Castleport Test Prep

RHIT Exam Prep: Domain Map, 6-Week Study Plan, and 30 Practice Questions

This guide covers AHIMA's Registered Health Information Technician (RHIT) exam, built on the current content outline, effective October 1, 2022. Start your RHIT exam prep with the 30 original, unofficial questions below, then use the domain map and six-week plan to review what you missed.

30 RHIT practice questions

Question 1

Domain 1: Data Content, Structure, and Information Governance

A patient is admitted as an inpatient on June 10 for surgery scheduled later that day. Which history and physical (H&P) meets the federal hospital Condition of Participation timing rule?

  • A. An H&P completed May 1, with no update note.
  • B. An H&P completed June 11, the day after surgery.
  • C. An H&P completed May 28, plus an updated examination documented on June 10 after admission and before surgery.
  • D. An H&P completed June 12, about 48 hours after admission.
Reveal answer and explanation

Answer and explanation

C is correct. The H&P must be completed no more than 30 days before or 24 hours after admission, and before surgery or a procedure requiring anesthesia. When it was done in the 30 days before admission, an updated examination must also be documented within 24 hours after admission and before surgery. May 28 is 13 days before admission, and the update was done before surgery.

Why the others miss: A: May 1 is more than 30 days before admission, and there is no update. B: It comes after surgery, so it fails even if it was completed within 24 hours of admission. D: 48 hours after admission is outside the 24-hour limit.

Source: 42 CFR 482.24, Medical record services (hospital Condition of Participation), §482.24(c)(4)(i)(A)–(B)

Question 2

Domain 1: Data Content, Structure, and Information Governance

Under the Medicare hospital Conditions of Participation, how soon after discharge must an inpatient record be completed, including the final diagnosis?

  • A. Within 14 days
  • B. Within 30 days
  • C. Within 45 days
  • D. Within 60 days
Reveal answer and explanation

Answer and explanation

B is correct. The hospital CoP requires a final diagnosis with completion of medical records within 30 days following discharge. That is the federal floor; a hospital's own medical staff rules can set a shorter deadline.

Why the others miss: A: 14 days is not the federal requirement, though a hospital may choose a shorter internal deadline. C: 45 days exceeds the federal requirement. D: 60 days exceeds the federal requirement.

Source: 42 CFR 482.24, Medical record services (hospital Condition of Participation), §482.24(c)(4)(viii)

Question 3

Domain 1: Data Content, Structure, and Information Governance

An HIM analyst finds two master patient index (MPI) entries with the same name and birth date but different addresses. What should happen before the records are merged?

  • A. Merge them now, because two identifiers already match.
  • B. Compare additional identifying data and follow the organization's identity-verification process before merging.
  • C. Delete the entry with the older address.
  • D. Create a third entry that combines both histories.
Reveal answer and explanation

Answer and explanation

B is correct. Patient matching links one patient's data by comparing multiple demographic fields, such as name, birth date, phone number, and address. Two matching fields leave the address conflict unresolved, so the analyst gathers more evidence and follows the organization's verification process before merging.

Why the others miss: A: Merging on two fields risks combining two different people's records (an overlay). C: Deleting an entry destroys information without settling who the patient is. D: A third entry adds another possible duplicate.

Source: ASTP/ONC, Patient Identity and Patient Record Matching, definition of patient matching

Question 4

Domain 1: Data Content, Structure, and Information Governance

A patient asks for her clinical and billing records. The hospital plans to leave out all billing records because they sit in a separate billing system, not the EHR. What's the problem with that plan?

  • A. HIPAA covers only records shown in the patient portal.
  • B. HIPAA covers paper records but not separate electronic systems.
  • C. A designated record set includes billing and payment records, claims, and insurance information, wherever they are kept.
  • D. Every business document the hospital holds belongs to every patient's designated record set.
Reveal answer and explanation

Answer and explanation

C is correct. HHS explains that the right of access reaches all designated record sets maintained by or for a covered entity, electronic or paper. That explicitly includes billing and payment records, claims, and insurance information. Where a record is stored doesn't remove it.

Why the others miss: A: Access isn't limited to what a portal displays. B: Format doesn't matter; electronic and paper records are both covered. D: Too broad. The set covers records used to make decisions about individuals, not every business document.

Source: HHS HIPAA FAQ on the right of access and designated record sets, answer text

Question 5

Domain 1: Data Content, Structure, and Information Governance

A provider documents "type 2 diabetes mellitus and chronic kidney disease" without stating whether they are related. In the ICD-10-CM Alphabetic Index, chronic kidney disease appears under the subterm "with" for type 2 diabetes. How should the coder treat the two conditions?

  • A. As related, because "with" in the Index presumes a causal link unless the documentation says they are unrelated.
  • B. As unrelated, because the provider didn't write "due to."
  • C. As unrelated until the provider answers a query.
  • D. Code only the chronic kidney disease.
Reveal answer and explanation

Answer and explanation

A is correct. The guideline says "with" in the Index or Tabular List presumes a causal relationship. The conditions are coded as related even without an explicit provider link. The exceptions are documentation that clearly says they're unrelated, or another guideline that requires an explicit link.

Why the others miss: B: The presumption replaces the need for "due to" wording. C: A query isn't required to apply the presumption, though conflicting documentation would call for one. D: Dropping the diabetes leaves a documented condition uncoded.

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, Section I.A.15, p. 11; CDC/NCHS, ICD-10-CM FY 2027 Tabular List and Alphabetic Index, icd10cm-index-2027.xml: Diabetes, diabetic → type 2 → with → chronic kidney disease (E11.22)

Question 6

Domain 1: Data Content, Structure, and Information Governance

A dietitian documents a patient's body mass index (BMI). The dietitian's note also says the patient is obese. No physician or other qualified provider has documented an associated reportable weight-related diagnosis. Which statement is correct?

