CMAA NHA Certified Medical Administrative Assistant - Set 4 - Part 2

Correct Answer: Confirm identity per organizational policy

Patient portal onboarding begins with confirming identity per organizational policy, often requiring a photo ID, plus generating an activation code or invitation email, with documentation of enrollment and consent for electronic communication. Option a is incorrect because skipping identity verification is the precise risk that portal onboarding policies exist to prevent, since careless enrollment could give an outside party access to a patient's protected information and messaging. Option b is incorrect because sending a password through social media is insecure and conflicts with the practice's onboarding workflow, which uses approved channels rather than public messaging tools to send activation credentials. Option d is incorrect because enrolling without verification creates the same access risk that any portal-onboarding policy is designed to prevent, since identity confirmation protects the patient's protected information and messaging from misuse.

Correct Answer: Check browser permissions and restart device

Common patient-side issues include camera permission blocks; the CMAA can have the patient check browser permissions, refresh, restart the device, or try a different browser before considering modality conversion to phone. Option a is incorrect because canceling the visit and sending a paper letter abandons the encounter rather than troubleshooting a routine issue that can usually be solved with a quick permission and refresh check. Option b is incorrect because moving the visit to inpatient observation is a clinical decision unrelated to a routine browser permission problem; the modality issue does not change the appropriate care setting at all. Option c is incorrect because charging a fee for telehealth troubleshooting is not standard practice and would discourage patients from completing the encounter, which conflicts with the support role the CMAA plays at this stage.

Correct Answer: Stop; notify HIM; do not merge alone

When a duplicate is suspected, the CMAA stops creating new chart entries, notifies the health information management team, documents the discrepancy, and does not merge unilaterally, since merging requires HIM-level access and review. Option a is incorrect because merging the two records unilaterally bypasses the formal HIM process and audit trail, which exists to confirm identity and preserve the clinical content during the merge action by qualified staff. Option c is incorrect because deleting one of the duplicate records can lose clinical information and is not the appropriate action; HIM combines records carefully so that all clinical content is preserved through the merge process. Option d is incorrect because ignoring the duplicate and proceeding with separate charts fragments the patient's history, undermines safety, and creates downstream billing and clinical issues that the duplicate process is designed to prevent.

Correct Answer: Maintain a single identity across sites

An enterprise master patient index maintains a single identity across multiple facilities, detecting potential duplicates during registration and supporting the integrity of the shared record across the larger health system over time. Option b is incorrect because generating marketing email lists is unrelated to the enterprise master patient index, which focuses on patient identity matching rather than marketing operations or related campaign functions across sites. Option c is incorrect because billing duplicate visits twice would be improper and is the opposite of the integrity the enterprise master patient index supports, which prevents fragmented records and double billing across sites. Option d is incorrect because the enterprise master patient index does not eliminate the need for audit; it complements audit by surfacing potential duplicates that audit and HIM can then evaluate carefully and resolve appropriately.

Correct Answer: Adolescent privacy may limit proxy access

Adolescent privacy laws limit parental access in some states for confidential services such as mental health, sexual health, and substance use, with portals configured to honor those protections through controlled proxy access. Option a is incorrect because unlimited proxy access conflicts with adolescent privacy protections that exist precisely to support confidential care for sensitive services, and many portals are configured specifically to limit such access during adolescence. Option b is incorrect because requiring parents to see all teen records overrides adolescent privacy protections that some states extend for confidential services, which is the opposite of how portal proxy access is typically configured. Option d is incorrect because teens do have privacy rights for certain services in many states, so claiming they never have privacy rights misstates the framework that governs confidential services and proxy access on the portal.

Correct Answer: Real-time eligibility; document; estimate cost

Real-time eligibility through HIPAA transactions confirms active coverage, copay, deductible, coinsurance, and authorization needs, with documentation including date, method, reference number, and any anticipated patient responsibility for the planned encounter. Option a is incorrect because skipping verification entirely sets up downstream denials and patient surprises, which is the opposite of the front-end approach that prevents claim rework and supports accurate financial conversations with patients. Option b is incorrect because using only verbal patient information misses card details, plan rules, and benefit amounts that the system can verify directly, which is why electronic eligibility checks are the documented standard. Option c is incorrect because charging the full cash price up front bypasses the patient's insurance entirely, which conflicts with the verification process that determines what the plan will cover and what the patient owes.

Correct Answer: Verify network status of provider and plan

The CMAA verifies the in-network status of the specific provider and the specific plan, since providers may be in-network for some plans of an insurer but not others, and the answer affects patient cost. Option b is incorrect because saying yes when the patient names a carrier overlooks plan-specific contracts, since the same insurer may have multiple plans with different network statuses for the practice's providers. Option c is incorrect because saying no based on form unfamiliarity is unsupported, since the actual answer requires checking the in-network status with the specific plan and the specific provider in the system. Option d is incorrect because referring to a friend who works there is unprofessional and bypasses the verification process; the CMAA's role is to check the network status using official tools rather than informal hearsay.

