CMAA NHA Certified Medical Administrative Assistant - Set 5 - Part 3

Correct Answer: Set professional tone and orient caller

The standardized greeting sets a professional tone and orients the caller by naming the practice, the staff member, and the offer of assistance, supporting the call's flow toward identification and the caller's need. Option a is incorrect because saving five seconds is not the underlying purpose of the standardized greeting, which is meant to set a professional tone and orient the caller rather than to shave a small amount of time. Option b is incorrect because discouraging callers from speaking conflicts with the underlying purpose of the greeting, which invites the caller to share the reason for the call so the staff member can help them appropriately. Option c is incorrect because the greeting does not replace identity verification, which still happens later for any disclosure of protected information using two patient identifiers per the practice's documented privacy procedures and policies.

Correct Answer: Reason; notice period; emergency window; record offer

A termination letter typically includes the reason in general terms, a notice period such as thirty days, continued emergency coverage during transition, suggestions for finding a new provider, and an offer to release records on authorization. Option b is incorrect because marketing items are unrelated to a termination letter, which focuses on careful closure of the relationship rather than promotional content for the practice or any campaign during the period today. Option c is incorrect because birthday cards and gift vouchers are unrelated to a termination letter, which focuses on careful closure rather than personal celebration or promotional incentives during the period for the patient. Option d is incorrect because music playlists and vacation flyers are unrelated to a termination letter, which focuses on careful closure rather than entertainment items or promotional flyers during the period for the patient today.

Correct Answer: Provide clean professional alignment

Block format provides a clean, professional alignment with all elements at the left margin, often used in business correspondence, while modified block centers or right-aligns date, closing, and signature for a different look. Option a is incorrect because block format does not spread letters across the full page; it aligns elements at the left margin to provide a clean professional structure rather than scattering content across the page randomly. Option b is incorrect because block format does not disguise the sender's identity; the sender's information appears clearly in the letter's heading and signature lines rather than being concealed by the format itself. Option d is incorrect because block format does not replace the recipient's name, which appears in the inside address as part of the letter's standard content rather than being substituted by the format itself.

Correct Answer: PHI requires secure encrypted channels

Protected health information requires secure encrypted channels and approved organizational email rather than personal accounts, with confirmation of recipient address and adherence to privacy notices per the organizational template at the practice today. Option a is incorrect because personal email is not automatically encrypted in many configurations, and even when it is, the practice cannot demonstrate the chain of custody and access controls required for protected information at all. Option c is incorrect because external providers can receive protected information through approved channels under treatment within TPO, so the principle is the channel security rather than a blanket prohibition on external recipients altogether. Option d is incorrect because sending protected information is not always free of risk; the practice manages risk through approved channels, encryption, and verification rather than treating any send as automatically safe today at the practice.

Correct Answer: Physical workstation control

Physical workstation control covers monitor placement, screen visors, and timed lock screens, which protect protected information from incidental viewing while supporting day-to-day operations at the front desk and other public-facing positions. Option a is incorrect because technical encryption is a different category of safeguard that protects data through cryptographic controls rather than physical placement of monitors at the front desk in this scenario at the practice. Option b is incorrect because marketing strategy is unrelated to safeguard categories, since marketing focuses on patient acquisition rather than protecting information from incidental viewing at front-desk workstations during the work day. Option c is incorrect because insurance verification is a separate front-desk task focused on coverage rather than the physical workstation safeguards that protect monitors from public view at the practice during a typical day.

Correct Answer: Required for disability; trained tasks performed

ADA permits two questions: whether the dog is a service animal required because of a disability and what work or task the dog has been trained to perform, with no documentation request and no demonstration demand. Option b is incorrect because asking for detailed disability information, vet records, and the pet's name exceeds the two permitted ADA questions, which are limited to disability-required service status and trained task performance only. Option c is incorrect because origin city, favorite color, and favorite song are unrelated to the two permitted ADA questions and would constitute inappropriate inquiry that the framework expressly limits at the front desk today. Option d is incorrect because lunch hours, parking spots, and snacks are unrelated to the two permitted ADA questions and would constitute inappropriate inquiry that the framework expressly limits at the front desk today.

Correct Answer: Two to eight Celsius; recorded twice daily

Vaccine refrigerators should hold two to eight Celsius for most vaccines, with twice-daily recording, a continuous data logger, a calibrated thermometer, and a dedicated unit free of food, plus a power-outage plan. Option a is incorrect because negative thirty Celsius is closer to freezer ranges used for some vaccines, while two to eight Celsius is the refrigerator range for most vaccines, with recording cadence twice daily rather than weekly. Option b is incorrect because room temperature is not the appropriate vaccine refrigerator range, since most vaccines require the two to eight Celsius range, and recording must occur twice daily rather than not at all. Option d is incorrect because boiling temperature would destroy vaccines and is the opposite of the controlled refrigerator range required, while annual recording would not catch the daily fluctuations the cold chain is designed to prevent.

Correct Answer: Three-two-one backup rule

The three-two-one rule keeps three copies of data, on two different media, with one copy off-site, supporting resilience against device failure, ransomware, and disaster across the practice's information systems and data. Option a is incorrect because the five-four-three rule is not a recognized backup standard for protected information, since the documented best practice is three-two-one rather than the higher numbers listed in this option choice. Option c is incorrect because the ten-ten-ten rule is not a recognized backup standard for protected information, since the documented best practice is three-two-one rather than the higher numbers listed in this option choice. Option d is incorrect because the one-one-one rule is not a recognized backup standard for protected information, since the documented best practice is three-two-one rather than the smaller numbers listed in this option choice.

Correct Answer: Maintain safe continuous operations on paper

Downtime toolkits maintain safe continuous operations on paper, including appointment books, intake forms, progress notes, prescription pads, lab requisitions, and education handouts, until the system returns and data are back-entered. Option a is incorrect because downtime procedures do not force every patient to leave; they support continued operations through paper alternatives and back-entry once systems are restored to working order at the practice. Option b is incorrect because downtime procedures do not cancel future weeks unilaterally; they support short-term operations during an outage rather than altering long-term scheduling for the practice's calendar going forward. Option c is incorrect because informing marketing about outages is not the underlying purpose of downtime procedures, which focus on safe continuous operations rather than communications with the marketing function at the practice.

Correct Answer: Isolate; notify; document; engage law enforcement

Recommended initial actions include isolating affected systems, notifying privacy and security officers immediately, documenting events, engaging IT and law enforcement, and triggering breach notification if protected information was accessed, without paying ransom without consultation. Option a is incorrect because paying ransom immediately is the opposite of the recommended initial response, which avoids paying without consultation and prioritizes isolation, notification, documentation, and engagement with IT and law enforcement first. Option c is incorrect because continuing operations as normal during a ransomware incident risks spreading the encryption further and ignores the immediate actions of isolation, notification, and engagement with response partners that the plan demands. Option d is incorrect because emailing everyone the incident details broadly can leak sensitive details, undermine investigation, and violate confidentiality of the response, which is the opposite of rou