  • A. Both the BMI and the obesity diagnosis can be coded from the dietitian's note.
  • B. Nothing documented by a dietitian can be used for coding.
  • C. The BMI must be documented by the attending provider before it can be used.
  • D. The BMI can come from the dietitian's note, but the obesity diagnosis must be documented by the patient's provider.
Reveal answer and explanation

Answer and explanation

D is correct. The guidelines list BMI among the items that can be taken from other clinicians' documentation. The associated diagnosis, such as obesity, must be documented by the patient's provider. A BMI code is not reportable without an associated reportable diagnosis documented by the provider. A clinically supported query may be appropriate.

Why the others miss: A: The dietitian can supply the BMI, not the diagnosis. B: Too strict. BMI is one of the listed exceptions. C: BMI is specifically allowed to come from other clinicians.

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, Section I.B.14, pp. 15–16; Section I.C.21.c.3 (Z68), p. 95

Question 7

Domain 2: Access, Disclosure, Privacy, and Security

A patient gives the hospital a written request for a copy of her records on March 2. Under HIPAA, what is the hospital's deadline?

  • A. Act within 15 days, with no extension allowed.
  • B. Act within 30 days of receipt, with one extension of up to 30 more days if the patient is told in writing, within the first 30 days, why and by when.
  • C. Act within 60 days of receipt.
  • D. Act within 30 days, with as many 30-day extensions as needed.
Reveal answer and explanation

Answer and explanation

B is correct. The covered entity must act on an access request no later than 30 days after receipt. It may take one extension of no more than 30 days. Within the original 30 days, it must give the patient a written statement of the reason for the delay and the expected completion date.

Why the others miss: A: 15 days isn't the HIPAA deadline, and one extension is allowed. C: 60 days is the accounting-of-disclosures deadline, not the access deadline. D: Only one extension is permitted.

Source: 45 CFR 164.524, Access of individuals to protected health information, §164.524(b)(2)

Question 8

Domain 2: Access, Disclosure, Privacy, and Security

A patient asks for a complete copy of her record, including psychotherapy notes her psychiatrist keeps separately. What is the best response under the HIPAA right of access?

  • A. Release everything, because the right of access covers the entire record.
  • B. Deny the whole request, because part of it can't be released.
  • C. Require a court order before releasing any of it.
  • D. Give access to the rest of the designated record set; psychotherapy notes are excluded from the right of access.
Reveal answer and explanation

Answer and explanation

D is correct. Psychotherapy notes are expressly excluded from the right of access. When part of a request is excluded, the covered entity must still give access to the other requested information, to the extent possible.

Why the others miss: A: The right of access has exceptions, and psychotherapy notes are one of them. B: A partial exclusion doesn't justify denying the rest. C: No court order is needed for a patient's own access.

Source: 45 CFR 164.524, Access of individuals to protected health information, §164.524(a)(1)(i) and (d)(1)

Question 9

Domain 2: Access, Disclosure, Privacy, and Security

A patient asks for an accounting of disclosures. Which disclosure does NOT have to appear on it?

  • A. Records released in response to a court order
  • B. A required report to a public health authority
  • C. Records sent to the patient's attorney under the patient's signed authorization
  • D. Records provided to a health oversight agency for an audit
Reveal answer and explanation

Answer and explanation

C is correct. Disclosures made under a valid authorization are on the list of exclusions from the accounting requirement. The accounting otherwise covers the preceding six years, unless the individual requests a shorter period. The covered entity has 60 days to provide it, with one 30-day extension if it gives the required written notice within the first 60 days.

Why the others miss: A: Court-ordered disclosures aren't on the exclusion list. B: Public health disclosures aren't on the exclusion list. D: Health-oversight disclosures are generally included; a qualifying written or documented oral agency statement can temporarily suspend the accounting right.

Source: 45 CFR 164.528, Accounting of disclosures, §164.528(a)(1)(iv), (a)(2)–(3), and (c)(1)

Question 10

Domain 2: Access, Disclosure, Privacy, and Security

On April 3, a workforce member who did not commit the breach first discovers that a laptop holding unencrypted patient information is missing. The privacy officer hears about it on April 20. Assume this is a breach of unsecured PHI, it could not reasonably have been discovered earlier, and no law-enforcement delay applies. For notifying affected patients, when is the breach treated as discovered, and what is the outer deadline?

  • A. April 3; notify without unreasonable delay and no later than 60 calendar days after April 3.
  • B. April 20; notify no later than 60 calendar days after April 20.
  • C. When the investigation ends; notify within 60 days after that.
  • D. April 3; notify within 60 business days.
Reveal answer and explanation

Answer and explanation

A is correct. A breach is treated as discovered on the first day any workforce member (other than the person who committed it) knows of it, or would have known with reasonable diligence. Notice must go out without unreasonable delay and no later than 60 calendar days after discovery. Sixty days is the outer limit, not a target.

Why the others miss: B: Discovery isn't delayed until the privacy officer is told. C: The clock starts at discovery, not at the end of the investigation. D: The rule counts calendar days, not business days.

Source: 45 CFR 164.404, Breach notification to individuals, §164.404(a)(2) and (b); 45 CFR 164.412, Law enforcement delay, conditions for a delayed notification

Question 11

Domain 2: Access, Disclosure, Privacy, and Security

Four authorized employees share one EHR login, so the audit log can't show which of them opened a record. Which change fixes the HIPAA Security Rule problem?

  • A. Make the shared password longer.
  • B. Change the shared password every week.
  • C. Record which workstation each login came from.
  • D. Give each employee a unique user name or number.
Reveal answer and explanation

Answer and explanation

D is correct. HHS says each workforce member who uses a system containing e-PHI needs a unique name and/or number. That way activity can be traced to an individual, whatever the entity's size.

Why the others miss: A: A stronger shared secret still doesn't identify who acted. B: Rotation changes the password, not the shared identity. C: A workstation identifies a place, not a person.

Source: HHS HIPAA FAQ on shared log-on IDs (Security Rule unique user identification), answer text; 45 CFR 164.312(a)(2)(i)

Question 12

Domain 3: Data Analytics and Use

Community Hospital has 200 adult and pediatric beds, with no change during June (30 days). It recorded 5,100 inpatient service days in June. What is the inpatient bed occupancy rate?

