Health-Cloud-Accredited-Professional Salesforce Health Cloud Accredited Professional AP-211 Exam Questions and Answers

Step 1: Requirement Analysis

The payer wants to use predefined rules for prior authorization request reviews, seeking out-of-the-box Health Cloud functionality for speed to value.

Step 2: Health Cloud Prior Authorization and Rules Engine

The Expression Set Templates in Health Cloud provide a prebuilt, configurable framework to automate and standardize prior authorization request reviews. These templates contain reusable logic and criteria that can be easily tailored and applied to common authorization scenarios.

Extract:

“Use Health Cloud’s prebuilt Expression Set Templates to accelerate prior authorization configuration. These templates enable payers to implement standardized review criteria and automate decision logic without building rules from scratch.”

Administer Health Cloud – Utilization Management and Expres sion Sets

Integration Procedures , FlexCards , and OmniScript Templates are OmniStudio tools for integration, UI, and guided processes, but Expression Set Templates are the feature specifically designed for rules automation in Utilization Management.

Step 1: Requirement Analysis

Payer needs to manage healthcare expenses while ensuring quality, affordable care.

Seeks to streamline approval processes for care requests.

Step 2: Utilization Management in Health Cloud

Utilization Management (UM) provides workflows and automation for reviewing, approving, or denying care requests . This supports balancing cost controls with quality care through evidence-based review processes.

Extract:

“Utilization Management helps payers manage costs and ensure members receive appropriate care by streamlining the review and approval process for pre-authorizations and care requests.”

Administer Health Cloud – Utilization Management

Step 3: Review of Options

A. Utilization Management: Directly addresses care request review, cost, and quality balance.

B. Provider Network Management: Focuses on managing provider networks, not utilization/cost review.

C. Intelligent Appointment Management: For scheduling only.

D. Integrated Care Management: Focuses on care coordination, not cost/approval workflow.

Step-by-Step Explanation:

CRM Analytics for Health Cloud:

Exact Extract:

“CRM Analytics for Health Cloud delivers prebuilt dashboards and extended analytics for monitoring care plans, outcomes, and adherence across networks and facilities.”

 FHIR-Based Interoperability with Transformation:

Exact Extract:

“Middleware solutions enable integration with EHRs using HL7 or FHIR standards and can perform necessary data transformation for compatibility with Health Cloud.”

Health Cloud supports Utilization Management (UM) through the Service Request object, which tracks prior authorization requests, and through integration with electronic prior authorization systems using MuleSoft.

Customize the Service Request object:

Extract:

“The Service Request object is at the core of the Utilization Management process in Health Cloud. You can customize fields, page layouts, and automation to match your business processes for prior authorization.”

( Source: Administer Health Cloud – Utilization Management )

Integrate using MuleSoft Direct for ePA:

Extract:

“Integrate Health Cloud Utilization Management with external systems using MuleSoft Direct, enabling electronic submission and tracking of prior authorizations.”

( Source: Administer Health Cloud – Utilization Management Integration )

Why not B or D?

There is no standard custom setting called UtilizationManagementSettings for this process.

Support Process is more for standard Salesforce Cases and not directly linked to Utilization Management flows in Health Cloud.

The use case mentions:

Plan and track surgical case visits

Manage device inventory

Run cycle counts

These requirements directly align with the Health Cloud Inventory Management data model .

Inventory Management in Health Cloud is designed for MedTech and Life Sciences companies to track:

Surgical case planning and scheduling

Medical device and implant inventory management

Cycle counts and stock levels across facilities

It supports end-to-end surgical case tracking , ensuring the right devices are available at the right place and time.

Why not the others?

A. Life Sciences – Broader model used for clinical trials, patient programs, and pharma engagement, but not focused on surgical case + device inventory.

B. Provider Engagement – Used for managing provider relationship data (e.g., physician affiliations, facilities), not inventory or surgical planning.

C. Intelligent Sales – Focused on sales optimization and customer engagement, not surgical case or inventory management.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud – Inventory Management Guide:

“Use the Inventory Management data model to manage device inventory, surgical case planning, cycle counts, and medical device tracking across healthcare facilities.”

Step-by-Step Explanation:

Intelligent Document Automation:

Exact Extract:

“Intelligent Document Automation in Health Cloud automatically extracts data from incoming documents, including faxes, and creates structured data for downstream workflows.”

The Advanced Patient Card in Health Cloud is a FlexCard-based UI component that can be extended to show more patient context, such as Clinical Alerts . To display additional fields (Category, SubjectID, Date for active alerts), the developer should:

A. Clone the parent card

Best practice is to clone the delivered parent Patient Card rather than edit it directly, so you preserve the Salesforce-provided baseline functionality.

B. Create and activate a new child card

Child cards display specific contextual data (such as Clinical Alerts ).

