action?
A. Process the request through the proxy-access workflow, including the required identity and authority checks.
B. Decline, because portal accounts are only for patients.
C. Create a new patient account for the father and link the records.
D. Give him the son's own portal credentials.
Show answer and explanation
Correct answer: A. The facility has a process for exactly this, so use it — and the checks inside it are the point, not paperwork around it. D shares another person's credentials, which breaks the link between a login and the individual using it and undermines reliable attribution in the audit log. B states a rule the stem contradicts. C confuses two different accounts; the father's own patient record has nothing to do with his son's.
Review takeaway: Proxy access is granted through a documented process, never by sharing credentials.
Answer basis: HHS: Personal Representatives; 45 CFR Part 164: Security Rule; ASTP/ONC SAFER Guide: Clinician Communication; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.M.
Question 28 of 100 · Non-Clinical Operations · CEHRS-D1-28
A verified patient calls about the portal. Which request falls within an EHR specialist's portal-support role?
A. Recommending whether she should worry about an abnormal value
B. Showing her where results appear and how to navigate to them
C. Deciding which results she is allowed to see
D. Explaining what her lab result means
Show answer and explanation
Correct answer: B. Portal support is help with the tool: getting in, finding things, understanding what the screens do. B is that. A and D are clinical interpretation, and the fact that the patient is asking you rather than her clinician does not transfer the authority to answer. C describes release rules set by policy and law, not something decided during a support call.
Review takeaway: Help with the portal. Route questions about the content to the clinician.
Answer basis: ASTP/ONC SAFER Guide: Clinician Communication; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 1.M / 1.K25.
Clinical Operations — 32 questions
Question 29 of 100 · Clinical Operations · CEHRS-D2-01
What is the main purpose of a clinical template in an EHR?
A. To lock the record so it cannot be edited
B. To capture the data elements a particular kind of visit routinely needs
C. To store the practice's billing rules
D. To replace the provider's clinical judgement about what to document
Show answer and explanation
Correct answer: B. A template is a structured prompt: for this diagnosis, procedure or visit type, here are the fields that should be filled in. Templates can be built around a diagnosis, procedure or other encounter type. C describes charge rules, which live in the billing configuration. D inverts the relationship — a template prompts, it does not decide. A describes record locking, a separate control.
Review takeaway: A template prompts for the right fields; it does not do the thinking.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3. Topic mapping: NHA CEHRS Test Plan — 2.A / 2.K3.
Question 30 of 100 · Clinical Operations · CEHRS-D2-02
A signed Medicare encounter note contains the template default “lungs clear to auscultation.” The provider's source note for that visit records no lung examination. What should you do?
A. Delete the prefilled text and enter a normal finding instead.
B. Flag the discrepancy for the provider to correct through the amendment process.
C. Change the template so it stops prefilling that field.
D. Leave the prefilled text, since it is the template default.
Show answer and explanation
Correct answer: B. The signed note contains a finding unsupported by the source note. Route the discrepancy to the provider for clarification and correction as needed. D leaves the unsupported finding unresolved. A is worse than it looks — “enter a normal finding” is still you documenting an examination you did not perform and did not witness. C might be a sensible longer-term fix, but it does not address the note that is already wrong.
Review takeaway: A default finding is not evidence that an examination occurred. Query the discrepancy.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.A / 2.C.
Question 31 of 100 · Clinical Operations · CEHRS-D2-03
A diabetes follow-up template is being built. The clinic wants every such visit to capture the foot examination. What is the right way to make that happen?
A. Add a reminder to the clinic's monthly newsletter.
B. Prefill the foot examination as completed and let providers uncheck it.
C. Add a free-text box labelled “anything else.”
D. Add a foot-examination field to the diabetes follow-up template.
Show answer and explanation
Correct answer: D. If a data element should be captured at every visit of a type, it belongs in that visit type's template as its own field. D does that. A relies on memory instead of structure. B is the dangerous one: defaulting a clinical finding to “done” means an examination that was skipped still appears in the record as completed. C provides no dedicated field for this required element; a free-text box does not organise the response the way the clinic requested.
Review takeaway: If it must be captured every time, give it a field — and never default it to done.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.A.
Question 32 of 100 · Clinical Operations · CEHRS-D2-04
A verified specialist's office requests records for a shared patient's upcoming appointment. Your facility has an approved secure transmission method for external providers. Which action is correct?
A. Send the records by unencrypted email, since the recipient is a provider.
B. Send the approved records through the approved secure method to the verified recipient.
C. Post the records to the patient portal and tell the specialist to ask the patient.
D. Fax the records to the number printed on the request without confirming it.
Show answer and explanation
Correct answer: B. Two questions have to be answered before anything moves: is this recipient permitted to receive it, and is the route approved. B answers both. A treats “the recipient is a provider” as if it settled the transmission question — it does not; permission and protection are separate. C does not carry out the approved provider-to-provider transmission requested here. D sends PHI to an unconfirmed number, which is a routine cause of misdirected disclosures.
Review takeaway: Permission and protection are two separate checks. Do both.
Answer basis: HHS: Summary of the HIPAA Security Rule; 45 CFR Part 164: Authorisations and Verification; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.B.
Question 33 of 100 · Clinical Operations · CEHRS-D2-05
A laboratory result lands in the inbox of a provider who did not order it. Your facility's routing workflow requires forwarding it to the ordering provider, confirming that provider has accepted responsibility, and documenting the handoff. What completes this routing task?
A. Forwarding it to the ordering provider, confirming acceptance of responsibility, and documenting the handoff.
B. Deleting it from the wrong inbox.
C. Printing it and leaving it in the ordering provider's mailbox.
D. Marking the result as read.
Show answer and explanation
Correct answer: A. This routing task is complete when responsibility is accepted and the handoff is documented. A does both, as the stated workflow requires; clinical review and any needed follow-up remain separate tasks. D clears the notification while leaving the ordering provider unaware the result exists. B removes it from view without delivering it anywhere. C moves paper but creates no record and no confirmation of receipt.
Review takeaway: Confirm responsibility and document the handoff. Marking something read is neither.
Answer basis: ASTP/ONC SAFER Guide: Test Results Reporting and Follow-Up; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.B.
Question 34 of 100 · Clinical Operations · CEHRS-D2-06
A colleague says a disclosure is fine because the file was encrypted. What is wrong with that reasoning?
A. Encryption protects data in transit or at rest; it does not establish that the recipient was permitted to receive it.
B. Encryption makes data impossible to read, so it cannot be disclosed.
C. Encryption applies only to email.
D. Encryption is never required for health data.
Show answer and explanation
Correct answer: A. Encryption answers “could someone else intercept this,” not “should this person have it.” A well-encrypted file sent to the wrong recipient is still a disclosure to the wrong recipient. D misstates the safeguard's role. B is false — the authorised recipient decrypts and reads it, which is the entire point. C is too narrow; encryption applies to stored data and to many transmission methods.
Review takeaway: Encryption protects data. It does not authorise the recipient.
Answer basis: HHS: Summary of the HIPAA Security Rule. Topic mapping: NHA CEHRS Test Plan — 2.B / 2.K6.
Question 35 of 100 · Clinical Operations · CEHRS-D2-07
A provider asks you to send a new prescription electronically to the patient's pharmacy. Your role authorises technical transmission support, not prescribing or changing orders. What is the EHR specialist's part?
A. Confirming the pharmacy on file is correct and supporting transmission of the order the provider entered
B. Changing the quantity to match what the patient's plan covers
C. Approving the prescription so it can be sent
D. Selecting the medication and dose
Show answer and explanation
Correct answer: A. The support role is to make sure the order the provider entered reaches the right destination intact — which includes checking that the pharmacy on file is the one the patient wants. B, C and D are all prescribing decisions. Adjusting a quantity changes the prescription; a coverage problem must go through the authorised clinical workflow, not a silent edit during transmission.
Review takeaway: Support the transmission. Do not edit the order.
Answer basis: AHRQ PSNet: Computerized Provider Order Entry; ASTP/ONC SAFER Guide: CPOE with Decision Support; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.B.
Question 36 of 100 · Clinical Operations · CEHRS-D2-08
Reviewing yesterday's signed notes, you find one encounter whose assessment reads “left knee effusion” while its plan reads “right knee aspiration.” What should you do?
A. Flag the discrepancy and route it to the authoring provider for clarification.
B. Leave it, since the procedure code will show which side was treated.
C. Correct the plan to “left” so the note is internally consistent.
D. Delete the note and ask the provider to document the encounter again.
Show answer and explanation
Correct answer: A. A directional contradiction needs clarification from the responsible provider, not a guess by the person reviewing the note. C produces a consistent note that may now be confidently wrong, and it is you, not the author, asserting which knee. D discards the signed note instead of routing the discrepancy through the correction process. B reverses the relationship between documentation and coding — the code is supposed to follow the note, and this note supports neither side.
Review takeaway: Left-right contradictions go back to the author, not to whoever spots them.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.C / 2.K9.
Question 37 of 100 · Clinical Operations · CEHRS-D2-09
A provider needs to correct a Medicare encounter note from last week. Which version is acceptable under Medicare documentation policy?
A. An amendment that is clearly identified as an amendment, shows its actual date, and identifies its author
B. An unlabelled edit made directly in the original note
C. A correction entered under a supervisor's login for speed
D. A replacement note dated last week, with the original discarded
Show answer and explanation
Correct answer: A. Medicare expects corrections, amendments and delayed entries to be clearly and permanently identified as such, with the actual date and the author. A is exactly that. D backdates the correction and destroys the original. B changes the record with no indication anything changed, which is indistinguishable from alteration. C attributes the entry to someone who did not make it, breaking the author link the record depends on.