  • A. 82.3%
  • B. 85.0%
  • C. 0.85%
  • D. 117.6%
Reveal answer and explanation

Answer and explanation

B is correct. Occupancy = inpatient service days ÷ (bed count × days in period) × 100 = 5,100 ÷ (200 × 30) × 100 = 5,100 ÷ 6,000 × 100 = 85.0%.

Why the others miss: A: Uses 31 days: 5,100 ÷ 6,200 × 100. C: Reports the decimal 0.85 as a percent without multiplying by 100. D: Turns the fraction upside down: 6,000 ÷ 5,100 × 100.

Source: Pennsylvania Department of Health, Occupancy Rates in Health Facilities, p. 1, occupancy formula and available bed days; p. 2, capacity changes

Question 13

Domain 3: Data Analytics and Use

Community Hospital: 5,100 inpatient service days in June (30 days), 200 beds. What is the average daily inpatient census?

  • A. 25.5
  • B. 0.85
  • C. 170
  • D. 164.5
Reveal answer and explanation

Answer and explanation

C is correct. Average daily census = total inpatient service days ÷ days in the period = 5,100 ÷ 30 = 170 patients per day.

Why the others miss: A: Divides by the bed count instead of the days. B: That is the occupancy rate written as a decimal (5,100 ÷ 6,000), not a census. D: Uses 31 days.

Source: Pennsylvania Department of Health, Occupancy Rates in Health Facilities, p. 1, inpatient days of care as the sum of daily inpatient census values; arithmetic mean derived from that definition

Question 14

Domain 3: Data Analytics and Use

In June (30 days), 1,020 inpatients were discharged. Their total length of stay (discharge days) was 4,896 days. The hospital also recorded 5,100 inpatient service days and had 200 beds. Using total length of stay ÷ number of discharges, what is the average length of stay?

  • A. 4.8 days
  • B. 5.0 days
  • C. 25.5 days
  • D. 163.2 days
Reveal answer and explanation

Answer and explanation

A is correct. 4,896 ÷ 1,020 = 4.8 days. The question defined the method, so use it. Inpatient service days and discharge days measure different things.

Why the others miss: B: Uses inpatient service days (5,100) instead of discharge days. C: Divides inpatient service days by beds. D: Divides discharge days by the days in the month.

Source: Pennsylvania Department of Health, Average Length of Stay in Hospitals, p. 1, Method 1 and definitions of total discharge days and total discharges; CDC/NCHS, Average length of stay definition, AHA admissions-based method, for contrast

Question 15

Domain 3: Data Analytics and Use

Four Medicare inpatient discharges had MS-DRG relative weights of 1.0000, 1.5000, 2.0000, and 0.9000. What is their case mix index (CMI)?

  • A. 5.40
  • B. 1.25
  • C. 2.00
  • D. 1.35
Reveal answer and explanation

Answer and explanation

D is correct. CMI = sum of MS-DRG weights ÷ number of discharges = 5.40 ÷ 4 = 1.35. A higher CMI means a more complex, resource-intensive caseload. (Real CMIs specify the eligible discharge population and period; four cases just keep the arithmetic visible.)

Why the others miss: A: The sum, not divided by the number of discharges. B: The median of the four weights, not the mean. C: The highest single weight.

Source: California HCAI Case Mix Index dataset definition, definition; CMS, Case Mix Index, Description: average DRG relative weight for Medicare discharges

Question 16

Domain 3: Data Analytics and Use

Five release-of-information requests took 2, 3, 3, 4, and 23 days to complete. What is the median turnaround time?

  • A. 7 days
  • B. 23 days
  • C. 3 days
  • D. 21 days
Reveal answer and explanation

Answer and explanation

C is correct. The median is the middle value of the ordered data: 2, 3, 3, 4, 23 → 3 days. The one 23-day request pulls the mean up to 7, but it barely affects the median. That's why the median often describes a typical case better when there's an extreme value.

Why the others miss: A: The mean: 35 ÷ 5 = 7. B: The maximum. D: The range: 23 − 2.

Source: NIST/SEMATECH e-Handbook, Measures of Location, mean and median definitions

Question 17

Domain 4: Revenue Cycle Management

Lab results show abnormal sodium values, and the record shows related treatment. No provider has documented a diagnosis that explains them. A CDI specialist wants clarification. Which query format is compliant?

  • A. A yes/no query: "Does the patient have hyponatremia?"
  • B. A multiple-choice query that cites the sodium values and where they appear, offers only clinically supported options, and includes "other (please specify)."
  • C. No query; the coder assigns the diagnosis from the lab values.
  • D. A yes/no query with the sodium values in bold.
Reveal answer and explanation

Answer and explanation

B is correct. Yes/no queries may not be used when only clinical indicators are present and the condition hasn't been documented. A multiple-choice query with cited indicators, clinically supported options, and an "other" choice lets the provider answer without being led.

Why the others miss: A: A yes/no format can't be used to obtain a new, undocumented diagnosis. C: Code assignment rests on the provider's diagnostic statement, not on lab values. D: Still a yes/no query for a new diagnosis; changing the formatting doesn't fix the unsupported query format.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §V.II.A, pp. 10–11; §V.II.B, pp. 12–13 (written query formats); ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, Section I.A.19, p. 12

Question 18

Domain 4: Revenue Cycle Management

Which element of a draft provider query makes it noncompliant?

  • A. A note that documenting the condition would add an MCC to the MS-DRG
  • B. Lab values quoted with the date and the place they appear in the record
  • C. An "other (please specify)" option
  • D. The question "Please clarify the diagnosis."
Reveal answer and explanation

Answer and explanation

A is correct. A query must never mention the impact on reimbursement, quality measures, or other reportable data. A note about adding an MCC points the provider toward a financially desirable answer.