To customize which fields show, you create a new child card and activate it.

C. Create a DataRaptor to extract necessary data

Clinical Alert data must be pulled from Health Cloud objects.

A DataRaptor Extract retrieves the required fields (Category, SubjectID, Date) for use in the FlexCard child component.

Why not the others?

D. Define session variables to control visibility of clinical data – Session variables can control context in OmniStudio, but they aren’t required just to display fields on the Patient Card.

E. Change the child card state to show active – Card states are used for conditional rendering (loading, error, empty states). Showing active alerts requires data filtering in the DataRaptor , not card state changes.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud – Advanced Patient Card

“Clone the Advanced Patient Card to customize it while preserving the delivered version.”

“Use child cards to display detailed data such as conditions, medications, or clinical alerts.”

“Retrieve data for FlexCards with DataRaptor Extracts .”

Step-by-Step Explanation:

Salesforce Health Cloud Best Practice for Person Accounts Access:

Person Accounts in Salesforce are a combination of an Account and a Contact.

To ensure that access to the person account (patient record) gives access to all data on the record , Salesforce recommends setting the Contact sharing setting to " Controlled by Parent " .

This means the sharing and visibility of the Contact (patient details) will follow the sharing settings of the parent Account (the Person Account).

Salesforce Documentation Reference:

“For Person Account sharing and access, set the Contact object sharing setting to Controlled by Parent. This ensures that users with access to the Account (Person Account) also have access to the associated Contact data.” — Reference: Health Cloud Implementation Guide, Sharing and Access

Why Not the Other Options?

A. Set Modify All on the Account object at the Profile level: Too broad; not recommended due to least privilege principle.

C. Set Private for the Contact object: Would prevent access to the Contact, even if user has access to the Account.

D. Set the organization-wide default to Public Read Write for the Account object: Not best practice for healthcare, as it risks overexposing sensitive data.

To ensure that the new office address is sent to patients via email after booking, you need logic in the Integration Procedure that checks the office location and triggers the correct email template.

Conditional Blocks in Integration Procedures allow developers to execute actions (like sending a specific email) only when certain conditions are met—such as the new office location.

Extract:

“Use a Conditional Block in an Integration Procedure to execute logic based on data values or conditions. For example, send a specific notification when a record matches certain criteria.”

( Source: Omnistudio Standard Guide – Integration Procedures )

Why not A, B, or C?

Removing Try-Catch, building If-Elself logic, or only updating test conditions do not leverage the maintainable and declarative power of Conditional Blocks in Integration Procedures.

The Patient Medication Manager component in Salesforce Health Cloud surfaces data from FHIR-aligned medication objects . When customers request field updates on this UI component, the consultant can configure fields from the underlying objects.

A. Medication Details → Stores key information about a patient’s medications. Fields from this object can be exposed or customized on the Patient Medication Manager.

C. Medication Request → Represents a provider’s request or order for a medication. Fields from this object are also available to configure in the Patient Medication Manager.

Together, these two objects form the basis of what’s displayed and editable in the Patient Medication Manager .

Why not the others?

B. Medication Dispense – Tracks when and how a medication was dispensed. It is not directly configurable for field-level updates in the Patient Medication Manager component.

D. Medication Strength – Captures clinical details about dosage strength, but it isn’t one of the configurable objects in the Patient Medication Manager UI.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Medication Management:

“The Patient Medication Manager component displays information from Medication Details and Medication Request objects. Administrators can add or remove fields from these objects to tailor the component.”

In OmniStudio FlexCards , when you want to change the visual styling of a field element (e.g., font type, font color, formatting), you have two main options:

A. Write custom CSS

OmniStudio FlexCards allow applying custom CSS classes for fine-grained control of styles.

This is how you can specify a font like Times New Roman or apply a red color .

B. Make edits to Field Style

The Field Style editor within the FlexCard Designer lets you directly configure basic styling properties (like text color, background, alignment, etc.) without needing custom CSS.

Why not the others?

C. Make edits to Setup Panel – The Setup Panel is for data source, conditions, and layout configuration , not for styling individual fields.

D. Make edits to Field Properties – Field Properties are used to configure which data is displayed and how it behaves (like label, formatting rules, or conditional display), but styling is handled through Field Style or CSS , not properties.

Salesforce OmniStudio Reference:

???? Salesforce OmniStudio FlexCard Designer Guide

“You can use the Field Style editor to set basic styles, such as font color and alignment.”

“For advanced customization, apply custom CSS classes to field elements.”

