Health-Cloud-Accredited-Professional Salesforce Health Cloud Accredited Professional AP-211 Exam Questions and Answers

In Salesforce Health Cloud’s Identity Verification framework, you can configure which search parameters (such as date of birth, SSN, phone number, etc.) are used by customer service representatives to verify a member or patient’s identity.

To add a new search parameter, you configure an Identity Verification Parameter Item record.

Identity Verification Parameter Item → Defines the actual search fields that will be used in the verification process.

These parameter items are tied to the Identity Verification Process Detail to determine how the verification is performed.

Why not the others?

A. Verification Search Feature – This controls whether identity verification search is enabled, but not the specific search parameters.

B. Identity Verification Process Detail – This defines the steps and rules of the verification process, but doesn’t store the search fields themselves.

D. Linked Identity Search Detail – Used to configure linked identities across systems, not to add new search parameters.

Salesforce Health Cloud Reference:

???? Salesforce Help – Identity Verification in Health Cloud

“To configure the search fields that agents use for member or patient identity verification, create and manage Identity Verification Parameter Item records.”

Salesforce Health Cloud Identity Verification Documentation

To ensure that the new office address is sent to patients via email after booking, you need logic in the Integration Procedure that checks the office location and triggers the correct email template.

Conditional Blocks in Integration Procedures allow developers to execute actions (like sending a specific email) only when certain conditions are met—such as the new office location.

Extract:

“Use a Conditional Block in an Integration Procedure to execute logic based on data values or conditions. For example, send a specific notification when a record matches certain criteria.”

(Source: Omnistudio Standard Guide – Integration Procedures)

Why not A, B, or C?

Removing Try-Catch, building If-Elself logic, or only updating test conditions do not leverage the maintainable and declarative power of Conditional Blocks in Integration Procedures.

 Preconfigured Prior Authorization Objects:

Exact Extract:

“The Health Cloud Care Request Extensions package provides out-of-the-box record types, page layouts, and flows for prior authorizations and other payer workflows.”

Step-by-Step Explanation:

Supported Data Exchange Standards:Health Cloud natively supports modern clinical data standards such as FHIR R4 and traditional messaging formats like HL7 v2 for interoperability and data exchange.

Exact Extract:

“Health Cloud supports industry standards for data exchange, including FHIR R4 and HL7 v2, to enable clinical interoperability with EHR systems and other healthcare platforms.”

The requirement is:

Encryption at rest → Handled by Salesforce Shield Platform Encryption.

Notification of activities (user monitoring, data access) → Provided by Event Monitoring in Salesforce Shield.

Extensive field tracking → Achieved with Field Audit Trail, also part of Salesforce Shield.

That’s why the correct answer is the Salesforce Shield bundle, which directly addresses all three compliance needs.

Why not the others?

A. Role Hierarchy, Password Policies, IP Restrictions → These are basic Salesforce security features, but they don’t provide encryption at rest or activity monitoring.

B. Field Audit Trail + Encryption + 2FA → Close, but Field Audit Trail and Encryption require Shield anyway, and 2FA is important but doesn’t meet the monitoring requirement.

D. Security Health Check + DLP policies → Useful for improving org security posture, but Salesforce does not have native DLP policies like in other security platforms. This doesn’t satisfy the encryption + monitoring requirement.

Salesforce Health Cloud / Security Reference:

???? Salesforce Shield Overview:

“Use Shield Platform Encryption for encryption at rest.”

“Use Event Monitoring to monitor and track user activity across apps.”

“Use Field Audit Trail to retain field value changes for compliance requirements.”

Step-by-Step Explanation:

Salesforce Health Cloud Prerequisites:

Enable Person Accounts:

Required for representing patients and healthcare contacts.

“Person Accounts must be enabled before installing Health Cloud.”

— Reference: Health Cloud Installation Prerequisites

Enable Chatter:

Health Cloud uses Chatter for collaboration between care teams.

“Chatter must be enabled to use Health Cloud features like care coordination and notes.”

— Reference: Health Cloud Installation Prerequisites

Enable Contacts to Multiple Accounts:

Necessary to relate patients to multiple organizations/providers.

“Enable Contacts to Multiple Accounts to relate contacts (patients) to more than one account (e.g., provider, payer).”