Why the others miss: B: Quoting and sourcing clinical indicators is recommended. C: An "other" option is required for multiple-choice queries. D: This is the kind of neutral, non-leading question the brief recommends.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §V.I.B, p. 7; §V.II.A, p. 10

Question 19

Domain 4: Revenue Cycle Management

A patient's hemoglobin is 10 g/dL, and no provider has documented anemia. How should that appear in a query's clinical indicators?

  • A. "Patient is anemic (Hgb 10)."
  • B. "Anemia — please confirm."
  • C. "Hgb 10 g/dL — LOW," with the LOW label, bolding, and highlighting added by the query professional to a plain-text lab result
  • D. "Hemoglobin 10 g/dL, lab result dated 3/2."
Reveal answer and explanation

Answer and explanation

D is correct. The query should present the record's data, with its source, without the query professional's interpretation. The AHIMA/ACDIS brief uses this exact case: don't write "anemia" for a hemoglobin of 10 g/dL.

Why the others miss: A: Inserts a diagnosis the provider hasn't made. B: Inserts a diagnosis and asks the provider to confirm it. C: The query professional added interpretation and emphasis. Preserving formatting already present in the source record is different.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §V.I.C.1–3, p. 8; §XII.II.E, p. 25

Question 20

Domain 4: Revenue Cycle Management

A nonpregnant adult is admitted for sepsis due to pneumonia. Both are present on admission, and severe sepsis is not documented. How are the conditions sequenced?

  • A. Pneumonia as principal diagnosis, sepsis as secondary
  • B. Either one may be principal
  • C. The code for the systemic infection (sepsis) first, pneumonia as a secondary diagnosis
  • D. The severe sepsis code (R65.20) first
Reveal answer and explanation

Answer and explanation

C is correct. When the reason for admission is sepsis plus a localized infection such as pneumonia, the code for the underlying systemic infection goes first. The localized infection is assigned as a secondary diagnosis.

Why the others miss: A: When admission is for the localized infection and sepsis develops afterward, the localized infection is sequenced first. Here both are the reason for admission and sepsis is present on admission. B: The guideline sets the order; it isn't optional here. D: Severe sepsis isn't documented, and an R65.2 code can never be principal anyway.

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, Section I.C.1.d.4, pp. 24–25; I.C.1.d.3

Question 21

Domain 4: Revenue Cycle Management

A patient with primary lung cancer that has spread to bone is admitted for surgical treatment directed only at the bone metastasis. The primary lung cancer remains present. Which is the principal diagnosis?

  • A. The primary lung cancer
  • B. The secondary (metastatic) bone neoplasm, with the lung cancer as an additional code
  • C. Personal history of lung cancer
  • D. A symptom code for bone pain
Reveal answer and explanation

Answer and explanation

B is correct. When treatment is directed toward the secondary site only, the secondary neoplasm is the principal diagnosis, even though the primary cancer is still present.

Why the others miss: A: Treatment in this admission is directed only at the secondary site, not the primary lung cancer. C: A history code requires the primary to have been excised or eradicated, no further treatment directed to that site, and no evidence of remaining primary malignancy there. This primary is still present. D: This admission is for treatment of the metastasis, not solely pain control.

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, Section I.C.2.b, pp. 33–34; I.C.2.d, pp. 34–35; I.C.2.e.2, p. 35; I.C.6.b.5, p. 48

Question 22

Domain 4: Revenue Cycle Management

An analyst is reviewing an adjustment on a Medicare remittance advice. Which statement correctly describes the codes?

  • A. A claim adjustment reason code (CARC) gives the overall reason for the adjustment; a remittance advice remark code (RARC) can add more specific explanation.
  • B. A CARC identifies the diagnosis; a RARC identifies the procedure.
  • C. Both codes identify the patient's insurance policy.
  • D. A RARC replaces the group code that assigns financial responsibility.
Reveal answer and explanation

Answer and explanation

A is correct. CMS describes CARCs as the overall explanation for a financial adjustment, supplemented by RARCs for more specific explanation. Group codes separately assign financial responsibility for the unpaid portion.

Why the others miss: B: Confuses remittance codes with clinical code sets. C: Remittance codes explain adjustments, not policy identity. D: Group codes keep their own role; RARCs don't replace them.

Source: CMS, Health Care Payment and Remittance Advice, Electronic Remit Advice section

Question 23

Domain 4: Revenue Cycle Management

A multiple-choice provider query lists three diagnoses, each supported by clinical indicators cited from the record. What else must it include?

  • A. Every diagnosis that would qualify as a CC or MCC
  • B. Some diagnoses the indicators don't support, so the provider sees a full range
  • C. The expected payment effect of each choice
  • D. An option such as "other (please specify)"
Reveal answer and explanation

Answer and explanation

D is correct. Multiple-choice queries must include "other" (or similar wording) so the provider can give their own answer. The listed options should be clinically relevant only. At least one clinically supported option is required, together with "other" or an equivalent open-ended option.

Why the others miss: A: Building options around CC/MCC status brings payment impact into the query. B: Clinically irrelevant options should be excluded. C: Reimbursement impact must never appear in a query.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §V.II.A, p. 10

Question 24

Domain 5: Compliance

A coder is auditing an inpatient stay from October 12 to October 15, 2026. Which ICD-10-CM Official Guidelines apply?

  • A. FY 2026, effective October 1, 2025
  • B. Whatever encoder version the department happens to have installed
  • C. FY 2027, effective October 1, 2026, through September 30, 2027
  • D. The April update of FY 2026
Reveal answer and explanation

Answer and explanation

C is correct. The FY 2027 guidelines apply from October 1, 2026, through September 30, 2027, and this entire stay falls in that period. Keeping the code set and guidelines current is part of monitoring regulatory change.

Why the others miss: A: FY 2026 ended September 30, 2026. B: Software version doesn't decide which official rules apply. D: The April FY 2026 update was superseded on October 1, 2026.

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, title page (effective dates)

Question 25

Domain 5: Compliance

A manager says the ICD-10-CM Official Guidelines are only best-practice suggestions. Which statement is accurate?