Correct Answer: No Surprises Act good faith estimate

The No Surprises Act requires a good faith estimate of expected charges for self-pay or uninsured patients before scheduled services, which supports informed financial decisions and a path to dispute resolution if charges exceed the estimate. Option a is incorrect because the OSHA bloodborne hazard notice covers workplace exposure controls rather than patient cost estimates, so it does not match the federal protection that drives the estimate the patient is requesting today. Option b is incorrect because the Stark Law concerns physician self-referral relationships rather than patient cost estimates, so it does not match the protection that drives the good faith estimate process for self-pay patients. Option d is incorrect because an ICD-10 narrative description sheet is a coding reference rather than a federal patient-protection notice, so it does not match the requirement that drives the cost estimate the patient is requesting.

Correct Answer: Coverage details can change unexpectedly

Coverage details can change unexpectedly because of new employer plans, dependent status changes, or open enrollment shifts, so verification at scheduling, before, and at arrival catches updates the patient may not remember. Option a is incorrect because patients do not always remember every detail of their plan, so relying solely on the patient's recall risks denials when coverage has changed since the most recent visit at the practice. Option c is incorrect because insurance can change mid-year through job changes, marriage, divorce, and benefit updates, so the rechecks are designed precisely because coverage is not stable across an entire calendar year for many patients. Option d is incorrect because card photos can become outdated when the patient's plan changes or a new card is issued, so verification rather than reliance on a photo confirms that coverage remains active and accurate.

Correct Answer: Insurance card; ID; medication list

Standard new-patient instructions include bringing the insurance card, photo ID, copay if applicable, list of medications, and any prior records or imaging, plus any specific clinical instructions such as fasting or medication holds. Option a is incorrect because birth certificates, passports, and pet papers are not standard pre-appointment items; the practice asks for identification and insurance information rather than these unrelated personal or family documents. Option b is incorrect because tax returns, lease agreements, and deeds are unrelated to the clinical visit and not part of standard pre-appointment instructions; the practice focuses on clinical and insurance information at intake. Option c is incorrect because school records, hobby essays, and resumes are unrelated to the clinical visit and not part of standard pre-appointment instructions; intake focuses on identification, coverage, and clinical history information.

Correct Answer: Identity; demographics; insurance; contacts

Standard new-patient registration captures identity, demographics, insurance, emergency contacts, pharmacy, and other elements that support clinical care, billing, communication, and population health analytics across the care relationship at the practice. Option b is incorrect because favorite color, pet name, and birthday cake are not part of registration data capture; the practice focuses on identity, contact, insurance, and pharmacy details rather than personal preferences unrelated to clinical care. Option c is incorrect because hometown news, sports stats, and weather are unrelated to clinical care and are not collected at registration, which focuses on identifying the patient and capturing the information needed to support the encounter. Option d is incorrect because music preferences, vacation plans, and films are unrelated to clinical care and are not collected at registration, which focuses on identifying the patient and capturing information needed for the visit.

Correct Answer: Notice of Privacy Practices acknowledgment

The Notice of Privacy Practices acknowledgment confirms the patient received the privacy notice at first encounter, with HIPAA requiring a good-faith effort to obtain a written acknowledgment from the patient at registration. Option a is incorrect because the Assignment of Benefits authorizes the insurer to pay the practice directly, which is a billing form distinct from the privacy notice acknowledgment that the patient is signing in this scenario today. Option b is incorrect because the Advance Beneficiary Notice informs Medicare patients that a service may not be covered, which is a different document tied to medical-necessity decisions rather than the privacy notice acknowledgment. Option d is incorrect because the OSHA exposure control plan describes workplace bloodborne-pathogen protections, which is unrelated to the privacy notice acknowledgment the patient is signing as part of the registration packet today.

Correct Answer: Assignment of Benefits

The Assignment of Benefits authorizes the insurer to pay the practice directly rather than the patient, supporting direct billing and applying to ongoing care once signed at the registration encounter. Option a is incorrect because the Notice of Privacy Practices describes how protected information may be used and disclosed under HIPAA, which is a privacy document distinct from the billing-direction form being signed today. Option b is incorrect because a living will is an advance directive describing wishes about life-sustaining treatments, which is unrelated to the billing-direction authorization the patient is signing as part of the registration packet. Option c is incorrect because the Universal Protocol checklist supports surgical safety with pre-procedure verification, site marking, and time-out, which is unrelated to billing direction and not used during routine registration encounters.

