Font size
S
M
L
XL
WorksheetsRKE110 Mid Term Examination
Total questions: 91
Worksheet time: 46mins
Name
Class
Date
1.
An HIM professional translates a physician's documented diagnosis into an ICD-10 code, which is then used by the finance department to bill BPJS Kesehatan. This scenario best illustrates which core function of the HIM professional?
a)
Acting as a Chief Privacy Officer.
b)
Performing a technical systems analysis.
c)
Serving as a "bridge" connecting clinical, administrative, and technological domains.
d)
Providing direct clinical decision support to physicians.
e)
Managing the hospital's hardware and software procurement.
2.
Which Indonesian government body is responsible for setting national health policy, issuing regulations like PMK 24/2022, and overseeing the implementation of the Digital Health Transformation Strategy (DHTS)?
a)
Badan Penyelenggara Jaminan Sosial (BPJS) Kesehatan.
b)
Rumah Sakit Umum Pusat Nasional Dr. Cipto Mangunkusumo (RSCM).
c)
Kementerian Kesehatan (Kemenkes).
d)
Pusat Kesehatan Masyarakat (Puskesmas).
e)
Ikatan Dokter Indonesia (IDI).
3.
What is the primary role of BPJS Kesehatan within the Indonesian healthcare ecosystem?
a)
To directly provide primary care services in rural communities.
b)
To accredit hospitals and clinics based on quality standards.
c)
To administer the Jaminan Kesehatan Nasional (JKN) program, serving as the main payer for most healthcare services.
d)
To develop and maintain the SATUSEHAT technology platform.
e)
To regulate the education and certification of medical professionals.
4.
The Indonesian government's entire digital health strategy is a direct response to which long-standing core challenge in the nation's healthcare system?
a)
A shortage of pharmaceutical manufacturing facilities.
b)
An over-reliance on traditional medicine.
c)
Systemic fragmentation and the creation of data silos across the archipelago.
d)
The high cost of medical education.
e)
A lack of private investment in specialty hospitals.
5.
The "Policy-Law-Technology Stack" is a framework used to understand the government's comprehensive approach to healthcare reform. Which component represents the "WHY" or the national strategic vision?
a)
Peraturan Menteri Kesehatan (PMK) Nomor 24 Tahun 2022.
b)
The SATUSEHAT Platform.
c)
The Digital Health Transformation Strategy (DHTS).
d)
The Jaminan Kesehatan Nasional (JKN) program.
e)
The establishment of the Puskesmas network.
6.
Which component of the "Policy-Law-Technology Stack" represents the "MUST" or the legal mandate that gives the national vision its power?
a)
The Digital Health Transformation Strategy (DHTS).
b)
The SATUSEHAT Platform.
c)
The establishment of BPJS Kesehatan.
d)
Peraturan Menteri Kesehatan (PMK) Nomor 24 Tahun 2022.
e)
The AHIMA Code of Ethics.
7.
What is the primary purpose of the SATUSEHAT platform?
a)
To serve as a billing and claims processing system for BPJS Kesehatan.
b)
To function as a national Health Information Exchange (HIE), integrating data from all RME systems to create a single health record for every citizen.
c)
To provide a telemedicine consultation service directly to patients.
d)
To manage the payroll and human resources for all public hospitals.
e)
To publish public health statistics and research findings for the general public.
8.
A nurse records a patient's temperature as "38.2 C". According to the definitions used in this course, this single, objective fact is best classified as:
a)
Health Knowledge.
b)
Health Wisdom.
c)
Health Information.
d)
Health Data.
e)
Health Analytics.
9.
A physician reviews a patient's chart and notes, "The patient's blood pressure, measured at 09:00, is 150/95 mmHg, which is classified as Stage 2 Hypertension." This statement, which organizes raw facts and provides context and meaning, is best classified as:
a)
Health Data.
b)
Health Information.
c)
Health Knowledge.
d)
Health Wisdom.
e)
Health Standard.
10.