  • A. They're optional recommendations published by AHIMA alone.
  • B. Following them when assigning ICD-10-CM diagnosis codes is required under HIPAA.
  • C. They're required only for Medicare claims.
  • D. They apply only to hospital inpatient coding.
Reveal answer and explanation

Answer and explanation

B is correct. The guidelines state that adherence is required under HIPAA when assigning ICD-10-CM diagnosis codes. They are approved by the four Cooperating Parties: AHA, AHIMA, CMS, and NCHS.

Why the others miss: A: Not optional, and not from AHIMA alone. C: The HIPAA requirement isn't limited to Medicare. D: The guidelines include outpatient rules (Section IV).

Source: ICD-10-CM Official Guidelines for Coding and Reporting, FY 2027, introduction, p. 1

Question 26

Domain 5: Compliance

A coding audit finds that a hospitalist answered a query by stating that the condition was not present. With no new clinical evidence, a CDI specialist sends the same query to a consultant solely to obtain the desired diagnosis. What is the finding?

  • A. Noncompliant: re-sending the same query until a desired response is received isn't allowed.
  • B. Compliant, because different providers were asked.
  • C. Compliant, as long as every query included clinical indicators.
  • D. Compliant, because the consultant is a specialist.
Reveal answer and explanation

Answer and explanation

A is correct. The AHIMA/ACDIS brief calls it noncompliant to keep asking the same query, of the same or different providers, until a desired response is received. A legitimate clarification or escalation is different from repeating a query solely to change an unwanted answer.

Why the others miss: B: The problem is repeating the query solely to obtain the preferred diagnosis, not simply asking another provider. C: Clinical indicators don't fix a pattern of query shopping. D: Specialty doesn't change the rule.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §IX, pp. 20–21

Question 27

Domain 5: Compliance

Under the Medicare hospital Conditions of Participation, how long must hospital medical records be kept, at a minimum, in original or legally reproduced form?

  • A. 2 years
  • B. 3 years
  • C. 4 years
  • D. 5 years
Reveal answer and explanation

Answer and explanation

D is correct. The CoP requires retention for at least 5 years. "At least" makes it a floor: state law or organizational policy can require longer.

Why the others miss: A: Shorter than the federal minimum. B: Shorter than the federal minimum. C: Shorter than the federal minimum.

Source: 42 CFR 482.24, Medical record services (hospital Condition of Participation), §482.24(b)(1)

Question 28

Domain 6: Leadership

An HIM team wants to improve discharge-record completion. Which goal is specific, measurable, and time-bound?

  • A. Reduce the share of eligible discharge records missing a required signature from 12% to 8% within eight weeks.
  • B. Improve record completion as soon as possible.
  • C. Encourage staff to care more about documentation.
  • D. Discuss completion problems at future meetings.
Reveal answer and explanation

Answer and explanation

A is correct. It names the population, the measure, a baseline, a target, and a deadline, so the team can check whether it worked. AHRQ recommends goals that are measurable and feasible, with SMART (specific, measurable, achievable, realistic, time-bound) incremental objectives. The numbers are invented for practice, not a standard.

Why the others miss: B: No measure or deadline. C: An attitude, not a measurable outcome. D: An activity, not a goal.

Source: AHRQ CAHPS Ambulatory Care Improvement Guide, Section 4, Section 4.B.1.a

Question 29

Domain 6: Leadership

An HIM team has approval to try a new registration prompt meant to cut duplicate MPI entries. Which approach follows Plan-Do-Study-Act (PDSA)?

  • A. Turn it on everywhere and assume it works.
  • B. Collect staff opinions but never try it.
  • C. Declare success once the prompt is installed.
  • D. Test it on a small scale, record what happens, compare results with the goal, then adjust or expand.
Reveal answer and explanation

Answer and explanation

D is correct. PDSA plans a small, focused test, carries it out while recording results, studies whether the goal was met, and then acts. Act means adjusting the change for the next cycle or spreading it if it worked.

Why the others miss: A: Skips the small test and the learning step. B: Never reaches Do or Study. C: Installation isn't evidence of improvement.

Source: AHRQ Health Literacy Universal Precautions Toolkit, Tool 2B: Plan-Do-Study-Act, Plan, Do, Study, Act directions

Question 30

Domain 6: Leadership

HIM is writing a provider-query policy. According to the AHIMA/ACDIS brief, what should the query-retention section specify?

  • A. That queries are destroyed once the claim is paid
  • B. That only verbal queries are allowed
  • C. Whether queries are part of the legal health record or the business record
  • D. That queries are kept only in the CDI specialist's email
Reveal answer and explanation

Answer and explanation

C is correct. The policy should specify the queries' record status and how they are stored and managed. Actual queries must remain part of the health record or retrievable in the business record. Retention also follows applicable state requirements and organizational policy.

Why the others miss: A: Queries are kept for auditing, monitoring, and compliance. B: Written and verbal queries are both allowed; verbal ones must be recorded. D: Keeping queries only in one person's email does not establish the required organizational storage, management, and retrieval process.

Source: ACDIS/AHIMA, Guidelines for Achieving a Compliant Query Practice (August 2026), §V.I.G, p. 9; §XIII, p. 27; §XIII.VIII, p. 28

About this practice set

These are original, unofficial questions written by Castleport Test Prep. They are not AHIMA exam questions. They follow the current domain weights (6, 7, 5, 5, 4, and 3 questions for Domains 1, 4, 2, 3, 5, and 6) and are mostly scenario-based. This small set samples each domain; it does not cover every task in the outline. Your score here is feedback on these 30 items only. It isn't a scaled score or a prediction of your result.

Choose an answer before you read the explanation. Then make sure you can say why each wrong option is wrong.

The coding questions use the FY 2027 ICD-10-CM guidelines, effective October 1, 2026–September 30, 2027. The provider-query questions use the final August 2026 ACDIS/AHIMA guidance, which is professional practice guidance, not a regulation. These teaching-source versions do not establish which code edition AHIMA uses on its exam.

