General — CMA practice questions

During a routine visit, a patient discloses bruising and states a partner 'gets rough sometimes.' The medical assistant's most appropriate immediate response is to:

1. Confront the partner directly when they arrive to pick up the patient
2. Tell the patient to simply leave the relationship before the visit continues
3. Provide a private, nonjudgmental space to talk, notify the provider, and follow the practice's intimate-partner-violence screening and reporting protocol
4. Document the comment as a passing remark and move on to vital signs

Answer: C — Provide a private, nonjudgmental space to talk, notify the provider, and follow the practice's intimate-partner-violence screening and reporting protocol

A) Confrontation can escalate danger for the patient after they leave the clinic. B) Directive advice to leave can be unsafe (leaving is statistically the highest-risk period) and is outside MA scope to counsel unilaterally. C) Correct — ensure privacy/safety, alert the provider, and follow the clinic's IPV screening + state-specific reporting protocol; the MA does not investigate or counsel alone. D) Minimizing or failing to escalate a disclosure of abuse is a missed-safety and documentation failure.

HIPAA's minimum-necessary standard means:

1. Share everything
2. Use/disclose only the minimum PHI needed for the purpose
3. No sharing
4. Family only

Answer: B — Use/disclose only the minimum PHI needed for the purpose

A/C/D) Wrong. B) Correct — minimum necessary for TPO + authorized disclosures.

A medical assistant realizes a 2 PM medication was charted as 'given' but never administered. The most appropriate next step is to:

1. Erase the original entry + re-document the correct events
2. Use correction fluid + write the actual events above the obscured entry
3. Draw a single line through the error, write 'error' + initials + date, then chart the actual events
4. Ask a coworker to make the correction so it does not appear to be self-correction

Answer: C — Draw a single line through the error, write 'error' + initials + date, then chart the actual events

A) Erasure destroys the original record + is legally indistinguishable from falsification. B) Correction fluid is explicitly prohibited in most facility policies + has the same falsification problem as erasure. C) Single line through + 'error' + initials + date preserves the original entry while documenting the truth — the standard correction method. D) Each clinician documents their own care; coworker corrections fall outside their scope + create their own falsification risk.

A non-English-speaking patient brings a 10-year-old child to interpret during the history-taking. Best practice is to:

1. Allow the child to interpret since they are already present
2. Use Google Translate for the entire visit
3. Use a trained, qualified medical interpreter (in-person, phone, or video)
4. Postpone the visit until an English-speaking adult arrives

Answer: C — Use a trained, qualified medical interpreter (in-person, phone, or video)

A) Minor children should not interpret medical information — accuracy, consent, and developmental concerns. C) Trained medical interpreters are the standard; required by Title VI for federally funded providers. B) Unverified machine translation is unreliable for clinical content. D) Unnecessarily delays care.

A Business Associate Agreement (BAA) is required when:

1. A patient signs a release to share records with their attorney
2. Two providers within the same clinic discuss a case at a tumor board
3. A covered entity shares PHI with a vendor (e.g., billing service, cloud EHR host) that creates, receives, maintains, or transmits PHI on its behalf
4. A patient brings a family member into the exam room

Answer: C — A covered entity shares PHI with a vendor (e.g., billing service, cloud EHR host) that creates, receives, maintains, or transmits PHI on its behalf

A) Patient-directed disclosures are handled by authorization, not BAA. C) Vendors performing functions involving PHI for a covered entity are Business Associates + require a BAA describing safeguards + breach notification duties. B) Internal TPO uses do not require a BAA. D) Family in the room is governed by the patient's verbal agreement + Privacy Rule provisions, not BAA.

Telephone triage protocols in an ambulatory practice are best described as:

1. Informal judgment calls made independently by whichever staff member answers the phone
2. Standardized, provider-approved decision guidelines that direct calls to emergency care, urgent same-day visits, routine scheduling, or self-care advice based on symptom criteria
3. A system used only for scheduling routine wellness visits
4. A legal requirement only for pediatric practices

Answer: B — Standardized, provider-approved decision guidelines that direct calls to emergency care, urgent same-day visits, routine scheduling, or self-care advice based on symptom criteria

A) Ad hoc, unstandardized judgment increases liability and inconsistency — the opposite of protocol-based triage. B) Correct — triage protocols are written, provider-approved algorithms that categorize urgency and route the call appropriately; documentation of the protocol used is required. C) Protocols cover the full range from emergent to routine, not just wellness scheduling. D) Triage protocols benefit any practice type, not only pediatrics.

A 'cholecystectomy' is most precisely:

1. An incision into the gallbladder
2. Inflammation of the gallbladder
3. Surgical removal of the gallbladder
4. Imaging of the gallbladder

Answer: C — Surgical removal of the gallbladder

A) -otomy denotes incision (e.g., tracheotomy). B) -itis denotes inflammation (cholecystitis). C) chole/o (bile) + cyst (sac) + -ectomy (surgical removal) = removal of gallbladder. D) -graphy denotes recording/imaging (e.g., cholangiography).

A clinic discloses a patient's lab result to the patient's insurance carrier for claim adjudication. Under the HIPAA Privacy Rule this disclosure is:

1. Permitted under TPO (treatment, payment, healthcare operations) without separate authorization
2. Prohibited without the patient's signed authorization
3. Permitted only with the patient's verbal consent at the time of disclosure
4. Prohibited unless the patient signs a new NOPP at every encounter

Answer: A — Permitted under TPO (treatment, payment, healthcare operations) without separate authorization

A) Payment is part of the TPO triad; the Privacy Rule explicitly permits these uses + disclosures of PHI without authorization, subject to minimum necessary. B) Authorization is required for uses outside TPO (e.g., marketing, most research). C) Verbal consent is not the trigger for payment disclosures. D) NOPP must be provided once + acknowledged; not re-signed each visit.

In the patient-MA relationship, 'beneficence' is the ethical principle of:

1. Doing no harm
2. Respecting patient choice
3. Treating like cases alike
4. Acting in the patient's best interest and promoting good

Answer: D — Acting in the patient's best interest and promoting good

A) Non-maleficence. D) Beneficence — active promotion of patient welfare. C) Justice. B) Autonomy.

Which statement about MA scope of practice is most accurate?

1. MA scope is defined by state law, employer policy, and physician delegation; it cannot include independent diagnosis
2. Federal law sets a uniform national MA scope of practice
3. MAs may diagnose and prescribe in states without explicit regulation
4. MAs may sign orders on behalf of the supervising provider as a matter of routine

Answer: A — MA scope is defined by state law, employer policy, and physician delegation; it cannot include independent diagnosis

B) No federal scope; states differ. A) Triangulated by state law + employer policy + delegation; independent diagnosis is excluded. C) Absence of explicit regulation does not authorize practicing medicine. D) Order entry under standing orders or protocols requires explicit authorization + does not include 'signing for' the provider.

Common roots?

cardi/o = heart, hepat/o = liver, nephr/o = kidney, gastr/o = stomach, pneum/o = lung, hem/o = blood, derm/o = skin, my/o = muscle.

Informed consent?

Patient must be given information about the procedure, risks, benefits, alternatives + must understand + agree voluntarily. Documented in chart.

What does a CMA do?

A medical assistant performs both administrative (scheduling, billing, records) + clinical tasks (vitals, injections, EKGs, specimen prep) in outpatient settings under physician supervision.

HIPAA Privacy Rule?

Protects PHI (Protected Health Information). Use/disclosure limited to TPO (Treatment, Payment, Healthcare Operations) without authorization. Minimum necessary standard.