In the DIKW (Data-Information-Knowledge-Wisdom) pyramid, what is the process that transforms "Information" into "Knowledge"?
a)
The raw recording of objective facts and measurements.
b)
The application of judgment and experience to make a final decision.
c)
The organization and contextualization of raw facts.
d)
The synthesis of information to identify patterns, trends, and relationships.
e)
The secure storage of digital files in a database.
11.
A public health analyst at Kemenkes reviews aggregated data from SATUSEHAT and concludes, "The geographic clustering of 50 new dengue cases in a specific sub-district represents a statistically significant outbreak compared to historical averages." This conclusion represents which level of the DIKW pyramid?
a)
Data.
b)
Information.
c)
Knowledge.
d)
Wisdom.
e)
System.
12.
Based on the knowledge that a dengue outbreak is underway, a Ministry of Health official decides to "dispatch vector control teams for targeted fogging and launch a public health education campaign in the affected area." This decision, which applies knowledge with judgment to take effective action, represents which level of the DIKW pyramid?
a)
Data.
b)
Information.
c)
Knowledge.
d)
Wisdom.
e)
Process.
13.
Which article of PMK 24/2022 contains the core mandate obligating every *Fasilitas Pelayanan Kesehatan* (Fasyankes) in Indonesia to implement an Electronic Medical Record (RME) system?
a)
Article 1.
b)
Article 3.
c)
Article 25.
d)
Article 26.
e)
Article 29.
14.
PMK 24/2022 establishes a nuanced concept of ownership regarding medical records. According to Articles 25 and 26, which statement is correct?
a)
The patient owns both the digital record file and its content.
b)
The healthcare facility owns both the digital record file and its content.
c)
The Ministry of Health owns all medical records in the country.
d)
The healthcare facility owns the digital record file, but the patient owns the health information (content) within the record.
e)
BPJS Kesehatan owns the records for all patients covered under the JKN program.
15.
A patient's family member calls the hospital asking for an update on the patient's condition. According to Article 29 of PMK 24/2022, what is the HIM professional's primary duty?
a)
To provide a general, non-specific update to be helpful.
b)
To transfer the call directly to the patient's room.
c)
To check if the patient has provided consent before releasing any information.
d)
To uphold the duty of confidentiality and refuse to disclose any information without the patient's valid authorization.
e)
To provide the information, as family members have an automatic right to know.
16.
Which article of PMK 24/2022 legally establishes the SATUSEHAT network as the required "data highway" by mandating that RME systems must connect to the Ministry of Health's platform for data transfer?
a)
Article 3.
b)
Article 24.
c)
Article 25.
d)
Article 26.
e)
Article 29.
17.
The passage of PMK 24/2022, with its firm deadline for RME adoption, had what immediate and significant effect on the HIM profession in Indonesia?
a)
It decreased the need for HIM professionals as systems became automated.
b)
It shifted the focus of HIM work entirely to paper record management.
c)
It created an immediate, massive, and nationwide demand for a workforce skilled in managing digital health information.
d)
It limited the scope of HIM careers to only roles within the Ministry of Health.
e)
It made the HIM profession optional for most healthcare facilities.
18.
A patient from Surabaya is treated in a Jakarta emergency room. The Jakarta doctor is able to access the patient's medical history from their primary care clinic in Surabaya. This seamless sharing of information is the primary goal of which national initiative?
a)
The BPJS Kesehatan premium collection system.
b)
The hospital accreditation process.
c)
The SATUSEHAT platform.
d)
The national pharmaceutical supply chain.
e)
The medical school admissions system.
19.
The DIKW pyramid demonstrates that the quality of high-level wisdom and decision-making is entirely dependent on what?
a)
The speed of the hospital's internet connection.
b)
The number of managers involved in the decision.
c)
The quality and integrity of the foundational raw data.
d)
The brand of the Electronic Health Record software used.
e)
The amount of data stored.
20.
What is the official Indonesian legal term for an Electronic Health Record (EHR), as defined in PMK 24/2022?
a)
Sistem Informasi Kesehatan (SIK).
b)
Rekam Medis Elektronik (RME).
c)
Catatan Pasien Digital (CPD).
d)
Dokumen Kesehatan Terpadu (DKT).
e)
Aplikasi Kesehatan Nasional (AKN).