Your RHIT domain map

The exam has six domains. Here they are, largest first, with what each one actually asks you to do.

Your RHIT domain map
Study order Domain Exam weight Published scored-question range* What it really tests
1 Domain 1: Data Content, Structure, and Information Governance 19–25% 25–33 Keeping the record complete, correct, and tied to the right patient
2 Domain 4: Revenue Cycle Management 19–25% 25–33 Coding, provider queries, denials, payer rules, and how claims get paid
3 Domain 2: Access, Disclosure, Privacy, and Security 14–18% 18–23 Who can see what, when, and how fast HIPAA says you must respond
4 Domain 5: Compliance 13–17% 17–22 Auditing HI work, reporting problems, and keeping up with rule changes
5 Domain 3: Data Analytics and Use 12–18% 16–23 Pulling and analyzing data, hospital statistics, and HI performance metrics
6 Domain 6: Leadership 9–12% 12–16 Policies, department standards, education, and improvement projects

*Weights come from AHIMA's RHIT content outline, pages 1–2. The item ranges are published in AHIMA's 2016–2022 crosswalk, page 1, Table 1. They are ranges, not a promised exact distribution on each exam; the 130 scored questions cannot include every domain's maximum.

Where to start: If you don't know your weak spots yet, begin with Domains 1 and 4. They have the biggest published ranges. Then let your missed questions, not the table, decide where extra time goes.

Check your materials first. AHIMA's 2016–2022 crosswalk shows changes in domain allocations and tasks, including the change from defining the "legal health record" to identifying and maintaining the designated record set. The domain names stayed the same, so compare the weights and tasks with the current outline rather than judging a resource's version by its headings alone.

Domain 1: Data Content, Structure, and Information Governance (19–25%)

This is the "is the record right?" domain. Expect questions about:

  • Applying documentation rules and standards, such as the federal hospital Conditions of Participation and ICD-10-CM coding conventions
  • Identifying and maintaining the designated record set
  • Fixing record-integrity problems and auditing records for completion
  • Keeping the master patient index (MPI) clean, plus EHR reports, data workflow, and patient portals

Practice: Questions 1–6.

Domain 4: Revenue Cycle Management (19–25%)

This is the largest coding-and-money domain. It covers:

  • Coding the record and using clinical indicators to support accurate coded data
  • Querying providers compliantly, and working with clinical documentation integrity (CDI) staff
  • Managing denials, monitoring discharged-not-final-billed (DNFB) accounts, and analyzing case mix
  • Payer rules (LCDs, NCDs, fee schedules), the chargemaster (CDM), and payment methods and insurance types

Practice: Questions 17–23.

Domain 2: Access, Disclosure, Privacy, and Security (14–18%)

This domain is heavy on timelines and exceptions. It covers:

  • Release of information (ROI), right of access, and accounting of disclosures
  • Record retention: when to keep, archive, or destroy records
  • Reducing privacy and security risk
  • Correcting identity problems such as merges, overlays, and registration errors

Practice: Questions 7–11.

Domain 5: Compliance (13–17%)

This is the "prove it's being done right" domain. It covers:

  • Quality assessments, and monitoring coding, ROI, and CDI compliance
  • Standards for chart completion, coding accuracy, and ROI turnaround
  • Tracking regulatory changes and putting them into practice on time

Practice: Questions 24–27.

Domain 3: Data Analytics and Use (12–18%)

This is the math-and-reporting domain. It covers:

  • Internal and external data sources, extraction, and analysis
  • Reporting to CDC, CMS, MACs, RACs, and insurers
  • Healthcare statistics, reports, graphs, and charts
  • HI metrics such as case mix index (CMI), coding productivity, CDI query rate, and ROI turnaround

Practice: Questions 12–16, plus the worked statistics section below.

Domain 6: Leadership (9–12%)

This is the smallest domain, but it's practical. It covers:

  • Educating others on HI laws and regulations
  • Writing policies and procedures, and setting department standards
  • Collaborating on interoperability and reviewing HI processes
  • Project management principles

Practice: Questions 28–30.

Hospital statistics, worked once

Domain 3 asks you to compile healthcare statistics and analyze HI metrics. Every example below uses the same invented hospital, so you can see how the numbers connect.

Community Hospital, June (30 days): 200 adult and pediatric beds (no change all month) · 5,100 inpatient service days · 1,020 discharges · 4,896 total discharge days (the lengths of stay of everyone discharged in June)

Inpatient bed occupancy rate

Formula: inpatient service days ÷ (bed count × days in the period) × 100

Work: 5,100 ÷ (200 × 30) × 100 = 5,100 ÷ 6,000 × 100 = 85.0%

If the bed count changes mid-month, add up the bed days for each part of the month instead of using one bed count. The Pennsylvania Department of Health shows why this matters.

Average daily inpatient census

Formula: inpatient service days ÷ days in the period

Work: 5,100 ÷ 30 = 170 patients per day

Average length of stay (ALOS)

Formula used here: total discharge days ÷ number of discharges

Work: 4,896 ÷ 1,020 = 4.8 days

Watch the method. Inpatient service days (5,100) and discharge days (4,896) aren't the same number. Service days count everyone in a bed each day; discharge days count the full stays of people who left this month. Published sources also differ. Pennsylvania's Method 1 divides total discharge days by discharges, while the AHA method cited by CDC divides inpatient days by admissions. When a question tells you which numbers to use, use exactly those.

Case mix index (CMI)

Formula: sum of MS-DRG relative weights ÷ number of discharges

Work: four discharges weighted 1.0000, 1.5000, 2.0000, and 0.9000 → 5.40 ÷ 4 = 1.35

A higher CMI means a more complex, resource-intensive caseload. You can't add two CMIs together (California HCAI definition). If CMI jumps while patient volume holds steady, check documentation and coding before deciding the patients really got sicker.

Mean vs. median

Five ROI requests took 2, 3, 3, 4, and 23 days.

