시험덤프
매달, 우리는 1000명 이상의 사람들이 시험 준비를 잘하고 시험을 잘 통과할 수 있도록 도와줍니다.
  / CPHRM 덤프  / CPHRM 문제 연습

ASHRM CPHRM 시험

Certified Professional in Health Care Risk Management (CPHRM) 온라인 연습

최종 업데이트 시간: 2026년03월09일

당신은 온라인 연습 문제를 통해 ASHRM CPHRM 시험지식에 대해 자신이 어떻게 알고 있는지 파악한 후 시험 참가 신청 여부를 결정할 수 있다.

시험을 100% 합격하고 시험 준비 시간을 35% 절약하기를 바라며 CPHRM 덤프 (최신 실제 시험 문제)를 사용 선택하여 현재 최신 119개의 시험 문제와 답을 포함하십시오.

 / 4

Question No : 1


Which of the following are common techniques used to include patients and families in programs to educate patients about their safety?
1) lay persons on select committees
2) patient education opportunities
3) patient events referred for peer review
4) event reporting by patients and families

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, patient and family engagement is a critical element of patient safety programs. Including lay persons on select committees, such as patient safety or quality committees, allows patients and families to contribute perspectives that enhance transparency and system improvement. Structured patient education opportunities empower individuals to understand their care, ask questions, and actively participate in safety practices, such as medication verification and infection prevention.
Event reporting by patients and families is another proactive strategy that promotes open communication and early identification of safety concerns. Encouraging patients to report perceived errors or near misses supports a culture of safety and partnership.
Referring patient events for peer review is an internal professional evaluation process focused on provider performance and quality improvement. While important for clinical oversight, it is not a technique designed to directly include patients and families in educational safety programs.
Clinical and patient safety objectives emphasize collaboration, transparency, and patient-centered care. Therefore, inclusion of lay persons on committees, patient education initiatives, and patient or family event reporting are appropriate techniques for involving patients in safety programs.

Question No : 2


An organization's CEO has requested that the risk manager develop policies and procedures for the risk management department. The risk manager should consider developing policies for all of the following EXCEPT

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, the risk management department should establish formal policies addressing core operational responsibilities. Coordination of responses to subpoenas is a critical function involving legal compliance, protection of privileged information, and collaboration with counsel. Departmental accountability for occurrence reporting is essential to ensure proper event identification, investigation, and trending. Additionally, defining the risk management reporting process to the governing body supports board oversight and enterprise risk management responsibilities.
Responses to freedom of information requests, however, are generally governed by legal, compliance, or public information offices, particularly in public institutions subject to open records laws. While risk management may provide input if records involve claims or adverse events, primary responsibility for handling such requests typically resides outside the risk management department.
Health Care Operations objectives emphasize clearly defined departmental scope, structured reporting relationships, and alignment with governance responsibilities. Therefore, while subpoena coordination, occurrence reporting, and board reporting are appropriate policy areas for risk management, responses to freedom of information requests fall outside its primary policy development scope.

Question No : 3


Which of the following concerns meets the CMS Hospital Conditions of Participation 42 CFR §482.12 classification as a grievance?

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, the CMS Hospital Conditions of Participation define a grievance as a formal or informal written or verbal complaint made by a patient or representative regarding care, abuse, neglect, compliance with regulations, or patient rights that is not resolved at the time of the complaint by staff present.
A verbal complaint that cannot be resolved immediately by current staff and whose resolution is postponed qualifies as a grievance under 42 CFR §482.12. Such grievances require formal investigation, documentation, and written response within established timeframes.
Billing issues generally fall outside the grievance definition unless they involve quality of care or patient rights concerns. Information from patient satisfaction surveys is not automatically classified as a grievance unless the patient specifically requests investigation or follow-up. Post-discharge verbal concerns may constitute grievances depending on context, but the key CMS criterion is whether the complaint could not be resolved at the time it was expressed.
Legal and regulatory objectives emphasize proper classification, timely response, documentation, and board oversight of grievance processes. Therefore, a verbal complaint that cannot be resolved immediately and is deferred meets CMS grievance criteria.