21.
Which of the following represents the most diverse set of career pathways available to an HIM graduate?
a)
Only medical coding in a hospital setting.
b)
Only IT helpdesk support for a clinic.
c)
Only managing physical record storage rooms.
d)
Roles in data analysis, management, consulting, and compliance, from technical specialist to executive leader.
e)
Only administrative roles related to patient scheduling.
22.
The term *Fasilitas Pelayanan Kesehatan* (Fasyankes), as used in PMK 24/2022, refers to:
a)
Only large, government-owned hospitals.
b)
Only private specialty clinics.
c)
Only community health centers (Puskesmas).
d)
All healthcare providers, from solo physician practices and clinics to large hospitals and labs.
e)
Only facilities that are members of BPJS Kesehatan.
23.
The Digital Health Transformation Strategy (DHTS) is designated as which of the six pillars of the broader national health transformation?
a)
The first pillar (Primary Services Transformation).
b)
The second pillar (Referral Services Transformation).
c)
The third pillar (Health Resilience System Transformation).
d)
The fifth pillar (Health HR Transformation).
e)
The sixth pillar (Health Technology Transformation).
24.
The work of HIM professionals in ensuring accurate clinical coding and claims data management directly contributes to a hospital's financial viability. This elevates the HIM department from a simple administrative cost center to a:
a)
Clinical research department.
b)
Public relations department.
c)
Strategic financial asset and economic engine.
d)
Patient care delivery unit.
e)
Physical plant and maintenance unit.
25.
Which statement accurately reflects the relationship between the HIM profession and Indonesia's national development goals?
a)
The HIM profession is unrelated to national development goals.
b)
The HIM profession is being trained to become the essential human infrastructure for a significant national development project in digital health.
c)
The HIM profession's impact is limited to improving the efficiency of individual private hospitals.
d)
The HIM profession is a temporary role needed only during the transition from paper to digital records.
e)
The HIM profession focuses primarily on international health standards, not national goals.
26.
The backbone of Indonesia's primary care system, providing comprehensive health services at the sub-district level, is the:
a)
Rumah Sakit (Hospital).
b)
Klinik Pratama (Private Primary Clinic).
c)
Apotek (Pharmacy).
d)
Laboratorium Kesehatan (Health Laboratory).
e)
Puskesmas (Community Health Center).
27.
A key learning philosophy of the revised RKE110 course is to move away from abstract IT concepts and instead present every concept as an essential tool or rulebook for a future HIM professional in which specific context?
a)
The global healthcare technology market.
b)
The American healthcare system (HIPAA).
c)
The Indonesian healthcare system.
d)
The European Union's GDPR framework.
e)
A purely theoretical academic context.
28.
The transformation from data to information is described as being the direct result of the meticulous work of healthcare professionals, with the HIM professional playing which specific role?
a)
A secondary, supportive role.
b)
A role focused only on the final analysis of information.
c)
A central, foundational role as the guardian of data quality.
d)
A role that becomes obsolete once a system is electronic.
e)
A role limited to data entry.
29.
The "Policy-Law-Technology Stack" framework helps students understand the interconnectedness of the government's approach to healthcare reform. This framework was deliberately introduced in Week 1 and recalled in Week 2 as what kind of strategy?
a)
A technical programming strategy.
b)
A financial accounting strategy.
c)
A clinical treatment strategy.
d)
A deliberate pedagogical strategy to reinforce a critical conceptual model.
e)
A short-term marketing strategy.
30.
A small clinic uses a digital system to store its patient charts. The system is used only by the doctors and nurses within that single clinic, and if a patient needs to be referred to a hospital, the staff must print the record and give it to the patient. This system is best described as a(n):
a)
Electronic Health Record (EHR).
b)
Personal Health Record (PHR).
c)
Hospital Information System (HIS).
d)
Electronic Medical Record (EMR).
e)
National Health Network (NHN).