Review takeaway: Amend visibly: labelled as an amendment, real date, real author.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.C.
Question 38 of 100 · Clinical Operations · CEHRS-D2-10
In a SOAP note, where does the patient's reported symptom duration belong?
A. Objective
B. Assessment
C. Plan
D. Subjective
Show answer and explanation
Correct answer: D. Subjective is what the patient reports — symptoms, history, how long it has been going on. Objective is what the clinician measures or observes: vitals, examination findings, results. Assessment is the clinician's conclusion. Plan is what happens next. “Three days” comes from the patient, so it is subjective, even though it is a precise-sounding number.
Review takeaway: Subjective is what the patient reports; objective is what is observed or measured.
Answer basis: Podder, Lew and Ghassemzadeh: SOAP Notes. Topic mapping: NHA CEHRS Test Plan — 2.C / 2.K11.
Question 39 of 100 · Clinical Operations · CEHRS-D2-11
A clinic's training guide contrasts two layouts: a problem-oriented record groups entries under each identified patient problem; a source-oriented record groups entries by the department or discipline that produced them. Which feature distinguishes the problem-oriented layout?
A. It contains only billing-relevant information
B. It is written exclusively by physicians
C. It is stored electronically rather than on paper
D. It organises documentation around the patient's identified problems
Show answer and explanation
Correct answer: D. The organising principle is the problem list — documentation is grouped by problem rather than by which department produced it, which is how a source-oriented record is arranged. C confuses a format with a medium; both formats exist on paper and on screen. A describes a billing extract. B is false, since many disciplines document in a POMR.
Review takeaway: POMR organises by problem; source-oriented organises by who wrote it.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.C / 2.K11.
Question 40 of 100 · Clinical Operations · CEHRS-D2-12
A note copied forward from a prior visit still lists a wound dressing that was discontinued two visits ago. What kind of documentation problem is this?
A. A transcription error
B. A coding error
C. A duplicate medical record
D. Carried-forward content that no longer reflects the current encounter
Show answer and explanation
Correct answer: D. Naming it correctly points at the fix. This is stale content carried into a new note, and the remedy is to have the author correct the current note through the applicable documentation process. C is a record-identity problem, not a content problem. A describes something being written down wrongly; this was written correctly at the time and has simply gone out of date. B would concern the codes assigned, not the narrative.
Review takeaway: Copy-forward content that stopped being true is a documentation-accuracy problem.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.C / 2.K9.
Question 41 of 100 · Clinical Operations · CEHRS-D2-13
A provider doing at-the-elbow documentation asks, “Where do I put the tetanus booster I just gave?” You are assigned to software-navigation support and are not authorised to enter clinical documentation in this session. What is the appropriate response?
A. Enter the immunisation yourself so the provider can move on.
B. Show the provider where the immunisation record is and let them enter it.
C. Tell the provider to document it in the visit note instead.
D. Record it on paper and enter it at the end of the day.
Show answer and explanation
Correct answer: B. In this session you are authorised to show the clinician where to document, not to enter the documentation yourself. B does that. A exceeds the stated assignment; authorised documentation assistance is a different workflow. C bypasses the designated immunisation record. D introduces a delay and a second transcription step for no reason.
Review takeaway: Show them where it goes. Stay within the documentation role you have been assigned.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.D.
Question 42 of 100 · Clinical Operations · CEHRS-D2-14
You are providing remote screen-share support to a provider whose chart is open. What should happen before the session begins?
A. Record the session and store it on your desktop for reference.
B. Nothing — remote support is exempt from privacy requirements.
C. Confirm the session uses the facility's approved remote-support method and limit the view to what the problem requires.
D. Ask the provider to email you screenshots of the chart instead.
Show answer and explanation
Correct answer: C. Screen sharing can expose PHI. Whether it is an internal use or an external disclosure, use the approved route and limit the view to what the support task requires. C does both. B states an exemption that does not exist. D substitutes email without establishing that it is an approved route for this support request. A creates a new, unmanaged copy of PHI on a local machine — a recording of a chart is still a record of a chart.
Review takeaway: Remote support shows real PHI. Approved route, narrowest view.
Answer basis: HHS: Summary of the HIPAA Security Rule; HHS: Summary of the HIPAA Privacy Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.D.
Question 43 of 100 · Clinical Operations · CEHRS-D2-15
What does point-of-care EHR support mean?
A. Auditing notes after the encounter is closed
B. Helping clinicians use the EHR while they are documenting care
C. Independently inventing clinical findings to complete the clinician's note
D. Making clinical decisions when the provider is unavailable
Show answer and explanation
Correct answer: B. Point of care means at the moment and place care is being documented, and the support is with the software. C fabricates clinical findings; neither documentation assistance nor software support authorises that. D is outside the role entirely. A is a real and useful activity — it is just retrospective review, which happens after the encounter rather than during it.
Review takeaway: Point-of-care support is help with the tool, in the moment.
Answer basis: Original application of the task described in the test plan. Topic mapping: NHA CEHRS Test Plan — 2.D.
Question 44 of 100 · Clinical Operations · CEHRS-D2-16
A device interface imports a weight as “72” with no unit in the field, label or metadata. The source record shows “72 kg.” What is the correct action?
A. Report the missing unit through the interface-issue process and have the value corrected to include it.
B. Convert the value to pounds and enter it manually.
C. Delete the imported value and leave the field blank.
D. Accept the imported value, since the number matches.
Show answer and explanation
Correct answer: A. A weight needs its unit to be interpreted correctly, and 72 kg is not the same measurement as 72 lb. A fixes the record and reports the interface fault so the next import does not repeat it. D accepts an ambiguous value into a field other systems will read. B introduces a conversion nobody asked for and a second chance to be wrong. C removes a value that was correctly measured, leaving a gap where data exists.
Review takeaway: Carry the unit with the measurement and report an interface that loses it.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.E.
Question 45 of 100 · Clinical Operations · CEHRS-D2-17
Which of these is clinical data entered during a patient visit rather than administrative data collected at registration?
A. The patient's preferred pharmacy
B. The patient's employer
C. The patient's guarantor
D. The patient's blood pressure reading taken at this visit
Show answer and explanation
Correct answer: D. A blood pressure is measured during the encounter and describes the patient's condition, which makes it clinical. B and C are administrative: employer and guarantor exist to support billing and contact. A looks clinical because it involves medicines, but a preferred pharmacy is a routing preference stored on the patient's profile, not a finding from the visit.
Review takeaway: Distinguish a clinical finding from administrative or routing information.
Answer basis: HL7 FHIR R4: Patient Definitions; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.E / 2.K13.
Question 46 of 100 · Clinical Operations · CEHRS-D2-18
You are authorised to transcribe real-time vitals a nurse is calling out. You type 168 for a systolic reading in mmHg and the nurse says the value was 148. This screen has no autosave, and you have not yet saved. What should you do?
A. Correct the entry to 148 before saving.
B. Save 168 and enter an amendment afterward.
C. Save 168 and tell the nurse to correct it later.
D. Save both values so the record shows the discrepancy.
Show answer and explanation
Correct answer: A. Nothing has been committed to the record yet, so the straightforward fix is to type the right number. A does that. B and C both save a value known to be wrong and then rely on a correction that may not happen — and in the meantime the chart shows a reading nobody measured. D stores two contradictory readings for one measurement, which leaves every later reader guessing.
Review takeaway: Fix it before you save. Amendments are for entries already committed.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.E.
Question 47 of 100 · Clinical Operations · CEHRS-D2-19
An entry field accepts a temperature of 986 degrees Fahrenheit without warning. You suspect a missing decimal point. What is the appropriate action?
A. Leave the value as entered, since the system accepted it.
B. Delete the temperature from the record.
C. Change the value to 98.6 on your own judgement.
D. Query the source and have the value confirmed and corrected by the person who recorded it.
Show answer and explanation
Correct answer: D. A missing decimal is one possible explanation, but it has not been verified. Confirm with whoever took it. C substitutes an assumption for a verified observation. A treats system acceptance as validation, which it is not; the field simply lacked a range check. B destroys a recorded observation instead of correcting it.
Review takeaway: Obvious does not mean verified. Query the source.
Answer basis: ASTP/ONC SAFER Guide: System Management; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.E.
Question 48 of 100 · Clinical Operations · CEHRS-D2-20
At intake a patient reports a new sulfa allergy. Her chart's existing history records “no known drug allergies.” Your facility's workflow requires recording the patient's report with its unverified status, promptly alerting the clinician, and routing the conflict for reconciliation. What should you do?
A. Delete the “no known drug allergies” entry and add the sulfa allergy.
B. Record the newly reported allergy as unverified, promptly alert the clinician, and route the conflict for reconciliation.
C. Leave the record unchanged until the provider notices.
D. Decide which entry is more likely correct and keep that one.
Show answer and explanation
Correct answer: B. Allergy information can affect prescribing and decision support, so follow the stated workflow to make the report visible and get the conflict reconciled by a clinician. B does both. A erases the earlier entry, losing the history that a clinician may need. C keeps a safety-relevant report out of the chart. D asks a non-clinical role to adjudicate a clinical conflict.
Review takeaway: Record the report, route the conflict. Do not adjudicate allergies.