Question No : 4


The first layer of insurance that will respond to a specific type of loss or exposure is called

정답:
Explanation:
According to Health Care Risk Management principles supported by ASHRM and the American Hospital Association Certification Center, insurance coverage for liability exposures is often structured in layers. The first layer of insurance that responds to a covered loss is known as the primary policy.
Primary insurance provides initial coverage once any applicable deductible or self-insured retention has been satisfied. It is responsible for defense and indemnity payments up to the policy’s stated per-occurrence and aggregate limits. Only after the primary policy limits are exhausted do excess or umbrella policies respond.
Terms such as baseline, foundation, and frontline are not recognized technical classifications in layered insurance structures. In professional and general liability programs, organizations commonly maintain a primary layer followed by one or more excess layers to protect against catastrophic losses.
Risk financing objectives emphasize understanding policy structure, limits, attachment points, and coordination between layers to ensure adequate protection of organizational assets. Therefore, the correct term for the first layer of insurance that responds to a loss is the primary policy.

Question No : 5


Which of the following items should be part of a claim file?
1) peer review reports or data
2) correspondence with attorneys and investigators
3) literature search
4) verification of settlement authority

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, claim files must be carefully structured to preserve confidentiality, protect privilege, and support effective defense strategy. A claim file typically includes correspondence with attorneys and investigators, as this documentation reflects legal strategy, communications, and case development. Literature searches relevant to standards of care may also be included to assist counsel in evaluating clinical issues and expert testimony preparation. Verification of settlement authority is essential documentation to confirm that appropriate approvals were obtained before resolving a claim.
Peer review reports or data, however, should not be included in the claim file. Peer review materials are generally protected under state peer review statutes and federal patient safety privilege provisions. Commingling peer review documents within the claims file may jeopardize privilege protections and increase the risk of discoverability in litigation. Maintaining separation between peer review files and claim files is a critical risk management practice.
Claims and litigation objectives emphasize preservation of privilege, organized documentation, and compliance with legal standards. Therefore, correspondence, literature searches, and settlement authority verification belong in the claim file, while peer review reports should be maintained separately.

Question No : 6


A risk manager identifies a problem with the informed consent process in the organization. All of the following are appropriate interventions EXCEPT

정답:
Explanation:
According to Health Care Risk Management standards endorsed by ASHRM and the American Hospital Association Certification Center, system-level issues in the informed consent process should first be addressed through quality improvement and educational interventions rather than immediate punitive action.
Conducting a medical record audit is an appropriate first step to identify patterns of incomplete documentation and determine whether the problem is isolated or systemic. Reviewing and revising policies and procedures ensures alignment with current legal standards and clarifies responsibilities for obtaining and documenting consent. Providing targeted education to physicians, nurses, and office staff reinforces understanding of required elements, including discussion of risks, benefits, alternatives, and patient questions.
Reporting physicians with incomplete consent forms directly to peer review may be appropriate in cases of persistent noncompliance or willful disregard of standards. However, when a systemic process problem is identified, immediate referral to peer review is not the appropriate primary intervention and may undermine a just culture approach.
Clinical and patient safety objectives emphasize root cause identification, education, and process improvement before disciplinary escalation. Therefore, reporting physicians to peer review in this context represents the inappropriate intervention.

Question No : 7


The reporting requirements of the Safe Medical Devices Act SMDA apply to which of the following?
1) nursing homes
2) physician offices
3) ambulatory surgery
4) hospitals

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, the Safe Medical Devices Act SMDA establishes mandatory reporting requirements for certain healthcare facilities when a medical device has or may have caused or contributed to a patient death or serious injury. These requirements apply to device user facilities, which include hospitals, nursing homes, and ambulatory surgical facilities.
Hospitals are explicitly required to report device-related deaths to both the FDA and the manufacturer, and serious injuries to the manufacturer or the FDA if the manufacturer is unknown. Nursing homes and ambulatory surgery centers are also considered device user facilities under the Act and must comply with similar reporting obligations.
Physician offices, however, are generally not classified as device user facilities under SMDA reporting
rules and therefore are not subject to the same mandatory reporting requirements, although voluntary reporting is encouraged.
Legal and regulatory objectives emphasize timely compliance with FDA reporting mandates, maintenance of documentation, and coordination with manufacturers and regulatory authorities to mitigate risk and enhance patient safety. Therefore, the SMDA reporting requirements apply to nursing homes, ambulatory surgery facilities, and hospitals.