31.
A patient's health record contains information from their primary care doctor, a specialist cardiologist at a different hospital, a laboratory, and an imaging center. All authorized providers can securely access and contribute to this single, comprehensive record. This system, designed for interoperability across multiple organizations, is best described as a(n):
a)
Electronic Medical Record (EMR).
b)
Electronic Health Record (EHR).
c)
Personal Health Record (PHR).
d)
Administrative Information System (AIS).
e)
Standalone Billing System (SBS).
32.
A patient uses a mobile application on their smartphone to manage their health. The app pulls in data from their official hospital record via SATUSEHAT, but also allows them to add their own data from a wearable fitness tracker and a home blood pressure cuff. This patient-owned and managed record is a(n):
a)
Electronic Medical Record (EMR).
b)
Electronic Health Record (EHR).
c)
Personal Health Record (PHR).
d)
Hospital Information System (HIS).
e)
Clinical Decision Support System (CDSS).
33.
The distinction between an EMR and an EHR is critical in the Indonesian context because PMK 24/2022's mandate for all RME systems to connect to SATUSEHAT effectively requires facilities to implement systems with the interoperable capabilities of a true:
a)
EMR.
b)
PHR.
c)
EHR.
d)
HIS.
e)
Simple database.
34.
A hospital's information system includes modules for patient registration (ADT), appointment scheduling, and billing/claims management for BPJS Kesehatan. These modules are best classified as:
a)
Clinical Information Systems.
b)
Administrative Information Systems.
c)
Personal Health Records.
d)
Laboratory Information Systems.
e)
Picture Archiving and Communication Systems (PACS).
35.
A physician uses the hospital's information system to electronically enter an order for a lab test and to prescribe a medication. These functions are part of a(n):
a)
Clinical Information System.
b)
Administrative Information System.
c)
Financial Information System.
d)
Human Resources Information System.
e)
Inventory Management System.
36.
When a doctor prescribes a new medication, the EHR automatically checks the patient's other medications and lab results, then displays an alert warning of a potential dangerous interaction. According to the IOM framework, this is an example of which core EHR function?
a)
Result Management.
b)
Health Information and Data.
c)
Patient Support.
d)
Decision Support.
e)
Reporting and Population Health.
37.
The Ministry of Health uses anonymized, aggregated data from thousands of EHRs connected to SATUSEHAT to track immunization rates across Indonesia in real-time. According to the IOM framework, this is an example of which core EHR function?
a)
Order Management.
b)
Patient Support.
c)
Result Management.
d)
Electronic Communication and Connectivity.
e)
Reporting and Population Health.
38.
A patient registration form has the field for the patient's BPJS insurance number left blank. This error violates which AHIMA data quality characteristic?
a)
Accuracy.
b)
Consistency.
c)
Comprehensiveness.
d)
Timeliness.
e)
Granularity.
39.
A patient's name is spelled "Budi Santosa" in the registration system but "Budi Santoso" in the laboratory system. This discrepancy violates which AHIMA data quality characteristic?
a)
Accuracy.
b)
Relevancy.
c)
Granularity.
d)
Currency.
e)
Accessibility.
40.
A patient's address listed in the EHR is from their last visit five years ago, even though they moved last month. This data is not up-to-date, violating which AHIMA data quality characteristic?
a)
Precision.
b)
Definition.
c)
Currency.
d)
Comprehensiveness.
e)
Consistency.
41.
A physician documents a patient's diagnosis simply as "Sakit perut" (Stomach ache). For billing and clinical purposes, a more specific diagnosis like "Acute gastritis" is needed. The original diagnosis lacks the appropriate level of detail, violating which AHIMA data quality characteristic?
a)
Relevancy.
b)
Granularity.
c)
Accessibility.
d)
Timeliness.
e)
Currency.
42.
A nurse records a newborn's weight as "~3 kg" instead of the exact measurement of "3.12 kg". The use of an approximation violates which AHIMA data quality characteristic?
a)
Comprehensiveness.
b)
Definition.
c)
Precision.
d)
Relevancy.
e)
Consistency.