Answer basis: ASTP/ONC SAFER Guide: CPOE with Decision Support; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.F.
Question 49 of 100 · Clinical Operations · CEHRS-D2-21
Which belongs in the patient's historic clinical data rather than the current encounter?
A. The medication administration recorded for this visit
B. Today's blood pressure
C. An appendectomy in 2019
D. Today's chief complaint
Show answer and explanation
Correct answer: C. Historic clinical data is what the patient brings with them — past surgeries, immunisations, prior medications, allergies. A 2019 appendectomy is that. A, B and D all arise from today's visit. D is worth a second look: a chief complaint may describe a long-standing symptom, but it is recorded as the reason for this encounter, which makes it current-encounter data.
Review takeaway: Historic data predates the visit; encounter data is produced by it.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.F / 2.K15.
Question 50 of 100 · Clinical Operations · CEHRS-D2-22
A patient brings a printed immunisation record from a clinic in another state. Your facility records outside immunisations with their documented dates and source. What should be documented when the immunisations are entered?
A. Nothing, because immunisations given elsewhere cannot be recorded
B. Only the vaccine names
C. The vaccines, their dates, and that the information came from an outside record the patient provided
D. The vaccines, with today's date as the administration date
Show answer and explanation
Correct answer: C. Whoever reads this later needs to know what was given, when, and how sure anyone is about it — so record the source. B drops the dates, which determine whether a series is complete or a booster is due. D replaces the documented administration dates with today's date, misrepresenting when the vaccinations occurred. A refuses useful information the patient supplied.
Review takeaway: Outside history gets recorded with its dates and its provenance.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.F.
Question 51 of 100 · Clinical Operations · CEHRS-D2-23
A patient reports a gallbladder removal but cannot recall the year, saying only “sometime in my thirties.” How should this be recorded?
A. Leave the surgical history blank.
B. Record it with today's date.
C. Estimate a year and enter it so the field is complete.
D. Record the procedure as reported, with the patient's description of timing, and note that the date is unknown.
Show answer and explanation
Correct answer: D. Record what you were told and be honest about what is not known. D keeps the clinically useful fact — she reports gallbladder removal — without inventing precision. C manufactures a date that will look authoritative to every later reader. A throws away a relevant surgical history because one field is incomplete. B asserts a surgery today, which is plainly false.
Review takeaway: Unknown is a legitimate value. Invented precision is not.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.F.
Question 52 of 100 · Clinical Operations · CEHRS-D2-24
A CPOE order is submitted with the route field blank, and the system flags it as incomplete. The EHR specialist is not authorised to choose a route or complete a prescribing decision. What should the specialist do?
A. Select the most common route for that medication.
B. Return the incomplete order to the ordering provider for completion.
C. Cancel the order and ask the patient which route they prefer.
D. Complete the field using the route from the patient's last prescription.
Show answer and explanation
Correct answer: B. A blank route is a gap in a prescriber's order that must be completed through the authorised prescribing workflow. B returns it. A and D both complete a medication order using a guess — D is the more seductive one because it has a source, but last month's route is not this order's route, and a change may be exactly why the order was written. C asks the patient to supply a clinical decision.
Review takeaway: An incomplete order goes back to the prescriber, not to a best guess.
Answer basis: ASTP/ONC SAFER Guide: CPOE with Decision Support; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.G.
Question 53 of 100 · Clinical Operations · CEHRS-D2-25
While you help a prescriber navigate CPOE, a decision-support alert fires about a possible interaction. The prescriber has stepped away. What should you do?
A. Override the alert and add a note that the prescriber was absent.
B. Submit the order and tell the prescriber about the alert later.
C. Dismiss the alert so the order can be submitted.
D. Leave the alert for the prescriber to address and do not submit the order.
Show answer and explanation
Correct answer: D. An interaction alert calls for a clinical judgement that must be made by an authorised clinician, not the person providing navigation support. D waits. C dismisses a safety alert with no clinical basis. A is C with paperwork attached — documenting an unauthorised override does not make it authorised. B submits a flagged order and notifies afterward, which reverses the sequence the alert exists to enforce.
Review takeaway: Clinical alerts need a clinical decision-maker. Helping navigate is not deciding.
Answer basis: ASTP/ONC SAFER Guide: CPOE with Decision Support; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.G / 2.K12.
Question 54 of 100 · Clinical Operations · CEHRS-D2-26
What does computerized provider order entry refer to?
A. The billing department entering charge codes
B. Patients requesting services through the portal
C. Any staff member entering any data into the EHR
D. Authorised providers entering care orders directly into the system
Show answer and explanation
Correct answer: D. CPOE lets authorised clinicians enter care orders electronically for transmission to the relevant service. It can reduce transcription errors and make decision support available while ordering; it does not eliminate all errors. C is too broad and misses the authorisation element. A is charge capture. B is a patient request, which is not an order.
Review takeaway: CPOE is electronic entry of care orders, not just any data entry into an EHR.
Answer basis: AHRQ PSNet: Computerized Provider Order Entry. Topic mapping: NHA CEHRS Test Plan — 2.G / 2.K16.
Question 55 of 100 · Clinical Operations · CEHRS-D2-27
A physician calls from another floor and asks you to enter a medication order for her under your login so it goes in faster. Your role is not authorised to accept or transcribe telephone medication orders. What should you do?
A. Enter the order as asked and note that she requested it.
B. Decline, and direct her to the facility's authorised process for entering orders.
C. Enter the order under her login, which she offers to share.
D. Enter the order and ask a colleague to witness.
Show answer and explanation
Correct answer: B. A phone request does not expand the authority of the role described in the stem. B redirects her to whatever route the facility actually authorises for remote ordering. A accepts an order-entry task your role is not authorised to perform. C adds credential sharing on top, which destroys the audit trail's ability to show who did what. D adds a witness to an unauthorised act.
Review takeaway: Use the authorised ordering process. A request does not expand your role, and logins are not shared.
Answer basis: 45 CFR Part 164: Security Rule; ASTP/ONC SAFER Guide: CPOE with Decision Support; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.G / 2.K16.
Question 56 of 100 · Clinical Operations · CEHRS-D2-28
A provider asks for the clinic's approved handout on wound care for a patient whose chart lists Spanish as her preferred language. The education library holds a current Spanish wound-care handout, an outdated Spanish one, and a current English one. Which do you provide?
A. The current Spanish handout
B. The outdated Spanish handout
C. A handout you write yourself in Spanish
D. The current English handout
Show answer and explanation
Correct answer: A. The material must be approved, current, on the requested topic and in the patient's preferred language. Exactly one listed handout meets all those conditions. D ignores the language preference. B matches the language but hands the patient superseded instructions. C creates unapproved patient education, which is outside the role even when the translation is accurate.
Review takeaway: Match the requested topic and the patient's language, from approved materials.
Answer basis: ASTP/ONC SAFER Guide: Clinician Communication; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.H.
Question 57 of 100 · Clinical Operations · CEHRS-D2-29
A patient asks what a handout means for his own case. What is the appropriate response?
A. Give him a different handout instead
B. Explain how the handout's advice applies to his situation
C. Tell him the handout speaks for itself
D. Refer the question to his provider and note that he asked
Show answer and explanation
Correct answer: D. “What does this mean for me” is a request for clinical interpretation, and it goes to the clinician — with a note, so the question is not lost. B applies general material to a particular patient, which is the clinician's job. C dismisses a reasonable question and leaves it unanswered. A substitutes more paper for the answer he asked for.
Review takeaway: Providing material is in scope. Interpreting it for a patient is not.
Answer basis: ASTP/ONC SAFER Guide: Clinician Communication; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.H / 2.K18.
Question 58 of 100 · Clinical Operations · CEHRS-D2-30
A chart shows a medication ordered at 08:00, scheduled for 09:00, and documented as given at 09:20. A provider asks when the dose was actually administered. Which time do you report?
A. 08:00
B. 09:00
C. 09:20
D. The provider must review the full chart to determine this.
Show answer and explanation
Correct answer: C. Three timestamps describe three different events. 09:20 is the documented administration — the one the question asks for. A is when the order was written. B is when the dose was due, which is a plan, not an event. D declines a straightforward retrieval that is squarely within the role; navigating the record to answer a specific data question is exactly what an EHR specialist does.
Review takeaway: Ordered, scheduled and administered are three different times.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.I / 2.K19.
Question 59 of 100 · Clinical Operations · CEHRS-D2-31
A patient's document index lists: “Discharge Instructions – 03/14,” “Discharge Summary – 03/14,” “Discharge Instructions – 11/02 (prior admission),” and “After-Visit Summary – 03/16 (clinic).” A provider requests the discharge instructions from the March admission. Which document?
A. Discharge Instructions – 11/02
B. After-Visit Summary – 03/16
C. Discharge Instructions – 03/14
D. Discharge Summary – 03/14
Show answer and explanation
Correct answer: C. Match both the document type and the encounter. Only one entry is discharge instructions from the March admission. D is the right date and the wrong document — a discharge summary is the clinical narrative for other clinicians, not the instructions given to the patient. A is the right document type from the wrong admission. B is a different encounter altogether, produced by a clinic visit two days later.
Review takeaway: Similar titles and nearby dates are exactly where retrieval goes wrong.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.I.
Question 60 of 100 · Clinical Operations · CEHRS-D2-32
A provider asks for all haemoglobin A1c results for one patient from 1 January through 30 June inclusive in the same year. The chart shows results on 12 January, 3 April, 30 June and 14 July, all with units displayed. What should you retrieve?