The best answer is to leverage the FHIR R4 Patient API. Salesforce Healthcare API is designed to securely connect and interact with systems that use FHIR APIs, and FHIR is the healthcare standard for representing and exchanging electronic health records. The Healthcare API includes Administration resources such as Patient, Practitioner, Encounter, Organization, Location, and RelatedPerson, making the Patient API the correct out-of-the-box method for sharing patient information. Salesforce also documents that the API URL format aligns with the FHIR standard. MuleSoft accelerators and third-party AppExchange tools can be valid integration approaches, but they are not the most cost-effective out-of-the-box choice when the FHIR API already supports standardized healthcare data exchange. Building a custom API is unnecessary and increases cost, complexity, and maintenance.

When complying with HIPAA using Salesforce Shield, Bloomington Caregivers must:

Encrypt sensitive data in transit and at rest:

Shield Platform Encryption ensures encryption at rest; Salesforce uses TLS for encryption in transit.

Extract:

“Salesforce Shield encrypts sensitive data at rest. Salesforce also encrypts data in transit using TLS.”

( Source: Salesforce Se curity Guide , Shield Platform Encryption Guide )

Implement and regularly review audit trails:

Shield Event Monitoring and Field Audit Trail help monitor data access and modifications.

Extract:

“Implement audit trails and monitor them to detect unauthorized or suspicious activities.”

([Source: Salesforce Security Guide, Shield Platform Encryption Guide])

Configure data retention policies:

Retain records for legally required periods to comply with HIPAA.

Extract:

“Data retention policies must comply with legal and regulatory requirements, including HIPAA.”

([Source: Salesforce Security Guide])

Why not B or C?

Providing access to third-party auditors is not a Salesforce Shield requirement; such reviews are typically handled internally.

Using third-party backup solutions is not a core Shield/HIPAA control within Salesforce, and data residency must be managed with care.

In Salesforce Health Cloud’s Identity Verification framework , you can configure which search parameters (such as date of birth, SSN, phone number, etc.) are used by customer service representatives to verify a member or patient’s identity.

To add a new search parameter , you configure an Identity Verification Parameter Item record.

Identity Verification Parameter Item → Defines the actual search fields that will be used in the verification process.

These parameter items are tied to the Identity Verification Process Detail to determine how the verification is performed .

Why not the others?

A. Verification Search Feature – This controls whether identity verification search is enabled, but not the specific search parameters.

B. Identity Verification Process Detail – This defines the steps and rules of the verification process, but doesn’t store the search fields themselves.

D. Linked Identity Search Detail – Used to configure linked identities across systems , not to add new search parameters.

Salesforce Health Cloud Reference:

???? Salesforce Help – Identity Verification in Health Cloud

“To configure the search fields that agents use for member or patient identity verification, create and manage Identity Verification Parameter Item records.”

Salesforce Health Cloud Identity Verification Documentation

Step 1: Requirement Analysis

Birth Date should be a result field and an optional verifier (not required).

Bloomington ID (a custom field) should appear in search results and be a required verifier.

Step 2: Salesforce Health Cloud Identity Verification Process Configuration

The Identity Verification Process Field object in Health Cloud determines which fields are used for search results, required verification, or optional verification during the identity verification process.

You can add multiple records for a field with different purposes (e.g., one as Result Field and another as Required/Optional Verifier).

Extract:

“You can add or modify Identity Verification Process Field records to control which fields are shown as search results, required verifiers, or optional verifiers. For example, to make a field a required verifier, set Field Type to ‘Required Verifier’. To make a field show in results, set Field Type to ‘Result Field’. You can have more than one record for the same field with different Field Types.”

Administer Health Cloud – Identity Verification Process

Step 3: Actions Needed

For Bloomington ID :

Add a record with Field Type = Result Field (to display in search results)

Add another record with Field Type = Required Verifier (to make it a required field for verification)

For Birth Date :

Update the current record so that Field Type is changed from Required Verifier to Optional Verifier (to make it not required but still usable as a verifier)

Ensure there is a record with Field Type = Result Field if Birth Date should show in the results

Step 4: Review of Options

A: Incorrect; it says to delete the Birth Date Required Verifier instead of changing it to optional.

B: Not the right object/method; doesn’t mention the correct object (Identity Verification Process Field).

C: Correct; matches the best practices and object structure in Health Cloud.

D: Incomplete; does not cover all configuration requirements.

Verified Answer:

C. Add two new Identity Verification Process Field records for ‘Bloomington one with Field Type set to Result Field and one with Field Type set to Required Verifier. Change the Birth Date record with Field Type value Required Verifier to Optional Verifier.

Comprehensive Detailed Step by Step Explanation with exact Extracts from Salesforce Health Cloud documents that you have with References

Healthcare Practitioner and Healthcare Provider Objects:

Salesforce recommends using the Healthcare Practitioner object for modeling individual doctors and the Healthcare Provider object for organizations/facilities.

Extract:

“Model physicians using the Healthcare Practitioner object and relate them to organizations or facilities using the Healthcare Provider object.”