43.
A critical lab result is obtained at 10:00 AM, but the lab technician does not enter it into the EHR until the end of their shift at 4:00 PM. This delay violates which AHIMA data quality characteristic?
a)
Accuracy.
b)
Timeliness.
c)
Granularity.
d)
Consistency.
e)
Definition.
44.
The overall administration, through clearly defined procedures and plans, that assures the availability, integrity, security, and usability of data is known as:
a)
Data Entry.
b)
Data Governance.
c)
Data Storage.
d)
Data Deletion.
e)
Data Migration.
45.
Within a data governance framework, what is the title for an individual with formal responsibility and accountability for managing data assets, defining business rules, and monitoring data quality within a specific domain (e.g., patient demographic data)?
a)
Data User.
b)
Database Administrator.
c)
Chief Executive Officer.
d)
Data Steward.
e)
IT Technician.
46.
The ability of different health information systems to access, exchange, integrate, and use data in a coordinated manner is the definition of:
a)
Data Storage.
b)
Data Encryption.
c)
Interoperability.
d)
Data Siloing.
e)
System Administration.
47.
A hospital emails a patient's discharge summary as a PDF to a primary care clinic. The clinic receives the file, but a staff member must manually open it, read it, and re-enter the information into their own system. According to the HIMSS framework, this represents which level of interoperability?
a)
Foundational.
b)
Structural.
c)
Semantic.
d)
Organizational.
e)
None.
48.
An RME system sends a referral message to SATUSEHAT using a standardized format where the patient's name is always in the "Patient Name" field and the diagnosis is always in the "Diagnosis" field. The receiving system can automatically parse this information and file it correctly. This represents which level of interoperability?
a)
Foundational.
b)
Structural.
c)
Semantic.
d)
Organizational.
e)
Functional.
49.
A hospital in Jakarta sends a message to a Puskesmas in Sumatra containing the code "I10". Both systems are programmed to unambiguously understand that "I10" represents the precise clinical concept of "Essential (primary) hypertension". This shared understanding of meaning represents which level of interoperability?
a)
Foundational.
b)
Structural.
c)
Semantic.
d)
Organizational.
e)
Technical.
50.
The regulations from Kemenkes, such as PMK 24/2022, and the legal participation agreements that govern how data on the SATUSEHAT platform can be used, represent which level of interoperability?
a)
Foundational.
b)
Structural.
c)
Semantic.
d)
Organizational.
e)
Foundational.
51.
Which data standard's primary purpose is classification for billing, reimbursement (e.g., for BPJS Kesehatan), and public health statistics?
a)
SNOMED CT.
b)
HL7 FHIR.
c)
DICOM.
d)
ICD-10.
e)
LOINC.
52.
Which data standard is a comprehensive, multilingual clinical *terminology* designed for the detailed and granular documentation of clinical information (diagnoses, symptoms, procedures) directly within an EHR at the point of care?
a)
SNOMED CT.
b)
HL7 FHIR.
c)
ICD-10.
d)
CPT.
e)
NDC.
53.
Which of the following is a next-generation *transport standard* that defines a modern, web-based method (API) for exchanging healthcare information electronically and is the foundational technology for the SATUSEHAT platform?
a)
SNOMED CT.
b)
HL7 FHIR.
c)
ICD-10.
d)
PDF.
e)
XML.
54.
What is the relationship between SNOMED CT and ICD-10 in a modern EHR?
a)
They are direct competitors, and a hospital must choose only one.
b)
SNOMED CT has replaced ICD-10 for all purposes.
c)
They are complementary partners; SNOMED CT is used for detailed clinical documentation, and this can be mapped to the less granular ICD-10 for billing.
d)
ICD-10 is used for clinical documentation, and SNOMED CT is used for billing.
e)
They are both transport standards used for sending data.
55.
A key innovation of HL7 FHIR is that it breaks down health data into small, modular, and standardized blocks called:
a)
Files.
b)
Packets.
c)
Documents.
d)
Resources.
e)
Segments.