A. The most recent result only
B. The 12 January, 3 April and 30 June results, with their units
C. The 12 January and 3 April results only
D. All four results
Show answer and explanation
Correct answer: B. The range is 1 January to 30 June and the endpoint is included, so three results qualify. Carrying the units across is part of retrieving a result, not a nicety. C drops 30 June by treating the final day as outside the range. D adds 14 July, which falls outside it. A answers a different question than the one asked.
Review takeaway: Inclusive means the last day counts. Bring the units with the numbers.
Answer basis: ASTP/ONC SAFER Guide: Test Results Reporting and Follow-Up; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 2.I.
Revenue Cycle/Finance — 15 questions
Question 61 of 100 · Revenue Cycle/Finance · CEHRS-D3-01
Which code set is used to report the patient's diagnosis on a claim?
A. NPI
B. CPT
C. ICD-10-CM
D. HCPCS Level II
Show answer and explanation
Correct answer: C. ICD-10-CM reports diagnoses and reasons for encounters, including screening when applicable. CPT reports procedures and services — what was done. HCPCS Level II covers supplies, equipment and certain services that CPT does not describe. NPI is not a code set at all; it identifies a provider. Knowing which reference to open is the skill here, not memorising individual codes.
Review takeaway: ICD-10-CM reports diagnoses and encounter reasons. CPT reports procedures and services.
Answer basis: CMS: ICD-10; CMS: Healthcare Common Procedure Coding System. Topic mapping: NHA CEHRS Test Plan — 3.A / 3.K2.
Question 62 of 100 · Revenue Cycle/Finance · CEHRS-D3-02
A claim includes a wheelchair supplied to the patient. Which code set most likely describes it?
A. SNOMED CT
B. NPI
C. ICD-10-CM
D. HCPCS Level II
Show answer and explanation
Correct answer: D. HCPCS Level II exists for items and services outside CPT's scope — durable medical equipment, supplies, certain drugs. A wheelchair is a textbook example. C reports the diagnosis that justifies it, not the item. A is a clinical terminology used inside the record, not a claim code set. B identifies a provider, not the wheelchair supplied.
Review takeaway: Equipment and supplies usually sit in HCPCS Level II.
Answer basis: CMS: Healthcare Common Procedure Coding System; SNOMED International: What is SNOMED CT?. Topic mapping: NHA CEHRS Test Plan — 3.A / 3.K2.
Question 63 of 100 · Revenue Cycle/Finance · CEHRS-D3-03
A fictional clinic calls its encounter-level form a superbill. It lists the diagnoses and services from the visit for the billing team. What is this form used for?
A. A statement showing what the patient owes after insurance
B. An itemised record of the diagnoses and services from an encounter, used to generate the claim
C. The payer's explanation of how a claim was paid
D. A monthly summary of the practice's outstanding balances
Show answer and explanation
Correct answer: B. A superbill is the encounter-level capture of what was diagnosed and done, and it feeds the claim. A is a patient statement, not the encounter form used to prepare the claim. C is an explanation of benefits or remittance advice, which comes from the payer. D is a practice-wide balance summary, not an encounter-level record.
Review takeaway: Superbill in, claim out. A patient statement serves a different task.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.B.
Question 64 of 100 · Revenue Cycle/Finance · CEHRS-D3-04
A superbill lists two diagnoses and one procedure, all checked against the signed note. The provider mentions in passing that she also examined a skin lesion, but nothing about it appears in the note or on the superbill. What should be entered?
A. The superbill items plus a procedure code for the skin examination
B. The two diagnoses and one procedure on the superbill
C. The superbill items plus a diagnosis for the skin lesion
D. Only the procedure
Show answer and explanation
Correct answer: B. Enter what is documented. A and C both add codes for something the record does not support, and a spoken remark is not documentation — if the lesion should be captured, the provider updates the note and the superbill, and then it can be coded. D drops documented diagnoses, which removes the justification for the procedure.
Review takeaway: Code what the record documents. A comment in the hallway is not a note.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.C.
Question 65 of 100 · Revenue Cycle/Finance · CEHRS-D3-05
A claim edit flags that the diagnosis code entered does not exist. The signed note and reviewed superbill contain the correct, valid diagnosis code; your entry has two digits transposed. What is the appropriate action?
A. Remove the diagnosis so the edit clears.
B. Submit the claim anyway and wait for the payer's response.
C. Correct the entered code to match the superbill and resubmit through the normal process.
D. Choose a similar valid code so the claim will pass the edit.
Show answer and explanation
Correct answer: C. The source document has the right code and your entry has a typing error, so fix the entry. B knowingly submits an invalid claim. D is the genuinely dangerous option: swapping in a different valid code makes the edit pass while reporting a diagnosis the provider did not record. A strips the diagnosis that supports the service, rather than correcting the documented diagnosis.
Review takeaway: Fix the entry against the source. Never code to satisfy an edit.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.C.
Question 66 of 100 · Revenue Cycle/Finance · CEHRS-D3-06
A payer's denial notice states: “The submitted diagnosis does not support this service under the applicable coverage policy.” The patient and provider identifiers are correct, and the claim passed format checks. Which concept does this denial concern?
A. Electronic data interchange formatting
B. Guarantor mismatch
C. Fee schedule variance
D. Medical necessity and code linkage
Show answer and explanation
Correct answer: D. The denial notice concerns whether the documented diagnosis supports the service under the applicable coverage policy. D names that issue. C concerns the payment amount under a fee schedule, not the stated coverage reason. A concerns transaction formatting, which the stem says passed. B concerns the responsible party, not the diagnosis-to-service relationship identified in the notice.
Review takeaway: Read the denial reason. Check the documentation against the service and the applicable coverage rule.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.D / 3.K7.
Question 67 of 100 · Revenue Cycle/Finance · CEHRS-D3-07
Before a claim goes out, you notice the note does not document one of the services listed on the superbill. What should you do?
A. Add narrative text to the note describing the service.
B. Submit the claim; the superbill is the billing document.
C. Route the discrepancy to the provider so the documentation and superbill can be reconciled before submission.
D. Remove the service and submit the rest without telling anyone.
Show answer and explanation
Correct answer: C. Documentation and charges have to agree, so the discrepancy goes back to the provider for clarification — the service may have happened and gone unrecorded, or it may have been added in error. C finds out. B bills a service the record does not support. D may be the right outcome but reaches it by guessing, and hides an unresolved documentation gap. A invents supporting narrative instead of getting the discrepancy resolved by the provider.
Review takeaway: When charges and documentation disagree, the provider reconciles them.
Answer basis: CMS Medicare Program Integrity Manual, Chapter 3; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.D.
Question 68 of 100 · Revenue Cycle/Finance · CEHRS-D3-08
A scheduler asks you to check the patient's current eligibility and benefit information for a planned service. Which transaction fits that task?
A. An eligibility and benefits inquiry
B. A prior authorisation request
C. A claim submission
D. A remittance advice
Show answer and explanation
Correct answer: A. An eligibility and benefits inquiry asks the plan what coverage the patient has. B asks permission for a specific service and is a separate transaction with its own response — needed sometimes, but not what was asked here. C requests payment for services already provided. D is the payer's explanation of a claim it has already processed.
Review takeaway: Eligibility asks what is covered. Authorisation asks permission for one service.
Answer basis: CMS: Health Plan Eligibility Benefit Inquiry and Response; CMS: Referral Certification and Authorization; CMS: Health Care Payment, Remittance Advice and EFT; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.E / 3.F.
Question 69 of 100 · Revenue Cycle/Finance · CEHRS-D3-09
A patient presents an unexpired insurance card. What does the card establish?
A. That the planned service is covered
B. That no prior authorisation is required
C. It supplies plan and member details to use in a current eligibility check.
D. That coverage is currently active
Show answer and explanation
Correct answer: C. A card is a printed artefact. It is not a live coverage check, and it does not update itself when the policy changes — people keep cards after changing jobs or plans. A, B and D each treat the card as an answer it cannot give: coverage may have ended, this particular service may be excluded, and authorisation requirements are set by the plan's policies rather than by the card.
Review takeaway: A card starts the verification. It does not finish it.
Answer basis: CMS: Health Plan Eligibility Benefit Inquiry and Response; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.E / 3.K10.
Question 70 of 100 · Revenue Cycle/Finance · CEHRS-D3-10
A payer approves a prior authorisation by phone. Facility policy requires recording the approval number, service, effective dates and payer representative. What should be documented in the EHR?
A. The authorisation number, the approved service, the effective dates, and who at the payer approved it
B. The patient's verbal confirmation that they were told
C. Nothing, since the payer keeps its own record
D. Only that approval was given
Show answer and explanation
Correct answer: A. The stated workflow requires enough detail to identify the approval and its scope. A records what was approved, for how long, under what number, and who said so — which is what you need if the claim is later denied. D leaves nothing to point to. B documents the wrong party. C relies on a record you cannot access when you need it.
Review takeaway: Record the approval and the details required to identify its service and effective period.
Answer basis: CMS: Referral Certification and Authorization; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.F.
Question 71 of 100 · Revenue Cycle/Finance · CEHRS-D3-11
A patient has an authorisation for a knee MRI. At the visit the provider orders a shoulder MRI instead. This payer requires a new authorisation when an MRI order changes to a different body site. What applies?