Correct Answer: Scan; place in correct section; flag clinician

Advance directives such as durable power of attorney are scanned into the EHR, placed in the correct section, and flagged for clinical review and reconfirmation, supporting decision-making during incapacity at the practice. Option a is incorrect because throwing the document away erases an important advance directive and conflicts with the patient's right to formulate and communicate care decisions, including through documented surrogate authority during incapacity. Option c is incorrect because emailing the document outside the organization without proper authorization can violate privacy expectations and is unnecessary, since storage in the EHR is the standard handling for advance directives at registration. Option d is incorrect because attaching the document to a billing claim only does not support clinical review during incapacity, which is the underlying purpose of capturing the advance directive in the patient's chart.

Correct Answer: PHQ-9 for depression severity

The PHQ-9 is a widely used standardized screening tool for depression severity in primary care, often paired with the PHQ-2 as a brief initial screen, and supports treatment decisions and monitoring across the care relationship. Option b is incorrect because the Glasgow Coma Scale assesses level of consciousness in trauma patients, which is a different clinical purpose than depression screening at routine adult primary care intake during a regular visit. Option c is incorrect because APGAR scores newborn assessment at one and five minutes after birth, which is unrelated to adult depression screening at primary care intake during a regular visit at the practice. Option d is incorrect because the Snellen chart tests visual acuity at distance, which is unrelated to depression screening at primary care intake and serves a different clinical purpose during the assessment of a patient.

Correct Answer: Coordination of benefits determination

Coordination of benefits determines the order of payment among multiple plans, with the patient's own employer plan typically primary over a spouse's plan and other rules applying to dependents and Medicare situations. Option a is incorrect because the Universal Protocol time-out is a pre-procedure surgical safety step, not an insurance coordination determination, so it does not match the billing setup the CMAA must complete in this scenario. Option b is incorrect because RACE describes fire response steps including Rescue, Alarm, Contain, and Extinguish or Evacuate, which is unrelated to coordinating insurance benefits across multiple plans for a single patient. Option c is incorrect because PHQ-9 mental health screening is a depression assessment tool, which is unrelated to coordination of benefits across multiple plans for a single patient at the registration desk during intake.

Correct Answer: Birthday rule for dependent children

The birthday rule sets the parent whose birthday by month and day comes first in the calendar year as primary for dependent children, regardless of the year of birth or which parent earns more. Option a is incorrect because the custody rule applies when parents are divorced or separated, prioritizing the plan of the custodial parent, which is a different scenario than the married-parent scenario described here. Option b is incorrect because an alphabetical rule is not used to determine primary coverage; the birthday rule and custody rule are the actual frameworks for pediatric coordination decisions across the major commercial plans. Option d is incorrect because the last claim filed does not determine primary coverage; the birthday rule applies to married parents and the custody rule applies to separated or divorced parents during pediatric encounters.

Correct Answer: Employer plan primary; Medicare secondary

For Medicare due to age and active employment with an employer of twenty or more employees, the employer plan is primary and Medicare is secondary, reflecting Medicare's coordination of benefits framework for active workers. Option a is incorrect because Medicare primary with employer secondary applies in different scenarios such as smaller employers, retirees, or specific situations, but not to the active-employment large-employer case described in this scenario. Option c is incorrect because submitting claims to both plans simultaneously without coordination conflicts with the Medicare coordination framework, which establishes a primary-secondary order rather than parallel processing of identical claim transactions. Option d is incorrect because paying cash with no claim ignores the patient's insurance entirely, which conflicts with the coordination of benefits framework and the assignment of benefits the patient typically signs at registration.

Correct Answer: Verify Medicaid monthly; verify other payers periodically

Medicaid is verified monthly because eligibility changes frequently, while Medicare and commercial coverage are verified periodically, with all payers rechecked before each visit and at arrival to catch updates ahead of billing. Option b is incorrect because verifying only at the first visit ever misses changes in coverage, which is exactly why monthly Medicaid verification and periodic rechecks for other payers are part of the practice's billing workflow. Option c is incorrect because verifying only after a denial creates rework and can leave the patient with surprise responsibility, which is the opposite of the front-end verification approach that protects both the patient and the practice. Option d is incorrect because verifying only when the patient requests leaves a gap that produces denials, since coverage changes happen even when the patient does not realize or remember to mention the change to the practice.

Correct Answer: Bill the Medicare Advantage plan directly

Medicare Advantage replaces original Medicare for the patient, so the practice bills the Medicare Advantage plan directly using the plan's identifier rather than submitting claims to original Medicare for these patients. Option a is incorrect because billing original Medicare instead of the Medicare Advantage plan creates denials and rework, since the patient has elected the private plan to provide their Medicare benefits during this enrollment year. Option b is incorrect because refusing to bill any plan is not appropriate when the patient has active Medicare Advantage coverage, which the practice should bill in line with the participation status and signed assignment of benefits. Option d is incorrect because billing only the patient out-of-pocket bypasses the active Medicare Advantage coverage that the patient has elected, which conflicts with the standard billing approach for patients with this kind of plan.