— Reference: Health Cloud Installation Prerequisites

Other Options:

B. Enable Shield Event Monitoring: Not required for Health Cloud installation (but is a best practice for auditing and compliance in some orgs).

D. Enable Health Cloud Installation Monitor: Not a standard Salesforce setting or prerequisite.

When configuring security, sharing, and visibility in Salesforce Health Cloud, consultants must consider healthcare-specific requirements such as HIPAA, GDPR, and organizational policies. Two critical considerations are:

B. Understand customer needs, data security, privacy concerns, regulatory compliance, and sharing or visibility restrictions.

Healthcare data involves PHI (Protected Health Information), which requires strict compliance with HIPAA and regional regulations.

Consultants must tailor security models to meet specific privacy and compliance requirements.

C. Regularly review and update security, sharing, and visibility settings in Health Cloud to align with evolving needs, regulations, and organizational policies.

Regulations change, and so do organizational needs. Security and sharing rules must be reviewed and updated periodically to ensure ongoing compliance and relevance.

Why not the others?

A. Ensure that data mask is used in production to appropriately manage PHI.

Salesforce Data Mask is a tool for sandbox data anonymization, not for production. PHI in production should be secured using encryption, field-level security, and sharing rules—not Data Mask.

D. Review Salesforce documentation and implement a standardized security and visibility model.

While documentation is helpful, healthcare organizations require tailored security models that fit unique compliance and data access needs, not a one-size-fits-all model.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Security & Compliance Guidance:

“When configuring Health Cloud, ensure security models reflect customer needs, privacy concerns, and regulatory compliance (HIPAA, GDPR, etc.).”

“Review and update security, sharing, and visibility models regularly to address evolving business, regulatory, and compliance requirements.”

Step 1: Understanding the Requirement

A payer organization needs to recruit, credential, and onboard providers into its network. This requires features that manage provider information, credentialing processes, onboarding workflows, and network directory maintenance.

Step 2: Official Salesforce Health Cloud Capability

Salesforce Health Cloud offers an add-on called Provider Network Management (PNM) that is specifically designed for payers to recruit, credential, and onboard providers.

Extract:

“Provider Network Management streamlines recruiting, credentialing, onboarding, and network directory maintenance for payers. It provides tools to manage the provider lifecycle from initial recruitment through onboarding and network management.”

Administer Health Cloud – Provider Network Management

Step 3: Review of Options

A. Contact Center for Payers: Focused on member and provider service center functionality, not recruiting or credentialing.

B. Utilization Management: Focused on authorization and medical necessity reviews, not onboarding or credentialing.

C. Provider Network Management: Specifically built for recruiting, credentialing, and onboarding providers.

D. Provider Relationship Management: Focuses on relationship management post-onboarding, but not credentialing/onboarding workflows.

To access a patient’s insurance coverage, co-pay, and deductible information in the Benefit Verification component of Health Cloud, you need to integrate with external systems (e.g., payers or clearinghouses). Health Cloud provides the Benefit Verification component, which relies on secure API integrations for real-time eligibility and benefits checks.

Step-by-Step Reference:

Configure the Connection Label with the source system's API details:

Extract:

“In Benefit Verification setup, specify the Connection Label and configure the external endpoint and API details to connect to the benefit verification source system.”

(Source: Administer Health Cloud – Benefit Verification Setup)

Create a named credential to support authenticated callouts:

Extract:

“Use Named Credentials to securely store authentication settings and endpoint information for callouts to external services (such as clearinghouses or payers) required for benefit verification.”

(Source: Salesforce Security Guide and Administer Health Cloud – Benefit Verification)

Why not A or B?

The HCBenVerConnect custom setting is not part of the standard configuration for the out-of-the-box Benefit Verification component.

Configuring a URI path alone (without API details and credentials) does not enable secure, authenticated communication.

Step-by-Step Explanation:

Advanced Therapy Management (ATM):For personalized medicine programs, such as those involving apheresis and infusion, Salesforce Health Cloud offers Advanced Therapy Management (ATM), specifically designed for complex therapy coordination.

Exact Extract:

“Advanced Therapy Management supports cell and gene therapy processes by coordinating multiple steps such as collection, manufacturing, apheresis, and infusion.”

When onboarding Health Cloud into an org that already uses Service Cloud, it’s critical to properly configure Organization-Wide Defaults (OWD) to ensure that protected health information (PHI) remains restricted.