A. The claim can be submitted and the authorisation added later.
B. The existing authorisation covers it, since both are MRIs.
C. The shoulder MRI needs its own authorisation under the payer's requirements.
D. No authorisation is needed once one has been approved for the patient.
Show answer and explanation
Correct answer: C. The stated payer rule requires a new authorisation for the shoulder MRI. C follows that. B and D both treat an authorisation as a general permission attached to the patient, which contradicts this payer's stated rule. A assumes a later fix rather than following that rule.
Review takeaway: Check the authorisation against the ordered service and the payer's requirements.
Answer basis: CMS: Referral Certification and Authorization; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.F.
Question 72 of 100 · Revenue Cycle/Finance · CEHRS-D3-12
A patient asks what she will owe for a covered in-network service. Her deductible is met, her plan applies 20% coinsurance, there is no copay for this service, and she has at least $24 remaining before her out-of-pocket maximum. The allowed amount is $120. What is her estimated responsibility?
A. $12
B. $24
C. $96
D. $120
Show answer and explanation
Correct answer: B. Coinsurance is a percentage of the allowed amount, so 20% of $120 is $24. A is 10%. C is the plan's 80% share, which is what the payer pays, not the patient. D is the full allowed amount, rather than the 20% share under the stated conditions. Every condition needed for this calculation is stated in the stem — real estimates depend on all of them holding.
Review takeaway: Coinsurance applies to the allowed amount, not the billed charge.
Answer basis: HealthCare.gov: Coinsurance; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.G.
Question 73 of 100 · Revenue Cycle/Finance · CEHRS-D3-13
A clinic gives an insured patient a routine benefit-based cost estimate. It has not agreed to a fixed price or made a payment guarantee. How should this estimate be described to the patient?
A. As the final amount she will owe
B. As an estimate based on current coverage information, which may change once the claim is processed
C. As a guarantee from her insurance plan
D. As a quote that is binding on the practice
Show answer and explanation
Correct answer: B. An estimate is built from what is known today, and adjudication can change it — a deductible may be consumed by another claim, or a service may be coded differently than planned. B says so. A, C and D all promise certainty that neither the practice nor the plan has committed to, and each sets up a conversation that will go badly when the actual bill differs.
Review takeaway: Say estimate, and say what could change it.
Answer basis: CMS: Health Plan Eligibility Benefit Inquiry and Response; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.G.
Question 74 of 100 · Revenue Cycle/Finance · CEHRS-D3-14
What is the difference between an electronic remittance advice and an electronic funds transfer?
A. The remittance advice moves the money; the funds transfer explains the adjustments.
B. Both are statements sent to the patient.
C. There is none; they are two names for the same transaction.
D. The remittance advice explains how the claim was paid or adjusted; the funds transfer moves the money.
Show answer and explanation
Correct answer: D. They are related but do different jobs: the remittance advice is the explanation, carrying the adjustment reasons; the funds transfer is the payment itself. That is why posting a payment without its remittance leaves you unable to say why an amount differs from the charge. C is wrong because these are two distinct transactions that can arrive separately — which is exactly the situation that leaves a practice holding money it cannot yet explain. A reverses the two. B misidentifies the audience: both are provider-facing, not patient-facing.
Review takeaway: The remittance explains. The transfer pays.
Answer basis: CMS: Health Care Payment, Remittance Advice and EFT. Topic mapping: NHA CEHRS Test Plan — 3.H / 3.K14.
Question 75 of 100 · Revenue Cycle/Finance · CEHRS-D3-15
A fictional patient ledger shows a $240 charge, an $80 contractual adjustment, a $120 insurer payment, and a $20 patient payment. No other entries or restrictions apply. What is the remaining balance?
A. $20
B. $40
C. $100
D. $120
Show answer and explanation
Correct answer: A. Work down the ledger. The $240 charge less the $80 contractual adjustment leaves a $160 balance before payments. The insurer's $120 brings it to $40. The patient's $20 brings it to $20. B stops one line early. C subtracts both payments but ignores the contractual adjustment: $240 − $120 − $20 = $100. D is the insurer payment itself, not the balance.
Review takeaway: Subtract the contractual adjustment and both payments from the charge.
Answer basis: CMS: Health Care Payment, Remittance Advice and EFT; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 3.I.
Regulatory Compliance — 15 questions
Question 76 of 100 · Regulatory Compliance · CEHRS-D4-01
You are curious about a coworker's recent hospital visit and have system access that would let you open her chart. What do professional standards require?
A. You may look if you document the reason afterward.
B. You may look, since you have access rights.
C. You may look if you do not tell anyone what you read.
D. You must not access the record, because you have no work-related reason to do so.
Show answer and explanation
Correct answer: D. Having technical access is not the same as having a reason. Access is permitted for your job, and curiosity is not a job function. B confuses capability with authorisation. C treats discretion as a substitute for permission — the impermissible access happened at the moment the chart opened. A adds a note to an act that was not authorised to begin with, and the audit log will show it either way.
Review takeaway: Technical access is not permission to browse. You need an authorised purpose.
Answer basis: HHS: Minimum Necessary Requirement; 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.A.
Question 77 of 100 · Regulatory Compliance · CEHRS-D4-02
A treating physician at another practice requests a patient's records to treat that patient. How does the HIPAA minimum necessary standard apply?
A. It applies, so the request must be denied without a signed authorisation.
B. It applies only if the patient objects.
C. It applies, so send only a summary regardless of what was requested.
D. It does not apply to disclosures to, or requests by, a health care provider for treatment purposes.
Show answer and explanation
Correct answer: D. The minimum necessary standard has specified exceptions, and disclosures to or requests by a provider for treatment is one of them — which is why treating clinicians are not forced to guess at a trimmed-down chart. C would apply the standard where it does not reach. A invents an authorisation requirement; treatment disclosures generally do not need one. B makes the exception depend on patient objection, which is not how it is written.
Review takeaway: The minimum necessary exception here is for disclosures to, or requests by, a provider for treatment.
Answer basis: HHS: Minimum Necessary Requirement. Topic mapping: NHA CEHRS Test Plan — 4.B / 4.H.
Question 78 of 100 · Regulatory Compliance · CEHRS-D4-03
An outside vendor, not a workforce member, hosts the EHR and maintains PHI on behalf of your HIPAA-covered practice. What is that vendor's status?
A. A health care clearinghouse
B. A covered entity
C. A business associate, subject to HIPAA obligations
D. Outside HIPAA entirely
Show answer and explanation
Correct answer: C. A business associate is an outside party that creates, receives, maintains or transmits PHI to perform functions for a covered entity — an EHR host fits squarely. B does not describe the hosting role in this question; a vendor could separately be a covered entity in another role. D ignores the HIPAA obligations attached to the business-associate function. A describes an entity that translates health data between formats, which is a different function.
Review takeaway: An outside EHR host maintaining PHI for a covered practice acts as a business associate.
Answer basis: HHS: Summary of the HIPAA Privacy Rule; HHS: Summary of the HIPAA Security Rule. Topic mapping: NHA CEHRS Test Plan — 4.B.
Question 79 of 100 · Regulatory Compliance · CEHRS-D4-04
A colleague leaves a workstation unlocked with a patient chart visible from the waiting area. Facility policy authorises you to lock an exposed screen and requires reporting the incident through its security process. What is the appropriate first response?
A. Lock the screen without examining the chart, report the incident as required, and reinforce the screen-locking procedure with the colleague.
B. Log him out and change his password.
C. Post a general reminder about screen locking without speaking to him.
D. Say nothing, since it is not your workstation.
Show answer and explanation
Correct answer: A. A first limits the visible exposure, then follows the facility's incident and education process. D leaves the chart exposed. B changes another person's credentials without authority; that is different from the screen lock expressly permitted in the stem. C sends a general reminder without securing the workstation or following the incident procedure.
Review takeaway: Secure the exposed screen and follow the incident process; then reinforce the safeguard.
Answer basis: 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.C.
Question 80 of 100 · Regulatory Compliance · CEHRS-D4-05
You see a temporary staff member signing in with a permanent employee's username and password. Facility policy requires suspected credential sharing to be reported through its security-incident channel. What should you do?
A. Wait to see whether anything goes wrong before reporting.
B. Note the times in a personal file in case it becomes relevant.
C. Report it through the facility's security-incident channel.
D. Ask the temporary staff member to stop and take no further action.
Show answer and explanation
Correct answer: C. Shared credentials break the link between a login and a person, which is what makes audit logs meaningful — so this is a security incident and it goes through the incident channel. D addresses the moment and leaves the account compromised and unexamined. A waits for harm before acting, which defeats the purpose of incident reporting. B keeps the information where no one who can act on it will see it.
Review takeaway: Report suspected credential sharing through the internal security process.
Answer basis: 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.D.
Question 81 of 100 · Regulatory Compliance · CEHRS-D4-06
A registration clerk transfers to the billing department. Under a role-based access model, what should happen to her EHR access?
A. She should use a colleague's billing login until her own is set up.
B. It should stay unchanged, since she remains an employee.
C. It should be reset to match her new role's privileges.
D. She should keep registration access and receive billing access as well.
Show answer and explanation
Correct answer: C. Role-based access means privileges follow the job, so when the job changes the privileges change with it. C does that. B and D both leave her with access she no longer needs, which is how permissions quietly accumulate until a long-serving employee can reach almost everything. A adds credential sharing on top of a delay that should be handled by provisioning.
Review takeaway: Access follows the current role — both directions.
Answer basis: 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.E / 4.K13.