  • Mean = 35 ÷ 5 = 7 days
  • Median = the middle value of the ordered list = 3 days

The single 23-day request drags the mean up. The median stays put. That's why the median often describes a "typical" request better when there's an extreme value (NIST/SEMATECH e-Handbook). Don't throw out the slow request, though. Report it; it is still part of the dataset.

Combining two groups: pool, don't average

Two non-overlapping review groups from the same reporting period use the same rule (eligible records missing a required field ÷ all eligible records), with each record counted once:

Combining two groups: pool, don't average
Group Eligible records Incomplete Rate
A 100 10 10%
B 300 15 5%
Combined 400 25 6.25%

Pooled: (10 + 15) ÷ (100 + 300) × 100 = 6.25%. Averaging the two rates, (10% + 5%) ÷ 2 = 7.5%, gives the small group the same pull as the large one. That's the wrong answer for "all 400 records." These numbers are invented for practice.

No calculator of your own on test day. AHIMA's Candidate Guide (p. 13) lists calculators among the items you can't bring. Practice these by hand until the setup is automatic.

Turn missed questions into a review list

A right answer for the wrong reason is still a gap. For every question you miss or guess, fill in one row:

Turn missed questions into a review list
Question My answer and reasoning What I missed The rule, with source Next action
Q14 (example) B. I divided 5,100 by 1,020 I used inpatient service days, not discharge days ALOS here = discharge days ÷ discharges = 4.8 Redo the stats section; write the formula before plugging in numbers

When you redo a question, log that result separately from your first try. A repeat is memory practice, not fresh evidence that you're ready.

Your 6-week RHIT study plan

Assumptions: you've finished, or are finishing, a CAHIIM-accredited HIM program, and you can study five sessions a week at about 75 minutes each. That's 6 hours 15 minutes a week, or 37.5 hours over six weeks. It's a suggested review plan, not an AHIMA requirement or a guarantee. Stay on a topic until you can explain it without the answer key.

Week 1: Baseline and Domain 1

  1. Take all 30 questions above, untimed. Log every miss and every guess.
  2. Read the official content outline once. Mark each task: can explain / shaky / no idea.
  3. Hospital record rules: H&P timing, authentication, verbal orders, and record completion in 42 CFR 482.24. Redo Questions 1–2.
  4. MPI integrity, duplicates and overlays, and the designated record set. Redo Questions 3–4.
  5. ICD-10-CM conventions ("with," documentation by other clinicians, laterality) from the FY 2027 guidelines, Section I. Redo Questions 5–6 and update your log.

Done when: your log lists your three weakest outline tasks.

Week 2: Domain 4, Revenue Cycle Management

  1. Read the August 2026 ACDIS/AHIMA compliant query brief, Section V, pages 7–13. Redo Questions 17–19 and 23.
  2. Sequencing rules for sepsis and neoplasms (guidelines Section I.C.1.d and I.C.2). Redo Questions 20–21.
  3. Payment methods, MS-DRGs, the chargemaster, and insurance types, from your course notes. Write one sentence per Domain 4 task.
  4. Denials and remittance: CARCs, RARCs, and group codes (CMS remittance page), plus DNFB. Redo Question 22.
  5. Explain every wrong option in Questions 17–23 out loud.

Done when: you can explain each Domain 4 task in one sentence.

Week 3: Domain 2, Access, Disclosure, Privacy, and Security

  1. Right of access, 45 CFR 164.524. Redo Questions 7–8.
  2. Accounting of disclosures, 45 CFR 164.528. Redo Question 9.
  3. Breach notification, 45 CFR 164.404, and unique user identification. Redo Questions 10–11.
  4. Retention and disposition, and identity corrections (merges, overlays, registration errors), from your course notes.
  5. Timeline drill: write the access, accounting, and breach-notification deadlines covered in Questions 7–10 from memory, then check the conditions and permitted extensions against the linked regulations.

Done when: you can state those access, accounting, and breach-notification timelines and their stated exceptions without notes.

Week 4: Domain 3 and Domain 5

  1. Work the statistics section above by hand.
  2. Redo Questions 12–16 without notes. Then change the inputs and solve again.
  3. Domain 3 reporting: CDC, CMS, MACs, RACs, and the HI metrics in the outline.
  4. Compliance monitoring and retention. Redo Questions 24–27.
  5. Regulatory change: what updates each October 1 for ICD-10-CM, and how a department rolls it out.

Done when: you can work the statistics examples correctly from a blank page.

Week 5: Domain 6 and timed practice

  1. Leadership tasks. Redo Questions 28–30. Write one SMART goal and one small PDSA test for a real HIM problem.
  2. Timed block A: Questions 1, 3, 5, 7, 9, 11, 12, 14, 17, 19, 21, 23, 24, 26, and 28. Allow 20 minutes 30 seconds for these 15 items, then spend the rest of the session reviewing their explanations.
  3. Review that block and log every miss.
  4. Timed block B: Questions 2, 4, 6, 8, 10, 13, 15, 16, 18, 20, 22, 25, 27, 29, and 30. Use the same 20-minute-30-second limit, then review.
  5. Reteach your top three log entries to yourself or a study partner.

Done when: you've finished both timed blocks and logged every miss. The timing uses the 82-second average in the exam-facts table below. These are repeat attempts for pacing and explanation practice, not fresh readiness evidence.

Week 6: Mixed review and test-day logistics

  1. Answer all 30 questions without opening the explanations. Allow 41 minutes; use the rest of the session to mark guesses and record your reasoning. This is a short practice block, not a full-length RHIT exam.
  2. Review Questions 1–16 and revisit the linked sources for every miss or guess.
  3. Review Questions 17–30 the same way, checking the current query and coding rules.
  4. Fix your two weakest areas.
  5. Logistics: check your Authorization to Test (ATT) dates and Pearson VUE appointment, confirm one acceptable primary ID and one secondary ID under Pearson VUE's current ID rules that match your ATT name, and plan to arrive 30 minutes early. Do light review only.