Question No : 8


If no specific OSHA standard applies to a given potential health hazard, then

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, the Occupational Safety and Health Act includes a provision known as the General Duty Clause. This clause requires employers to furnish a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm, even when no specific OSHA standard addresses the hazard.
The General Duty Clause grants OSHA authority to cite employers for unsafe conditions not explicitly covered by a detailed regulation. To issue a citation under this clause, OSHA must demonstrate that a recognized hazard exists, that the hazard poses a risk of serious harm, and that feasible methods
exist to correct or mitigate the hazard.
Therefore, OSHA retains enforcement authority even in the absence of a specific standard. The agency’s jurisdiction does not disappear simply because no detailed regulation addresses the particular risk.
Legal and regulatory objectives in healthcare risk management emphasize maintaining compliance with federal occupational safety laws and proactively identifying workplace hazards. Accordingly, OSHA may govern the hazard under the General Duty Clause when no specific standard applies.

Question No : 9


All of the following are valid reasons for performing risk management review of policies and procedures EXCEPT

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American
Hospital Association Certification Center, periodic review of policies and procedures is essential to ensure alignment with current laws, regulatory standards, accreditation requirements, and best practices. Reviewing policies helps ensure consistency between written procedures and actual clinical practice, thereby reducing liability exposure.
Policy review also supports identification of potential risk exposures by detecting outdated language, conflicting guidance, or gaps in processes that could lead to adverse events. Additionally, monitoring compliance with standards―such as federal regulations, state statutes, and accreditation requirements―is a central purpose of policy review, ensuring that organizational practices meet required benchmarks.
Maintaining staff competency, however, is primarily addressed through education, training programs, credentialing, and performance evaluation processes. While policies provide guidance for staff conduct, competency assessment is not the primary objective of policy review itself.
Health Care Operations objectives emphasize governance oversight, regulatory compliance, and risk mitigation through clear, current policies. Therefore, maintaining staff competency is not a direct reason for performing risk management review of policies and procedures, making it the correct exception.

Question No : 10


When conducting an investigation of a liability claim, which of the following steps should be included?
1) providing the RCA to the insurance company
2) determining the applicable standard of care
3) assessing the applicable legal principles
4) obtaining an incident report from the claimant

정답:
Explanation:
According to Health Care Risk Management standards established by ASHRM and the American Hospital Association Certification Center, investigation of a liability claim requires careful evaluation of both clinical and legal components. Determining the applicable standard of care is essential to assess whether the provider’s actions met accepted professional practice. This typically involves review of medical records, consultation with clinical experts, and comparison to established guidelines or customary practices within the specialty.
Assessing applicable legal principles is also critical. This includes analysis of duty, breach, causation, and damages, as well as jurisdiction-specific statutes of limitation, comparative negligence standards, and evidentiary considerations. Understanding the legal framework allows the risk manager to evaluate exposure and advise counsel appropriately.
Providing a root cause analysis to the insurance company may compromise privilege protections, depending on jurisdiction and policy structure. RCA documents are often protected under peer review or patient safety statutes and should not be disclosed without legal guidance. Obtaining an incident report from the claimant is not appropriate, as internal incident reports are generated by the organization and are not requested from claimants.
Claims and litigation objectives emphasize structured legal and clinical evaluation. Therefore, determining the standard of care and assessing applicable legal principles are required investigative steps.

Question No : 11


Which of the following is the BEST reason for the selection of defense counsel?

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, the selection of defense counsel should be based primarily on demonstrated expertise in the relevant area of law. Medical malpractice litigation involves complex clinical issues, evolving standards of care, expert witness coordination, and familiarity with healthcare regulations. Counsel with specialized experience in healthcare liability defense is better equipped to manage case strategy, assess exposure, and navigate jurisdiction-specific procedural rules.
Proximity to the facility may offer logistical convenience but does not ensure competency in complex medical litigation. Percentage of defense verdicts can be misleading, as case mix, settlement strategy, and jurisdictional tendencies influence outcomes. A high defense verdict rate does not necessarily reflect effective risk management or cost control. Fee schedule is an important financial consideration; however, cost alone should not override qualifications and experience.
Claims and litigation objectives emphasize effective case management, accurate evaluation of liability exposure, and protection of organizational reputation. Selecting counsel based on specialized expertise supports stronger legal defense, strategic settlement evaluation, and improved coordination with clinical experts. Therefore, area of expertise is the best reason for selecting defense counsel.

Question No : 12


Which of the following analyses is required as part of the sentinel event process of The Joint Commission?