Question 82 of 100 · Regulatory Compliance · CEHRS-D4-07
During an access review you find an active account belonging to an employee who left three months ago. What is the appropriate action?
A. Leave it, since no one has used it.
B. Change the password and keep the account available.
C. Reassign the account to a current employee.
D. Report it through the access-management process so the account can be disabled and the access reviewed.
Show answer and explanation
Correct answer: D. A live account for a departed employee is an open door, and it needs both closing and looking at — disable it, and check whether it was used after the departure. C recycles an identity so that two people's activity sits under one account name. A assumes no one used it without checking, which is exactly what the review exists to establish. B keeps the account alive for no stated purpose.
Review takeaway: Disable the account, then review what it did.
Answer basis: 45 CFR Part 164: Security Rule; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.F.
Question 83 of 100 · Regulatory Compliance · CEHRS-D4-08
A covered entity removes names, addresses and dates of birth from a dataset. A free-text field still describes a patient's former public office, and the entity has clear, direct knowledge that this description identifies the patient. Do those removals alone satisfy Safe Harbor?
A. No — Safe Harbor requires a qualified expert's written determination.
B. Yes — removing names, addresses and dates of birth is sufficient.
C. Yes — identifying information in free text does not count.
D. No — Safe Harbor also requires no actual knowledge that the remaining information could identify the individual.
Show answer and explanation
Correct answer: D. Safe Harbor requires removal of the specified identifiers and no actual knowledge that the remaining information could identify the person. The stem explicitly supplies that actual knowledge, so D is correct. B treats removal of three field types as sufficient. C ignores identifying information in free text. A describes Expert Determination, the alternative method, rather than a requirement of Safe Harbor.
Review takeaway: Safe Harbor is remove the list and have no actual knowledge. Both.
Answer basis: HHS OCR: De-identification Guidance; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.G.
Question 84 of 100 · Regulatory Compliance · CEHRS-D4-09
Which statement correctly describes the two de-identification methods under the HIPAA Privacy Rule?
A. Expert Determination removes a specified list of identifiers; Safe Harbor is a risk assessment.
B. Safe Harbor removes the specified identifiers and requires no actual knowledge of remaining identifiability; Expert Determination uses a qualified expert's documented finding that re-identification risk is very small.
C. Both require a qualified expert.
D. Safe Harbor applies to electronic data and Expert Determination to paper.
Show answer and explanation
Correct answer: B. They are two different routes to the same status. Safe Harbor is a rule-based checklist plus the no-actual-knowledge condition; Expert Determination is a documented risk judgement by someone qualified to make it, which can preserve more useful detail. C collapses them. D invents a distinction by medium that does not exist. A reverses the two.
Review takeaway: Two routes: Safe Harbor's identifier and knowledge conditions, or a documented expert risk determination.
Answer basis: HHS OCR: De-identification Guidance. Topic mapping: NHA CEHRS Test Plan — 4.G / 4.K2.
Question 85 of 100 · Regulatory Compliance · CEHRS-D4-10
An attorney's office requests a patient's records by fax, attaching a signed authorisation. What must be confirmed before releasing anything?
A. Only that the attorney is licensed
B. Nothing, since a signed authorisation is sufficient on its own
C. Only that the fax number is correct
D. That the authorisation is valid and covers the records requested, and that the request is verified under facility policy
Show answer and explanation
Correct answer: D. A signature on a page is where the check starts. D asks the questions that matter: is the authorisation valid, does its scope actually cover what is being requested, and is the request verified as genuine. C checks the destination but not the permission. A checks a credential that does not establish the patient's authorisation. B treats the document as self-proving, which is how forged and overbroad requests get filled.
Review takeaway: Check the authorisation's validity and its scope, then verify the requester.
Answer basis: 45 CFR Part 164: Authorisations and Verification; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.H.
Question 86 of 100 · Regulatory Compliance · CEHRS-D4-11
A patient submits a written request for a copy of her own records. Under the federal HIPAA right-of-access rule, how quickly must a covered entity act after receiving the request?
A. Within 10 days, with no extension
B. No later than 30 days after receipt; one extension of up to 30 more days is permitted when the rule's written-notice conditions are met.
C. Within 90 days
D. Only when the patient's balance is paid in full
Show answer and explanation
Correct answer: B. The federal rule requires action no later than 30 days after receipt. If the covered entity cannot act within that period, it may take one extension of no more than 30 days, but must give the individual written reasons and a completion date within the initial 30 days. A and C state timeframes the rule does not use. D substitutes payment of an outstanding balance for the right-of-access requirements; the rule instead permits only the applicable reasonable, cost-based copying fee.
Review takeaway: Federal rule: 30 days after receipt; one extension of up to 30 days requires timely written reasons and a completion date.
Answer basis: 45 CFR 164.524: Individual Right of Access; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.H.
Question 87 of 100 · Regulatory Compliance · CEHRS-D4-12
Which record would you use to determine who viewed a particular patient's chart last Tuesday?
A. The audit log
B. The backup tape
C. The appointment schedule
D. The patient's billing ledger
Show answer and explanation
Correct answer: A. An audit log records system activity — which user did what, to which record, when. That is the only one of these that answers the question. B stores copies of data, not a history of who looked at it. C shows who was expected to be seen, not who opened a chart. D shows financial transactions, not access events.
Review takeaway: Audit logs answer who did what, to which record, when.
Answer basis: 45 CFR Part 164: Security Rule. Topic mapping: NHA CEHRS Test Plan — 4.I / 4.K12.
Question 88 of 100 · Regulatory Compliance · CEHRS-D4-13
A facility's medication-documentation policy prohibits “U” as an abbreviation for “unit,” including in free-text EHR fields. A provider types “insulin 10U” into a comment field. Does that policy apply?
A. No — the entry is electronic, so the list does not reach it.
B. Yes — the policy includes free-text computer entry; use “unit” instead of “U.”
C. No — the policy applies only to nursing documentation.
D. Yes — but only after the facility adopts a second abbreviation policy.
Show answer and explanation
Correct answer: B. B applies the rule supplied in the stem: the abbreviation is prohibited in free-text medication documentation. A incorrectly treats an electronic entry as exempt. C invents a nursing-only limitation. D adds a second-policy condition that is not present. ISMP's error-prone-abbreviation guidance also addresses electronic communication; typing an abbreviation does not remove its potential for misinterpretation.
Review takeaway: Apply the approved abbreviation policy to the field you are using; free text is still documentation.
Answer basis: ISMP: List of Error-Prone Abbreviations; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.J / 4.K14.
Question 89 of 100 · Regulatory Compliance · CEHRS-D4-14
The EHR comes back after four hours of unplanned downtime. Paper downtime records were kept. Your facility's recovery procedure requires verifying identifiers, checking for existing entries and entering the downtime data into the specified structured EHR fields. What is the correct order?
A. Discard the paper records once the system is back.
B. Enter everything as quickly as possible and reconcile later.
C. Verify patient identifiers, check for entries already captured, then enter the downtime documentation per the recovery procedure.
D. Scan the paper records only and leave the data out of the EHR.
Show answer and explanation
Correct answer: C. Re-entry after downtime is where wrong-patient entries and doubled orders happen, so verify identity and check what already exists before adding anything. B optimises for speed in exactly the situation where speed causes the errors. D does not fulfil this facility's stated requirement to enter and reconcile the downtime documentation. A destroys the source documents before anyone has confirmed the re-entry was complete and correct.
Review takeaway: Verify identity and check for existing entries before re-entering downtime records.
Answer basis: ASTP/ONC SAFER Guide: Contingency Planning; Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 4.K / 4.K15.
Question 90 of 100 · Regulatory Compliance · CEHRS-D4-15
An eligible hospital participates in the Medicare Promoting Interoperability Program. Which reporting activity is part of that program?
A. That it purchase a specific vendor's product
B. Reporting required measures related to its use of certified electronic health record technology
C. That it stop using paper for any purpose
D. That every employee hold a health IT certification
Show answer and explanation
Correct answer: B. B describes the program's use of defined measures tied to certified EHR technology. A confuses certification requirements with a requirement to choose one vendor. C and D are not the reporting requirements described by the program. The hospital Promoting Interoperability Program is distinct from the clinician Quality Payment Program; use the requirements for the program and reporting period that actually apply.
Review takeaway: Use the applicable program's measures and reporting-period requirements.
Answer basis: CMS: Promoting Interoperability Programs. Topic mapping: NHA CEHRS Test Plan — 4.L / 4.K18.
Reporting — 10 questions
Question 91 of 100 · Reporting · CEHRS-D5-01
A fictional accounts receivable aging report groups outstanding balances into 0–30, 31–60 and 61–90 elapsed-day buckets using the clinic's specified aging date. What does the report show?
A. Which providers saw the most patients
B. The practice's payroll costs
C. Outstanding balances grouped by how long they have been unpaid
D. The average age of the practice's patients
Show answer and explanation
Correct answer: C. Aging buckets receivables by elapsed time — how long money has been owed — so a practice can see what is drifting toward uncollectable. D reads “aging” as being about patients, which it is not. A describes a productivity report. B is a payroll report and sits outside the revenue cycle entirely.
Review takeaway: Aging is about how long the money has been outstanding.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.A / 5.K3.