The correct settings are:

A. Set Person Accounts to Private

Patients are modeled as Person Accounts in Health Cloud.

Setting Person Accounts to Private ensures PHI isn’t exposed to users outside the Health Cloud business unit.

B. Set related clinical objects to Controlled by Parent or Private

Clinical objects (e.g., Care Plans, Assessments, Referrals) often relate to patients.

Making them Controlled by Parent (Person Account) or Private ensures only authorized users can see PHI.

E. Set Health Details to Controlled by Parent or Private

Health Details contain sensitive clinical data.

Must be restricted at the OWD level to prevent exposure to non-Health Cloud users.

Why not the others?

C. Set Account and Contract to Private

Regular business Accounts/Contracts are part of Service Cloud, not typically where PHI resides. Restricting them isn’t required for PHI protection.

D. Set Contact to Controlled by Parent

Contacts in Health Cloud are often caregivers or providers, not patients (who are Person Accounts).

PHI protection centers around Person Accounts + Clinical Objects + Health Details, not Contacts.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Security and Sharing Guide:

“For HIPAA and other PHI compliance, set Person Accounts and Health Cloud clinical objects to Private or Controlled by Parent.”

“Ensure Health Details are not exposed via default sharing.”

When complying with HIPAA using Salesforce Shield, Bloomington Caregivers must:

Encrypt sensitive data in transit and at rest:

Shield Platform Encryption ensures encryption at rest; Salesforce uses TLS for encryption in transit.

Extract:

“Salesforce Shield encrypts sensitive data at rest. Salesforce also encrypts data in transit using TLS.”

(Source: Salesforce Security Guide, Shield Platform Encryption Guide)

Implement and regularly review audit trails:

Shield Event Monitoring and Field Audit Trail help monitor data access and modifications.

Extract:

“Implement audit trails and monitor them to detect unauthorized or suspicious activities.”

([Source: Salesforce Security Guide, Shield Platform Encryption Guide])

Configure data retention policies:

Retain records for legally required periods to comply with HIPAA.

Extract:

“Data retention policies must comply with legal and regulatory requirements, including HIPAA.”

([Source: Salesforce Security Guide])

Why not B or C?

Providing access to third-party auditors is not a Salesforce Shield requirement; such reviews are typically handled internally.

Using third-party backup solutions is not a core Shield/HIPAA control within Salesforce, and data residency must be managed with care.

Comprehensive Detailed Step by Step Explanation with exact Extracts from Salesforce Health Cloud documents that you have with References

Healthcare Practitioner and Healthcare Provider Objects:

Salesforce recommends using the Healthcare Practitioner object for modeling individual doctors and the Healthcare Provider object for organizations/facilities.

Extract:

“Model physicians using the Healthcare Practitioner object and relate them to organizations or facilities using the Healthcare Provider object.”

— Provider Network Management Data Model

Other Options:

A. Contact and B. Person Account are not the recommended approach for modeling licensed clinical professionals in the Health Cloud provider data model.

In Salesforce Health Cloud, the Remote Monitoring capability enables healthcare providers to capture and analyze patient-generated health data (from devices such as glucose monitors, blood pressure cuffs, or fitness trackers).

To implement this functionality, the following records must be populated:

Units of Measure – Defines the measurement units (e.g., mmHg, bpm, mg/dL) for device readings.

Remote Monitoring Device Types – Represents the categories of patient devices (e.g., heart rate monitor, glucose meter).

Care Observations – Stores the actual readings (vital signs, measurements) coming from the devices.

Code Sets – Provides standardized medical coding (e.g., LOINC, SNOMED, ICD) for interoperability and classification of device data.

Together, these records form the Remote Monitoring data model.

Why not the others?

B. Units of Measure, Code Sets, Remote Monitoring Device Types, Care Episodes

Care Episodes are for tracking episodes of care, not device data.

C. Code Sets, Units of Measure, Care Metric Targets, Care Observations

Care Metric Targets are for goal setting, not required for capturing device data.

D. Code Sets, Biometrics, Care Observations, Chart Metrics

"Biometrics" and "Chart Metrics" are not the correct Health Cloud objects for Remote Monitoring; instead, Remote Monitoring Device Types + Care Observations are used.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud – Remote Patient Monitoring:

“Use Remote Monitoring Device Types, Units of Measure, Code Sets, and Care Observations to capture and store data from connected health devices.”