56.
Which of the following is the best analogy to describe the different roles of ICD-10, SNOMED CT, and HL7 FHIR?
a)
ICD-10 is the engine, SNOMED CT is the fuel, and HL7 FHIR is the car.
b)
ICD-10 is the postal code, SNOMED CT is the full street address, and HL7 FHIR is the postal service.
c)
ICD-10 is the hardware, SNOMED CT is the software, and HL7 FHIR is the network.
d)
ICD-10 is the doctor, SNOMED CT is the nurse, and HL7 FHIR is the hospital.
e)
ICD-10 is the question, SNOMED CT is the answer, and HL7 FHIR is the textbook.
57.
A ransomware attack encrypts a hospital's EHR system, making all patient records inaccessible to doctors and nurses. This is a direct attack on which principle of the CIA Triad?
a)
Confidentiality.
b)
Integrity.
c)
Availability.
d)
Accountability.
e)
Authenticity.
58.
A hospital clerk uses their legitimate login credentials to look up the medical record of a local celebrity out of personal curiosity. This action is a direct violation of which principle of the CIA Triad?
a)
Confidentiality.
b)
Integrity.
c)
Availability.
d)
Portability.
e)
Scalability.
59.
A hacker gains access to a hospital's database and maliciously changes a patient's documented allergy from "Penicillin" to "None." This act of unauthorized data alteration is a direct attack on which principle of the CIA Triad?
a)
Confidentiality.
b)
Integrity.
c)
Availability.
d)
Durability.
e)
Relevancy.
60.
A nurse accidentally sends an email containing a list of patients and their diagnoses to the wrong recipient outside the hospital. This incident is best classified as a data breach caused by what type of threat?
a)
An external threat from a hacker.
b)
A malicious insider threat.
c)
An unintentional/careless insider threat.
d)
A natural disaster.
e)
A hardware failure.
61.
A hospital requires all employees to attend a mandatory annual training session on how to recognize phishing emails and protect patient data. This is an example of which type of safeguard?
a)
Physical Safeguard.
b)
Technical Safeguard.
c)
Administrative Safeguard.
d)
Network Safeguard.
e)
Hardware Safeguard.
62.
A hospital's server room is protected by a keycard access system, and only authorized IT and HIM staff are allowed to enter. This measure is an example of which type of safeguard?
a)
Physical Safeguard.
b)
Technical Safeguard.
c)
Administrative Safeguard.
d)
Software Safeguard.
e)
Legal Safeguard.
63.
An EHR system is configured to automatically log a user out after five minutes of inactivity. This is an example of which type of safeguard?
a)
Physical Safeguard.
b)
Technical Safeguard.
c)
Administrative Safeguard.
d)
Procedural Safeguard.
e)
Personnel Safeguard.
64.
The process of converting electronic data into an unreadable, scrambled format that can only be unlocked with a specific key is known as:
a)
Auditing.
b)
Authentication.
c)
Deletion.
d)
Encryption.
e)
Archiving.
65.
An HIM professional ensures that the data in the EHR is accurate and complete so that clinicians can make the best possible treatment decisions. This action primarily upholds which of the four pillars of bioethics?
a)
Justice.
b)
Autonomy.
c)
Beneficence.
d)
Nonmaleficence.
e)
Confidentiality.
66.
An HIM professional rigorously protects patient data from security breaches to prevent potential identity theft, financial loss, or social stigma for the patient. This action primarily upholds which of the four pillars of bioethics?
a)
Justice.
b)
Autonomy.
c)
Beneficence.
d)
Nonmaleficence.
e)
Integrity.
67.
An HIM professional promptly and respectfully processes a patient's request for a copy of their own medical record. This action primarily upholds which of the four pillars of bioethics?
a)
Justice.
b)
Autonomy.
c)
Beneficence.
d)
Nonmaleficence.
e)
Availability.
68.