Question 92 of 100 · Reporting · CEHRS-D5-02
As of 30 September 2026, four fictional claims are unpaid: $300 submitted 20 August, $150 submitted 5 September, $500 submitted 15 July, and $200 submitted 25 September. For this report, age is the elapsed number of calendar days since submission in 2026, with submission day counted as day zero. Using buckets of 0–30, 31–60 and 61–90 days, what total falls in the 31–60 day bucket?
A. $150
B. $200
C. $300
D. $500
Show answer and explanation
Correct answer: C. Count days to 30 September for each claim. 20 August is 41 days, 5 September is 25, 15 July is 77, and 25 September is 5. Only the 41-day claim lands in 31–60, so the bucket total is its $300. A and B are the two claims in 0–30 ($150 and $200). D is the 77-day claim, which belongs in 61–90.
Review takeaway: For this report, count elapsed days from submission to the stated report date.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.A.
Question 93 of 100 · Reporting · CEHRS-D5-03
A fictional encounter list has six rows with patient IDs P01, P02, P01, P03, P04 and P02. Every row represents one completed encounter. A manager asks for both the number of distinct patients and the number of encounters. What do you report?
A. 6 patients across 6 encounters
B. 4 patients across 4 encounters
C. 4 patients across 6 encounters
D. 2 patients across 6 encounters
Show answer and explanation
Correct answer: C. Two different counting units are in play, and the useful answer names both. C does. A reports encounters as though they were patients, which double-counts anyone who came twice. B incorrectly collapses the repeat visits, losing two completed encounters. D mistakes the two repeated patient IDs for the total patient count.
Review takeaway: Say which unit you counted. Encounters and patients are different numbers.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.B.
Question 94 of 100 · Reporting · CEHRS-D5-04
Why would a practice run a standardised clinical report of all patients with a given diagnosis?
A. To support continuity of care by identifying who needs follow-up
B. To calculate staff salaries
C. To determine each patient's insurance premium
D. To replace the individual patient record
Show answer and explanation
Correct answer: A. Population-level clinical reports help a practice identify patients whose monitoring or follow-up needs should be reviewed rather than waiting for each patient to come back. B is a payroll function. C is set by insurers using their own rating processes, not by a practice's report. D misunderstands what a report is — an extract built from records, never a substitute for them.
Review takeaway: Clinical reports find the people who need follow-up.
Answer basis: Original application of the task described in the test plan. Topic mapping: NHA CEHRS Test Plan — 5.B / 5.K4.
Question 95 of 100 · Reporting · CEHRS-D5-05
A manager requests an ad hoc report of currently unpaid balances by payer for services dated within the previous calendar quarter. The report is an as-of-now snapshot, not a historical balance reconstruction. Which field set is required at minimum?
A. Patient name and diagnosis
B. Provider name and appointment type
C. Payer and patient address
D. Payer, current unpaid balance amount, and date of service within the quarter
Show answer and explanation
Correct answer: D. Read the request as a specification: by payer means you need the payer field, unpaid balances means the balance amount, last quarter means a date field to filter on. D supplies all three. A and B pull fields the question did not ask about and omit the ones it did. C has the grouping field but no amount and no date, so it cannot answer the question.
Review takeaway: Turn the request into fields: group by, measure, filter.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.C.
Question 96 of 100 · Reporting · CEHRS-D5-06
You are asked for all visits from 1 March through 31 March inclusive. You verify that the source contains 31 March visits, but the report filter selects dates on or after 1 March and strictly before 31 March. The output ends on 30 March. What is wrong?
A. The end date is being treated as exclusive, so the final day is omitted.
B. The start date is wrong.
C. The dataset contains no 31 March visits, so nothing is wrong.
D. The report is correct; 31 March is outside March.
Show answer and explanation
Correct answer: A. The supplied filter is exclusive at the end: it returns everything before 31 March rather than through it. D is simply false. B is contradicted by the output, which starts on the right day. C is contradicted by the verified 31 March visits in the source.
Review takeaway: Check the source and the filter: an inclusive request must include the final day.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.D / 5.K5.
Question 97 of 100 · Reporting · CEHRS-D5-07
A fictional quality measure defines completion as the share of eligible records that are complete. The report shows 24 eligible records, of which 18 are complete. What is the completion rate?
A. 18%
B. 133%
C. 75%
D. 24%
Show answer and explanation
Correct answer: C. Divide the numerator by the stated denominator: 18 of 24 is 0.75, or 75%. D and A report raw counts as if they were percentages. B inverts the fraction, dividing 24 by 18. The denominator matters as much as the arithmetic — quietly dropping the six incomplete records would give 100% and describe nothing real.
Review takeaway: Keep the denominator the measure defines. Do not drop the cases that fail.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.E / 5.K6.
Question 98 of 100 · Reporting · CEHRS-D5-08
A quality measure's specification includes all eligible records in its denominator, even when the completion field is missing. A manager asks you to exclude those missing-data records so the rate looks cleaner. What should you do?
A. Keep the specified denominator, identify the missing data, and explain why the requested exclusion would change the measure.
B. Fill the missing fields with plausible values.
C. Refuse and provide no report.
D. Exclude them without comment.
Show answer and explanation
Correct answer: A. The measure explicitly includes those eligible records. A preserves that denominator and makes the missing data visible. D changes the specified population without disclosure; disclosing the change would still not make it the same measure. B fabricates data. C withholds a report even though the stated specification supplies a valid way to produce it.
Review takeaway: Follow the measure's actual exclusion rules. Do not improve a rate by redefining its denominator.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.E.
Question 99 of 100 · Reporting · CEHRS-D5-09
A practice compiles EHR data for submission to an external federal quality program. What matters most about the submitted data?
A. That it uses the practice's own internal definitions
B. That it is submitted in any format the practice prefers
C. That it matches the program's specified measures and definitions
D. That it shows the practice in the best possible light
Show answer and explanation
Correct answer: C. External reporting only works if everyone counts the same way, so the program's measure specifications and definitions govern. D describes an intention, not a data requirement, and selectively shaping submitted data is a compliance problem. A substitutes internal definitions for the external program's specified definitions. B ignores the format requirements that make automated submission possible.
Review takeaway: External reporting uses the program's definitions, not yours.
Answer basis: CMS: Promoting Interoperability Programs. Topic mapping: NHA CEHRS Test Plan — 5.F.
Question 100 of 100 · Reporting · CEHRS-D5-10
A monthly report on patients with a hypertension diagnosis is due to the quality committee. You notice 40 of its 512 rows have a blank last-visit-date field. What should you do first?
A. Drop the 40 rows and report on 472 rows.
B. Distribute the report and mention the blanks in the covering email.
C. Replace the blank dates with the report run date so every row is complete.
D. Find out why the field is blank before the report leaves your hands.
Show answer and explanation
Correct answer: D. Verifying accuracy before distribution is the task, and a blank field is a signal. It might mean the query joined the wrong table, that those visits are recorded in a module the report does not read, or that those patients genuinely have no recorded visit — and each of those leads somewhere different. C is the most damaging option: the run date is not a fact about any patient. A changes the denominator invisibly. B is not wrong, just premature.
Review takeaway: Find out what a blank means before you hand the report over.
Answer basis: Fictional facts and any local rules stated in the question. Topic mapping: NHA CEHRS Test Plan — 5.G / 5.K7.
Score yourself by domain
Count your correct first answers in each block. Keep unanswered questions separate, and do not turn an answer you read before responding into a correct first attempt.
| Domain | Questions here | Your correct answers | Your percentage | Share of NHA's scored items |
|---|---|---|---|---|
| Non-Clinical Operations | 28 | ___ / 28 | ___% | 28 of 100 |
| Clinical Operations | 32 | ___ / 32 | ___% | 32 of 100 |
| Revenue Cycle/Finance | 15 | ___ / 15 | ___% | 15 of 100 |
| Regulatory Compliance | 15 | ___ / 15 | ___% | 15 of 100 |
| Reporting | 10 | ___ / 10 | ___% | 10 of 100 |
| Total | 100 | ___ / 100 | ___% | 100 |
The practice allocation matches the domain counts in NHA's CEHRS test plan, page 1. That matches the distribution—not the difficulty, every task or an official exam form.
For each domain, divide correct answers by the full question count and multiply by 100. For the whole set, 75 correct, 10 incorrect and 15 unanswered is 75/100 = 75%, not 75/85. Keep the 15 unanswered visible rather than treating them as proof you did not know the material. An answer viewed before responding is unscored review, not a correct first attempt.
Now read that honestly. This is your performance on these 100 questions and nothing more. It is not an NHA scaled score, it does not predict whether you will pass, and it does not cover every task on the test plan. Ten Reporting questions are a small sample; one answer changes that block's percentage by ten points. Do not treat the domain percentages as precise measurements of readiness.
What it is good for is pointing at something to review. Compare percentages rather than raw correct counts across blocks of different sizes, then look at the actual questions you missed.
What to review next
Reopen the explanations for questions you missed or guessed. Read the correct answer, the reasons the other options fail and the review takeaway. Then try explaining the distinction without looking. The topic reference under each answer connects that question to NHA's free CEHRS test plan; the separate answer-basis links support the teaching principle.
One caution before you plan anything: the item counts tell you how many questions a domain gets, not how hard those questions are or how many hours it deserves. A domain with 15 items can still be the one costing you the exam.
Non-Clinical Operations (tasks 1.A–1.M). The front half of the record: verifying identifiers, collecting and updating patient information, encounter documents, pulling data from internal and external sources, device imports, scheduling and patient flow, training and update communication, finding and reconciling data discrepancies, and portal support. Review the distinctions you missed: identifiers in Question 1, discrepancy versus duplicate in Question 22, and portal navigation versus clinical interpretation in Question 28.
