age 1 of 224
AAPC CPB FINAL EXAM 2025/2026 ACCURATE
QUESTIONS WITH CORRECT DETAILED ANSWERS
||100% GUARANTEED PASS <RECENT VERSION>
A private practice hires a consultant to come in and audit some
medical
records. Under the Privacy Rule, what is this consultant
considered?
A. A business associate
B. An employee
C. A covered entity
D. A clearinghouse .......Answer.........A. A business associate
,age 2 of 224
Business associates perform certain functions or activities, which
involve the use or disclosure of individually identifiable health
information, on behalf of another person or organization. These
services include claims processing or administration, data
analysis, utilization review, billing, benefit management, and re-
pricing. Because the consultant will be auditing medical records,
PHI will need to be shared from the practice. The practice would
be the covered entity
A practice agrees to pay $250,000 to settle a lawsuit alleging
that the practice used X-rays of one patient to justify services on
multiple other patients' claims. The manager of the office
brought the civil suit. What type of case is this?
A. HIPAA
B. Qui Tam
,age 3 of 224
C. Anti-Kickback
D. Stark case .......Answer.........B. Qui Tam
A Qui Tam case is also known as a whistleblower case. If an
individual knows of a violation of the FCA, he or she may bring
a civil action on behalf of him or herself and on behalf of the
U.S. government (such an individual is called a relator)
A patient is seen in your clinic. Her husband calls later in the day
to ask for information about the visit. The practice pulls the
patient's privacy authorization to see if they can speak to the
husband. What act does this action fall under?
A. Health Information Act
B. Social Security Act
C. HIPAA
, age 4 of 224
D. ADA .......Answer.........C. HIPAA
The Privacy Act is under HIPAA and protects the health
information of the patient. According to HIPAA, for the practice
to release information to the husband, the patient would have to
have signed an authorization.
Which of the following situations allows the release of PHI
without authorization from the patient?
A. Request for life insurance
B. Request from family member
C. Physician's office to release to a family member
AAPC CPB FINAL EXAM 2025/2026 ACCURATE
QUESTIONS WITH CORRECT DETAILED ANSWERS
||100% GUARANTEED PASS <RECENT VERSION>
A private practice hires a consultant to come in and audit some
medical
records. Under the Privacy Rule, what is this consultant
considered?
A. A business associate
B. An employee
C. A covered entity
D. A clearinghouse .......Answer.........A. A business associate
,age 2 of 224
Business associates perform certain functions or activities, which
involve the use or disclosure of individually identifiable health
information, on behalf of another person or organization. These
services include claims processing or administration, data
analysis, utilization review, billing, benefit management, and re-
pricing. Because the consultant will be auditing medical records,
PHI will need to be shared from the practice. The practice would
be the covered entity
A practice agrees to pay $250,000 to settle a lawsuit alleging
that the practice used X-rays of one patient to justify services on
multiple other patients' claims. The manager of the office
brought the civil suit. What type of case is this?
A. HIPAA
B. Qui Tam
,age 3 of 224
C. Anti-Kickback
D. Stark case .......Answer.........B. Qui Tam
A Qui Tam case is also known as a whistleblower case. If an
individual knows of a violation of the FCA, he or she may bring
a civil action on behalf of him or herself and on behalf of the
U.S. government (such an individual is called a relator)
A patient is seen in your clinic. Her husband calls later in the day
to ask for information about the visit. The practice pulls the
patient's privacy authorization to see if they can speak to the
husband. What act does this action fall under?
A. Health Information Act
B. Social Security Act
C. HIPAA
, age 4 of 224
D. ADA .......Answer.........C. HIPAA
The Privacy Act is under HIPAA and protects the health
information of the patient. According to HIPAA, for the practice
to release information to the husband, the patient would have to
have signed an authorization.
Which of the following situations allows the release of PHI
without authorization from the patient?
A. Request for life insurance
B. Request from family member
C. Physician's office to release to a family member