 Medication Management in Health Cloud enables providers to view all of a patient's prescription history in one place, supporting medication reconciliation and review for better health outcomes.

Extract:

“Use Medication Management to track and review patient prescriptions, past and present, ensuring a comprehensive view of medication history and supporting care team collaboration.”

(Source: Administer Health Cloud – Medication Management)

 Other options (Intelligent Appointment Management, Virtual Care, Integrated Care Management) do not provide comprehensive medication tracking.

The Advanced Patient Card in Health Cloud is a FlexCard-based UI component that can be extended to show more patient context, such as Clinical Alerts. To display additional fields (Category, SubjectID, Date for active alerts), the developer should:

A. Clone the parent card

Best practice is to clone the delivered parent Patient Card rather than edit it directly, so you preserve the Salesforce-provided baseline functionality.

B. Create and activate a new child card

Child cards display specific contextual data (such as Clinical Alerts).

To customize which fields show, you create a new child card and activate it.

C. Create a DataRaptor to extract necessary data

Clinical Alert data must be pulled from Health Cloud objects.

A DataRaptor Extract retrieves the required fields (Category, SubjectID, Date) for use in the FlexCard child component.

Why not the others?

D. Define session variables to control visibility of clinical data – Session variables can control context in OmniStudio, but they aren’t required just to display fields on the Patient Card.

E. Change the child card state to show active – Card states are used for conditional rendering (loading, error, empty states). Showing active alerts requires data filtering in the DataRaptor, not card state changes.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud – Advanced Patient Card

“Clone the Advanced Patient Card to customize it while preserving the delivered version.”

“Use child cards to display detailed data such as conditions, medications, or clinical alerts.”

“Retrieve data for FlexCards with DataRaptor Extracts.”

To ensure a provider can create and view Salesforce reports analyzing patient outcomes and referrals, the following steps are required:

A. Create custom report types for clinical objects.

Health Cloud clinical data (e.g., patient outcomes, referrals, care plans) resides in custom objects.

To report on them, you must create custom report types.

D. Enable the enhanced Analytics for Healthcare setting in Setup.

This setting provides preconfigured reports and dashboards tailored for healthcare, such as referrals, utilization, and outcomes reporting.

E. Assign appropriate permissions to internal users.

Providers need the correct Health Cloud and reporting permissions to access and run these reports.

Without appropriate object-level and FLS permissions, reports won’t display the necessary data.

Why not the others?

B. Leverage the Patient Referral Management unmanaged package – Referral management is now native in Health Cloud. The unmanaged package was used in early versions but is deprecated and not recommended.

C. Adjust template care management reports and dashboards – These are useful but do not provide referral and outcome reporting by themselves. Customization and proper report type setup are still required.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Implementation Guide – Reports and Dashboards:

“Enable Enhanced Analytics for Healthcare to access out-of-the-box reports and dashboards for referrals, utilization management, and patient outcomes.”

“Create custom report types for Health Cloud clinical objects to extend reporting capabilities.”

“Ensure users have the appropriate object and field permissions to run reports.

Video Visits for Social Determinants of Health (SDOH):

Exact Extract:

“Use Virtual Care in Health Cloud to enable video visits between care providers and patients, including for conversations about social and economic factors.”

To improve appointment scheduling and provide patient self-service, these three Health Cloud features should be configured:

Experience Cloud for Health Cloud:

Allows creation of patient-facing portals for self-service appointment booking and information access.

Extract:

“Experience Cloud enables self-service portals for patients, supporting appointment scheduling and other interactions.”

(Source: Administer Health Cloud – Experience Cloud)

Intelligent Appointment Management:

Offers advanced scheduling features and automation to reduce wait times and manual booking.

Extract:

“Intelligent Appointment Management in Health Cloud supports both self-service and agent-assisted scheduling workflows.”

(Source: Administer Health Cloud – Intelligent Appointment Management)

Provider Search:

Lets patients find the right clinic or provider based on specialty, availability, and other criteria.

Extract:

“Provider Search empowers patients to search for providers and book appointments online through self-service portals.”

(Source: Administer Health Cloud – Provider Search)

Why not A or D?

Intelligent Form Reader is used for document capture, not for scheduling or self-service.

Assessments and Recommendations are used for care management, not scheduling.