Clinical Operations (tasks 2.A–2.I). Templates, secure transmission, reviewing documentation for completeness and accuracy, point-of-care support, real-time and historic clinical data, CPOE support, patient education materials, and retrieving data from the record. Use Question 37 to review a Medicare amendment, Question 41 to separate navigation support from authorised documentation assistance, and Question 52 to review incomplete orders.
Revenue Cycle/Finance (tasks 3.A–3.I). Code lookup, superbills, entering codes, checking that documentation supports what is billed, eligibility, authorisations, cost estimates, statements and payments. Learn the pairs that get confused: ICD-10-CM against CPT, eligibility inquiry against prior authorisation, remittance advice against funds transfer. Rework the coinsurance calculation and ledger balance from their stated inputs.
Regulatory Compliance (tasks 4.A–4.L). Professional standards, PHI confidentiality and security, educating colleagues, spotting non-compliant behaviour, access controls, de-identification, release of information, internal audits, abbreviations, downtime procedures, and incentive-program requirements. Pay attention to the exact condition being tested: the treatment-disclosure exception in Question 77, actual knowledge in Question 83, and the notice deadline for an access extension in Question 86.
Reporting (tasks 5.A–5.G). Standardised and ad hoc financial and clinical reports, statistical and quality reports, external reporting, and verifying accuracy before distribution. Watch your denominator, your counting unit, and your date boundaries. The patient-versus-encounter count, March date filter and missing-data denominator each test a different problem.
How many questions is the CEHRS exam, really?
125. You answer 125 questions in 125 minutes under standard timing. NHA's test plan is explicit: 100 scored items plus 25 pretest items. The Candidate Handbook, printed page 25, says the pretest questions do not count toward your score and are not identified to you.
That works out to exactly one minute per question on average. It is a pacing calculation, not a separate one-minute limit on each item; approved extra time changes the available total.
Here is why it matters. Plan at 125 minutes ÷ 100 questions and you give yourself 1.25 minutes each. Spend that across the 125 questions actually in front of you and you need 156 minutes 15 seconds. You do not have that much time under the standard limit.
The pretest items are there so NHA can check whether a question behaves well enough to be scored on a future form. Treat them like the other questions, because you cannot tell which ones they are. This resource has 100 practice questions and no separate pretest block; it is not a full-length simulation.
What a passing score of 390 means
390 is not 78%. It is a point on a scale that runs from 200 to 500, not the percentage obtained by dividing 390 by 500. NHA uses more than one version of the exam and uses scaled scoring to report a consistent passing threshold. The handbook sets 390 or higher as passing; it does not provide a conversion from this practice set's percentage to an official score. NHA Candidate Handbook, printed pages 31–32
This is also why nobody can honestly tell you “get 75% on this practice set and you are safe.” That promise cannot be derived from its answer key.
What your score report will and won't tell you
Your report gives you a score and pass or fail result, plus performance feedback for the major content areas. NHA uses above, near or below the passing standard; it reports N/A when an area contains too few questions to assign a category. NHA Candidate Handbook, printed pages 32–33
- “Near” does not mean you did well enough. NHA says reaching that band does not indicate satisfactory performance in that content area.
- The bands are ranges. “Above” could mean comfortably above or barely above. The report will not tell you which.
- You cannot add the bands up. They are not domain percentages that reconstruct the overall score.
Why free CEHRS practice tests disagree about this exam
If you have read several CEHRS study pages, you may have seen different exams described. The two pages below were inspected on 11 September 2026; their published figures conflict with NHA's own test plan.
| Inspected page | What its exam section published | What NHA's test plan says | Why the difference matters |
|---|---|---|---|
| Unitek's CEHRS guide | 100 scored items plus 10 pretest items; 1 hour 50 minutes | 100 scored plus 25 pretest; 125 minutes | Its stated count is 15 items short, and its stated time is 15 minutes shorter than the official limit. |
| Brookline's CEHRS guide | 150 questions plus 20 pretest items; 1 hour 50 minutes | 125 total items; 125 minutes | Read literally, its count totals 170—45 more than the official total—and its time is 15 minutes shorter. |
Both are career-college pages. A page can come from a real institution and still describe the exam incorrectly. They also serve a different practice experience: the inspected Unitek guide has ten sample questions with an answer key at the bottom, while Brookline has five sample questions.
Not everything free is wrong, and we are not going to pretend otherwise. The governing NHA test plan is itself free. Use it to check a resource's exam structure and topic map; use appropriate teaching sources to check its answers. These secondary pages may have been corrected since the inspection date.
If you didn't pass
Start with your score report. Content areas marked below or near the passing standard deserve focused review, but do not write off areas marked above: those bands cover ranges too. This is NHA's advice in the Candidate Handbook, printed page 34.
For a retake, the handbook allows three attempts with at least 30 days between attempts. It specifies a one-year wait for repeated failures after the third attempt. Each retake requires registration and the full examination fee; confirm the applicable date and price through NHA before booking.
A written hand-rescoring request must be received within 60 days of the exam date, and NHA may charge a fee. A score appeal must be received on the official NHA Appeals form within 30 days. Both determinations are final. The procedures are in the Candidate Handbook's Exam Challenges section, printed page 34.
Before exam day
The following are standard conditions in the Candidate Handbook, printed pages 21–26 and 32; an approved accommodation may change particular conditions.
- Bring a current government-issued photo ID, including for remote proctoring. Check the handbook and your appointment instructions for the full identification requirements.
- No reference books or study notes for CEHRS. Use the exam's built-in calculator, not a personal calculator or your computer's calculator. Phones, watches, earbuds and AI glasses are prohibited unless a specific device is approved as an accommodation.
- Standard live remote proctoring allows no breaks. An in-person proctor can allow a necessary break under the handbook's conditions, but the clock continues. Resolve any accommodation needs with NHA before choosing the testing arrangement.
- Results depend on the setting. Institutional computer-based testing provides preliminary results immediately. The handbook gives a 48-hour window for PSI test-centre or PSI live-remote results. Preliminary results are not final results.
Accommodations require NHA's request form and supporting documentation; allow 30 days for processing. When extra testing time is approved, the handbook describes 150% of standard time, with a need for more time specifically documented and justified. Some accommodations require an in-person setting. Submitting a request does not guarantee approval. Candidate Handbook, printed pages 21–23
For full certification, the general education requirement is a high school diploma or equivalent, together with a qualifying training or work-experience route. The common routes include relevant training completed within five years, one year of supervised relevant work within three years, or two years within five years. The handbook also describes additional qualifying routes and provisional certification for eligible students; this summary is not an individual eligibility decision. Candidate Handbook, eligibility sections
CEHRS is a national certification, not a licence. NHA states that its requirements are separate from any state's rules about practising, and that certification does not guarantee you meet them. If your state regulates the work you plan to do, check with the body that regulates it. Candidate Handbook
How many people pass the CEHRS exam?
In its 2024 report, NHA lists 1,834 CEHRS examinations administered and 68.81% passing. It also lists 4,131 active CEHRS certifications as of 31 December 2024. These are historical figures, not a claimed current pass rate. NHA Annual Pass Rates: 2024
Read that carefully, because it is easy to misread. NHA's column heading is “examinations administered”—not unique candidates or first-time candidates. Do not turn the rounded percentage into an exact number of people, or read it as your personal probability of passing.
Sources
The answer-basis links beside each question identify its supporting teaching source or its fictional scenario inputs. The test-plan reference is a coverage map, not proof of the answer.
Official exam information: NHA CEHRS Test Plan—based on the 2019 job analysis; NHA Candidate Handbook—updated 1 June 2026; and NHA's historical 2024 pass-rate table.
Privacy, security and records: 45 CFR Part 164; HHS Security Rule summary; minimum necessary guidance; personal representatives; de-identification guidance; and CMS Program Integrity Manual, Chapter 3.
EHR safety and documentation: ASTP/ONC SAFER Guides on Patient Identification, System Management, CPOE, Test Results, Contingency Planning and Clinician Communication; AHRQ's CPOE overview; and the SOAP documentation reference. The SAFER documents are safety guidance, not legal mandates.
Coding, coverage and data: CMS ICD-10 resources; CMS HCPCS overview; eligibility transactions; authorisation transactions; ERA and EFT; HealthCare.gov coinsurance; HL7 Patient definitions; HL7 Coverage definitions; SNOMED terminology; ISMP abbreviation guidance; and CMS Promoting Interoperability.
Last source check: 11 September 2026. The exam structure, published scoring threshold, selected candidate policies and the answer principles cited here were checked against the linked materials. The pass-rate figures remain labelled 2024. Source checking is not clinical, legal or psychometric review.
About this resource
Written by the Castleport Test Prep Editorial Team.
The 100 questions here are original. They are not NHA exam questions, not recalled exam questions, and not taken from any NHA product. Every patient, chart, ledger, schedule and local facility policy in them is invented.
This is a shortened practice set. It is not full-length, not exhaustive of every task on the test plan, and not a validated readiness assessment.
Castleport Test Prep is an independent exam prep publisher, not affiliated with, endorsed by, or approved by the National Healthcareer Association. Exam and credential names are used to identify their subjects, and trademarks belong to their respective owners.
Working through these questions does not guarantee a passing score, certification, licensure or employment. For eligibility, fees, scheduling and current policy, use NHA's own published materials.