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, The Joint Commission’s sentinel event process requires completion of a thorough root cause analysis and development of a corrective action plan. While various analytical tools such as fishbone diagrams, flowcharts, or Pareto charts may be used to assist in identifying contributing factors, these specific tools are not mandated.
The essential required component is a written action plan that identifies specific improvement steps, assigns responsibility, and includes measurable outcomes and timelines for implementation. The action plan must address root causes and system vulnerabilities, not merely individual performance issues. It should demonstrate how corrective actions will reduce the likelihood of recurrence and include monitoring mechanisms to evaluate effectiveness.
Fishbone diagrams and Pareto charts are optional tools used during analysis but are not explicitly required elements. Similarly, departmental flowcharts may support understanding of processes but are not mandated by The Joint Commission.
Clinical and patient safety objectives emphasize systematic investigation, leadership oversight, and documented improvement efforts following sentinel events. Therefore, a detailed action plan with implementation dates is the required analysis component within the sentinel event process.

Question No : 13


Aside from clinical risk exposures, which of the following should be evaluated as part of a risk assessment concerning telemedicine?

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, telemedicine risk assessment must extend beyond clinical quality of care to include operational risks. Operational considerations encompass technology infrastructure reliability, cybersecurity protections, credentialing and privileging of providers across state lines, licensing compliance, documentation workflows, data storage, and continuity planning for system outages.
Telemedicine platforms rely heavily on secure networks, interoperability with electronic health records, and protection of protected health information. Operational failures such as system downtime, inadequate bandwidth, or insufficient training can disrupt care delivery and increase liability exposure. Additionally, compliance with regulatory requirements regarding interstate practice and reimbursement policies falls within operational risk management.
Behavioral and public awareness considerations may influence patient engagement but are not primary risk assessment categories. Financial risks are relevant in enterprise risk management; however, the question specifically contrasts clinical risk exposures with other telemedicine-related risks, making operational risk the most directly applicable.
Health Care Operations objectives emphasize comprehensive evaluation of technological, regulatory, and workflow factors in emerging service models. Therefore, operational risks should be evaluated alongside clinical exposures when assessing telemedicine programs.

Question No : 14


A risk manager is reviewing the professional liability insurance policy for the limits of liability.
Which of the following should the risk manager review FIRST?

정답:
Explanation:
According to Health Care Risk Management standards supported by ASHRM and the American Hospital Association Certification Center, the declarations page is the first section a risk manager should review when assessing limits of liability in a professional liability insurance policy. The declarations page summarizes key policy information, including named insureds, policy period, coverage types, limits of liability per occurrence and aggregate, deductibles or self-insured retentions, endorsements, and premium details.
Because the question focuses specifically on limits of liability, the declarations page provides the most direct and concise statement of coverage limits. It serves as the policy’s summary and reference point for determining financial exposure and coverage structure.
The insuring agreement defines the scope of coverage and triggers for defense and indemnity obligations but does not list specific limit amounts. Exclusions outline what is not covered, and conditions specify policyholder responsibilities such as notice and cooperation requirements. While all sections are important for comprehensive review, the declarations page is the appropriate starting point when verifying coverage limits.
Risk financing objectives emphasize careful policy analysis to ensure alignment between coverage limits and organizational risk exposure. Therefore, the declarations page should be reviewed first when assessing limits of liability.

Question No : 15


Which of the following are proactive elements of a workplace violence prevention program?

정답:
Explanation:
According to Health Care Risk Management standards outlined by ASHRM and the American Hospital Association Certification Center, proactive workplace violence prevention focuses on measures implemented before an incident occurs. These strategies aim to identify risks, strengthen preparedness, and reduce the likelihood or severity of violent events.
Pre-employment background screening helps identify applicants with histories that may pose safety concerns, consistent with legal hiring standards. Ongoing staff training enhances awareness of warning signs, communication skills, and reporting procedures. Leadership rounding increases visibility, supports early identification of environmental or behavioral risks, and reinforces safety culture. Active shooter drills and emergency preparedness exercises ensure that staff understand response protocols and can act effectively under stress.
Options B, C, and D primarily describe reactive or post-incident measures. Law enforcement notification, restraining orders, crisis intervention, DEA notification, documentation, and emergency command activation occur after an event has taken place or when an immediate threat is present.
Health Care Operations objectives emphasize prevention, preparedness, environmental assessment, and workforce education as foundational elements of a workplace violence program. Therefore, pre-employment screening, training, rounding, and drills represent proactive components of an effective prevention strategy.

 / 4
ASHRM