— Provider Network Management Data Model

Other Options:

A. Contact and B. Person Account are not the recommended approach for modeling licensed clinical professionals in the Health Cloud provider data model.

Step 1: Requirement

Define workflow for call center users focused on prior authorization status checks.

Step 2: Best Practice for Workflow Discovery

Discovery should be user-centered, involving direct engagement with actual users (personas).

Observing and documenting their daily processes identifies real pain points and optimization opportunities.

Extract:

“Best practice for workflow discovery is to interview and observe key personas, document their processes, and map opportunities for automation and optimization.”

Salesforce Architect – Busine ss Process Discovery

Other options (industry research, previous projects, or proof of concept) do not provide the necessary user insight for workflow design.

The requirement is:

Encryption at rest → Handled by Salesforce Shield Platform Encryption .

Notification of activities (user monitoring, data access) → Provided by Event Monitoring in Salesforce Shield.

Extensive field tracking → Achieved with Field Audit Trail , also part of Salesforce Shield.

That’s why the correct answer is the Salesforce Shield bundle , which directly addresses all three compliance needs.

Why not the others?

A. Role Hierarchy, Password Policies, IP Restrictions → These are basic Salesforce security features, but they don’t provide encryption at rest or activity monitoring .

B. Field Audit Trail + Encryption + 2FA → Close, but Field Audit Trail and Encryption require Shield anyway, and 2FA is important but doesn’t meet the monitoring requirement.

D. Security Health Check + DLP policies → Useful for improving org security posture, but Salesforce does not have native DLP policies like in other security platforms. This doesn’t satisfy the encryption + monitoring requirement.

Salesforce Health Cloud / Security Reference:

???? Salesforce Shield Overview:

“Use Shield Platform Encryption for encryption at rest.”

“Use Event Monitoring to monitor and track user activity across apps.”

“Use Field Audit Trail to retain field value changes for compliance requirements.”

Step-by-Step Explanation:

Supported Data Exchange Standards: Health Cloud natively supports modern clinical data standards such as FHIR R4 and traditional messaging formats like HL7 v2 for interoperability and data exchange.

Exact Extract:

“Health Cloud supports industry standards for data exchange, including FHIR R4 and HL7 v2, to enable clinical interoperability with EHR systems and other healthcare platforms.”

In Salesforce Health Cloud , when a customer wants to view and navigate to critical patient information such as insurance, clinical, and primary care physician details , the right feature to implement is the Advanced Patient Card .

The Advanced Patient Card provides a configurable panel that displays key patient information at a glance directly on the patient’s profile.

It allows quick navigation to related records (insurance coverage, care team/PCP, clinical info, etc.) without switching pages.

It’s specifically designed to give providers and service representatives a 360-degree view of the patient’s most important details .

Why not the others?

A. Enhanced Highlights Panel – This is a general Salesforce feature to show record highlights, but it’s not tailored to healthcare-specific patient insights.

B. Enhanced Timeline – Useful for viewing chronological events (interactions, activities, encounters), but not for quick access to insurance/PCP details.

D. Patient Path – This is a visual guide for patient journeys or care programs , not for surfacing key profile details.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Implementation Guide – Advanced Patient Card:

“Use the Advanced Patient Card to display a patient’s most critical information—such as coverage, conditions, medications, and care team members—directly on the patient profile for easy reference and navigation.”

Salesforce Help: Advanced Patient Card

When configuring security, sharing, and visibility in Salesforce Health Cloud , consultants must consider healthcare-specific requirements such as HIPAA, GDPR, and organizational policies . Two critical considerations are:

B. Understand customer needs, data security, privacy concerns, regulatory compliance, and sharing or visibility restrictions.

Healthcare data involves PHI (Protected Health Information) , which requires strict compliance with HIPAA and regional regulations .

Consultants must tailor security models to meet specific privacy and compliance requirements .

C. Regularly review and update security, sharing, and visibility settings in Health Cloud to align with evolving needs, regulations, and organizational policies.

Regulations change, and so do organizational needs. Security and sharing rules must be reviewed and updated periodically to ensure ongoing compliance and relevance.

Why not the others?

A. Ensure that data mask is used in production to appropriately manage PHI.

Salesforce Data Mask is a tool for sandbox data anonymization , not for production . PHI in production should be secured using encryption, field-level security, and sharing rules—not Data Mask.

D. Review Salesforce documentation and implement a standardized security and visibility model.

While documentation is helpful, healthcare organizations require tailored security models that fit unique compliance and data access needs , not a one-size-fits-all model.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Security and Compliance Guidance:

“When configuring Health Cloud, ensure security models reflect customer needs, privacy concerns, and regulatory compliance (HIPAA, GDPR, etc.). ”

“ Review and update security, sharing, and visibility models regularly to address evolving business, regulatory, and compliance requirements.”