An HIM professional ensures that all patient requests for information are processed with the same level of care and priority, regardless of the patient's social status or ability to pay. This action primarily upholds which of the four pillars of bioethics?
a)
Justice.
b)
Autonomy.
c)
Beneficence.
d)
Nonmaleficence.
e)
Consistency.
69.
Which principle of the AHIMA Code of Ethics is considered the cornerstone of the profession and directs professionals to safeguard all confidential patient information?
a)
Principle I.
b)
Principle II.
c)
Principle IV.
d)
Principle V.
e)
Principle VI.
70.
A hospital manager pressures a medical coder to add a diagnosis code that is not supported by the physician's documentation in order to increase the reimbursement from BPJS Kesehatan. According to Principle IV of the AHIMA Code of Ethics, what is the correct action for the coder to take?
a)
Add the code as requested to help the hospital's finances.
b)
Ask the physician to add the diagnosis, even if it is not accurate.
c)
Refuse to participate in or conceal the unethical practice.
d)
Add the code but make an anonymous note about it.
e)
Ignore the request and hope the manager forgets.
71.
The development of the SATUSEHAT platform creates an ethical tension between two competing values. Which statement best describes this national-scale ethical dilemma?
a)
The need for expensive technology vs. the need for more hospital beds.
b)
The benefit of using aggregated data for public good (Beneficence) vs. the risk to individual patient privacy (Autonomy & Nonmaleficence).
c)
The desire of doctors to use new technology vs. the resistance of older nurses.
d)
The goals of private hospitals vs. the goals of public Puskesmas.
e)
The need for fast data access vs. the need for long-term data storage.
72.
When faced with a complex ethical problem, what is the recommended first step in the 5-step ethical decision-making framework?
a)
Choose an option and justify your decision.
b)
Brainstorm and evaluate options.
c)
Consult resources like the AHIMA Code of Ethics.
d)
Identify the ethical principles in conflict.
e)
Identify the problem and collect all the relevant facts.
73.
The technical policy of assigning each user a unique username and password and granting them access to only the minimum amount of data necessary to perform their job is known as:
a)
The Principle of Open Access.
b)
The Principle of Data Maximization.
c)
The Principle of Least Privilege.
d)
The Principle of First Refusal.
e)
The Principle of Universal Access.
74.
The use of hardware and software mechanisms to record and examine all activity in an information system, creating a digital trail of who accessed what information and when, is which type of technical safeguard?
a)
Encryption.
b)
Access Controls.
c)
Audit Controls.
d)
Transmission Security.
e)
Firewall.
75.
In the context of the AHIMA Code of Ethics, which of the following is an example of putting "Service Before Self-Interest" (Principle II)?
a)
Sharing patient information with a friend who is curious.
b)
Prioritizing data accuracy and patient welfare over personal convenience or pressure from a supervisor.
c)
Using your access to look up a family member's test results to tell them before the doctor does.
d)
Ignoring a data quality error because it would take too long to fix.
e)
Choosing the easiest-to-assign code rather than the most accurate one.
76.
The success and public trust in the national SATUSEHAT platform are critically dependent on what?
a)
The speed of its data processing.
b)
The number of features in its mobile app.
c)
The marketing and advertising budget of Kemenkes.
d)
The robust and uniform application of security and privacy principles by all participating facilities.
e)
The use of the most expensive server hardware available.
77.
A hospital has a written policy that clearly outlines the consequences for employees who violate the organization's data security rules. This policy is an example of which type of administrative safeguard?
a)
Security Risk Analysis.
b)
Contingency Plan.
c)
Sanction Policy.
d)
Information Access Management.
e)
Security Awareness Training.
78.
A hospital is hit by a major flood, and its primary servers are destroyed. However, they are able to restore all patient data from a secure, off-site location within 24 hours. Their ability to do this is due to having a robust:
a)
Sanction Policy.
b)
Security Awareness Training program.
c)
Phishing prevention system.
d)
Contingency Plan (including data backup and disaster recovery).
e)
Facility Access Control policy.
79.