Done when: the mixed block is reviewed and your IDs are checked.

Adapt the plan

  • Only 4 weeks? Keep Week 1. Combine Weeks 2 and 3, then Weeks 4 and 5, and keep the Week 6 mixed review and logistics. Plan on longer or extra sessions.
  • 10 weeks? Use Weeks 1–2 for the original Week 1 work, Weeks 3–4 for Week 2, Week 5 for Week 3, Weeks 6–7 for Week 4, Week 8 for Week 5, and Weeks 9–10 for Week 6. Use the added time for source review, explaining missed answers, and repeating the supplied timed blocks.
  • Retaking? Start from your score report. Domain scores are reported as percent correct and can't be averaged into your scaled score (Candidate Guide, Appendix D). Use them, together with your log, to choose where to start.

When to apply: Apply when you are ready to test, and plan around your ATT dates. AHIMA provides a 120-calendar-day eligibility window; schedule and take the exam within the start and end dates on your ATT. The Candidate Guide says the window is for scheduling, not studying. Final-term students in a CAHIIM-accredited HIM program can apply early with AHIMA's early tester form. See our AHIMA exam registration guide for the full application steps.

RHIT exam facts

Last verified October 23, 2026, against AHIMA's RHIT page, certification FAQ, exam-information and application pages, and Pearson VUE's AHIMA page.

RHIT exam facts
Question Answer Source
How many questions? 150: 130 scored and 20 unscored pretest questions, mixed in at random AHIMA RHIT page, Exam Specifications
What kind of questions? Multiple choice: four options, one correct answer. Testing recall, application, and analysis AHIMA, About the Exams
How long? 3 hours 30 minutes in all: 5 minutes for the confidentiality agreement, then 3 hours 25 minutes for instructions and questions. No planned breaks, and the clock keeps running if you take one AHIMA Certification FAQ, exam time table
Pace? About 82 seconds per question (205 minutes ÷ 150), before time for instructions, breaks, or review Our arithmetic
Passing score? 300 on a scaled range of 100–400. A scaled score isn't a percent correct, and there's no penalty for guessing AHIMA, About the Exams
Results? Shown right after the exam, with a domain-by-domain breakdown AHIMA Certification FAQ
Where? Pearson VUE test centers only; RHIT isn't offered online Pearson VUE AHIMA page
What do I bring? One acceptable primary ID and one secondary ID, both matching your ATT name. Follow Pearson VUE's current ID rules. No books or resources are required, and personal calculators and reference materials aren't allowed Pearson VUE AHIMA page; AHIMA RHIT page; Candidate Guide, pp. 12–13
Fee? $229 for AHIMA members, $299 for nonmembers. A retake costs the same AHIMA Apply page; AHIMA RHIT page
Who's eligible? Completion of the associate-level academic requirements of a CAHIIM-accredited HIM program, or graduation from a qualifying foreign HIM program covered by an AHIMA reciprocity agreement. Health informatics degrees don't currently qualify AHIMA RHIT page, How to Achieve
Retake wait? 30 days, with a new application and fee AHIMA Apply page; AHIMA RHIT page
Keeping it? Recertify every 2 years with continuing education units (CEUs) and a fee AHIMA RHIT page

How hard is the RHIT exam?

About three in four first-time testers passed in 2025. That's lower than two years earlier.

How hard is the RHIT exam?
Year First-time testers First-time pass rate
2025 1,630 74%
2024 1,541 78%
2023 1,577 84%

Source: AHIMA RHIT page, Certified Professionals and Pass Rates. These are AHIMA-reported rates for first-time testers. They don't predict any one person's result. AHIMA also reports 26,128 certified RHITs as of December 31, 2025.

Common RHIT questions

Can I take the RHIT before I graduate? Yes, if you're in your final term of a qualifying CAHIIM-accredited HIM program, are done with coursework but haven't graduated, or are waiting on transcripts. You apply with an early tester form signed by your program director. Passing early does not authorize you to use RHIT until AHIMA verifies all requirements. If you pass, AHIMA needs your official transcript within one year, or the result is nullified (Candidate Guide, pp. 5, 8, and 15).

Is the RHIT open book? No. AHIMA requires no books or resources for the RHIT. Unlike the coding-only exams, you don't bring code books, and personal reference materials and calculators aren't allowed.

What if I don't pass? The RHIT retake wait is 30 days. Submit a new application and fee; you may apply during the wait, but approval and scheduling are subject to that wait and you need a new ATT before scheduling. Your transcripts stay on file. Start your restudy from the domain percentages on your score report. Details: AHIMA exam retake policy and AHIMA exam results.

How is the RHIT different from the RHIA? The RHIA has different education routes: CAHIIM-accredited bachelor's- or master's-level HIM education, a CAHIIM-approved post-baccalaureate HIM certificate, or a qualifying foreign HIM program under AHIMA reciprocity. See AHIMA's RHIA eligibility requirements. If you later pass the RHIA, it supersedes your RHIT (AHIMA Certification FAQ).

How do I keep the credential? Complete AHIMA's recertification requirements, CEUs plus a fee, every two years. See our AHIMA certification renewal guide.

Sources and verification

Official RHIT exam sources

Teaching sources

How we made this page: The Castleport Test Prep Editorial Team drafted this guide with AI assistance. We checked the exam facts and every practice-question answer against the sources linked here on October 23, 2026. The practice questions, statistics examples, and study plan are original editorial learning tools. They haven't been reviewed by AHIMA, and they aren't a professional coding, legal, or compliance review.

Castleport Test Prep is an independent exam prep publisher. We are not affiliated with, endorsed by, or approved by AHIMA or its Commission on Certification for Health Informatics and Information Management (CCHIIM). RHIT and other exam and credential names are used only to identify their subjects; trademarks belong to their respective owners. Our practice questions are original and unofficial.

By the Castleport Test Prep Editorial Team

RHIT Exam Prep: Domain Map, 6-Week Plan & 30 Free Questions