The legal framework in Indonesia establishes the patient's right to access and obtain data from their own electronic medical records. This law provides an enforceable structure for which core ethical principle?
a)
Beneficence.
b)
Nonmaleficence.
c)
Justice.
d)
Autonomy.
e)
Fidelity.
80.
Which of the following best describes the relationship between law and ethics for an HIM professional?
a)
Law and ethics are identical concepts.
b)
Following the law is always sufficient to be ethical.
c)
Law sets the minimum standard of behavior, while ethics defines the highest ideal of professional conduct.
d)
Ethics are only important when there are no laws on a subject.
e)
Law is focused on patient care, while ethics is focused on finance.
81.
A physician asks an HIM professional to release a patient's entire medical record to a research study. The patient's consent form only authorized the release of "laboratory data." Adhering to the "minimum necessary" standard, what should the HIM professional do?
a)
Release the entire record as the physician requested.
b)
Refuse to release any data at all.
c)
Release only the laboratory data as specified in the consent form.
d)
Ask the patient to sign a new, blank consent form.
e)
Release the entire record but remove the patient's name.
82.
A hospital is choosing a new EHR vendor. The HIM professional on the selection committee insists on asking vendors detailed questions about their system's security features, such as encryption and audit trails. This action demonstrates the HIM professional's role in:
a)
Negotiating the price of the software.
b)
Ensuring the system has a user-friendly interface.
c)
Acting as a steward of patient information by prioritizing security and privacy from the start.
d)
Training the clinical staff on how to use the new system.
e)
Managing the physical installation of the servers.
83.
The secure disposal of old hard drives containing patient data by shredding or pulverizing them is an example of which type of physical safeguard?
a)
Facility Access Controls.
b)
Workstation Security.
c)
Device and Media Controls.
d)
Contingency Operations.
e)
Security Awareness Training.
84.
The use of firewalls and network intrusion detection systems to guard against unauthorized access to data being transmitted over a network is an example of which technical safeguard?
a)
Access Control.
b)
Audit Control.
c)
Integrity Control.
d)
Transmission Security.
e)
Authentication.
85.
A health information system is defined as an arrangement of data, processes, people, and information technology. This definition highlights that a system is:
a)
Only the software application.
b)
Only the computer hardware.
c)
A purely technical construct.
d)
A comprehensive socio-technical system.
e)
Only the data itself.
86.
A registration clerk enters a patient's date of birth as "10-05-1985" in the main registration system, but a nurse enters it as "05-10-1985" in the clinical module. This violates which AHIMA data quality characteristic?
a)
Currency.
b)
Relevancy.
c)
Comprehensiveness.
d)
Consistency.
e)
Granularity.
87.
A hospital's EHR system does not have a clear, documented definition for the data element "Patient Admitted." Some staff interpret this as when the patient arrives, while others interpret it as when they are assigned a bed. This ambiguity will lead to a failure in which AHIMA data quality characteristic?
a)
Accuracy.
b)
Accessibility.
c)
Definition.
d)
Currency.
e)
Relevancy.
88.
The ability for a doctor in a Puskesmas to securely send a message with a patient's photo to a specialist in a large city for a remote consultation is an example of which core IOM EHR function?
a)
Result Management.
b)
Order Management.
c)
Decision Support.
d)
Electronic Communication and Connectivity.
e)
Reporting and Population Health.
89.
A patient with diabetes uses the SATUSEHAT mobile app to view their recent lab results and read educational articles about diet management. This is an example of which core IOM EHR function?
a)
Patient Support.
b)
Administrative Processes.
c)
Order Management.
d)
Result Management.
e)
Decision Support.
90.
Which data standard is a *classification* system, analogous to a postal code, while SNOMED CT is a *terminology*, analogous to a full street address?
a)
HL7 FHIR.
b)
DICOM.
c)
ICD-10.
d)
LOINC.
e)
RxNorm.
91.
The entire framework of data quality, security, and ethics is built upon the HIM professional's role as a trusted ________ of the patient's complete health story.
a)
Originator.
b)
Auditor.
c)
Steward.
d)
Consumer.
e)
Analyst.
Reset
