Health-Cloud-Accredited-Professional Salesforce Health Cloud Accredited Professional AP-211 Exam Questions and Answers

The requirement is:

Encryption at rest → Handled by Salesforce Shield Platform Encryption.

Notification of activities (user monitoring, data access) → Provided by Event Monitoring in Salesforce Shield.

Extensive field tracking → Achieved with Field Audit Trail, also part of Salesforce Shield.

That’s why the correct answer is the Salesforce Shield bundle, which directly addresses all three compliance needs.

Why not the others?

A. Role Hierarchy, Password Policies, IP Restrictions → These are basic Salesforce security features, but they don’t provide encryption at rest or activity monitoring.

B. Field Audit Trail + Encryption + 2FA → Close, but Field Audit Trail and Encryption require Shield anyway, and 2FA is important but doesn’t meet the monitoring requirement.

D. Security Health Check + DLP policies → Useful for improving org security posture, but Salesforce does not have native DLP policies like in other security platforms. This doesn’t satisfy the encryption + monitoring requirement.

Salesforce Health Cloud / Security Reference:

???? Salesforce Shield Overview:

“Use Shield Platform Encryption for encryption at rest.”

“Use Event Monitoring to monitor and track user activity across apps.”

“Use Field Audit Trail to retain field value changes for compliance requirements.”

When organization-wide default access to patient data is set to Private, Care Team functionality in Health Cloud is the standard, out-of-the-box method to manage individual access to patient records.

Step-by-Step Reference:

Health Cloud uses Care Teams to manage access to patient records.

Extract:

“Add care team members (users, contacts, or person accounts) to the patient’s care team and assign appropriate access (Read or Read/Write) to patient records.”

(Source: Administer Health Cloud - Manage Care Teams)

Administrators can specify the access level (Read or Read/Write) for each care team member, allowing for precise control as per role requirements.

Extract:

“Assign record access levels for care team members when adding them to a patient’s care team. This is especially important when the OWD is set to Private.”

(Source: Administer Health Cloud - Care Team Access)

This ensures compliance and proper segmentation of data, as required by healthcare regulations.

The use case describes:

A UI component to display customer data → FlexCards

A link to start a process (build a new order) → OmniScript

Retrieving and displaying available products → DataRaptors (and often Integration Procedures if orchestration is needed).

Let’s map it step by step:

D. FlexCards → Used to display contextual customer data on the UI and provide clickable actions (like "Create New Order").

E. OmniScript → Guides the user through the order creation process, step by step (product selection, details, confirmation).

A. DataRaptors → Extract and load Salesforce data (e.g., retrieving available products, saving the order).

???? These three are the core capabilities needed.

Why not the others?

B. Integration Procedures – Helpful if the solution requires multiple data sources or orchestration, but the question doesn’t explicitly state external integration or complex orchestration. If data is all within Salesforce, DataRaptors are enough.

C. Document Generation – Used to create documents (PDFs, Word, etc.), which isn’t part of this order creation flow.

Salesforce Health Cloud / OmniStudio Reference:

???? Salesforce OmniStudio Developer Guide

“FlexCards present contextual information and actions in a UI component.”

“Use OmniScripts to guide users through business processes such as creating orders.”

“DataRaptors retrieve, transform, and save Salesforce data for use in OmniScripts and FlexCards.”

After deploying Enhanced Timeline, you must register the custom object to the Timeline before it will appear in the Timeline component on the Lightning page.

Extract:

“Add new objects to the Timeline after deployment in setup, then update the Timeline component to include them.”

(Source: Administer Health Cloud – Enhanced Timeline)

The Advanced Patient Card in Health Cloud is a FlexCard-based UI component that can be extended to show more patient context, such as Clinical Alerts. To display additional fields (Category, SubjectID, Date for active alerts), the developer should:

A. Clone the parent card

Best practice is to clone the delivered parent Patient Card rather than edit it directly, so you preserve the Salesforce-provided baseline functionality.

B. Create and activate a new child card

Child cards display specific contextual data (such as Clinical Alerts).

To customize which fields show, you create a new child card and activate it.

C. Create a DataRaptor to extract necessary data

Clinical Alert data must be pulled from Health Cloud objects.

A DataRaptor Extract retrieves the required fields (Category, SubjectID, Date) for use in the FlexCard child component.

Why not the others?

D. Define session variables to control visibility of clinical data – Session variables can control context in OmniStudio, but they aren’t required just to display fields on the Patient Card.

E. Change the child card state to show active – Card states are used for conditional rendering (loading, error, empty states). Showing active alerts requires data filtering in the DataRaptor, not card state changes.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud – Advanced Patient Card

“Clone the Advanced Patient Card to customize it while preserving the delivered version.”

“Use child cards to display detailed data such as conditions, medications, or clinical alerts.”

“Retrieve data for FlexCards with DataRaptor Extracts.”

 FHIR-Based Interoperability with Transformation:

Exact Extract:

“Middleware solutions enable integration with EHRs using HL7 or FHIR standards and can perform necessary data transformation for compatibility with Health Cloud.”

To ensure a provider can create and view Salesforce reports analyzing patient outcomes and referrals, the following steps are required:

A. Create custom report types for clinical objects.

Health Cloud clinical data (e.g., patient outcomes, referrals, care plans) resides in custom objects.

To report on them, you must create custom report types.

D. Enable the enhanced Analytics for Healthcare setting in Setup.

This setting provides preconfigured reports and dashboards tailored for healthcare, such as referrals, utilization, and outcomes reporting.

E. Assign appropriate permissions to internal users.

Providers need the correct Health Cloud and reporting permissions to access and run these reports.

Without appropriate object-level and FLS permissions, reports won’t display the necessary data.

Why not the others?

B. Leverage the Patient Referral Management unmanaged package – Referral management is now native in Health Cloud. The unmanaged package was used in early versions but is deprecated and not recommended.

C. Adjust template care management reports and dashboards – These are useful but do not provide referral and outcome reporting by themselves. Customization and proper report type setup are still required.

Salesforce Health Cloud Reference:

???? Salesforce Health Cloud Implementation Guide – Reports and Dashboards:

“Enable Enhanced Analytics for Healthcare to access out-of-the-box reports and dashboards for referrals, utilization management, and patient outcomes.”

“Create custom report types for Health Cloud clinical objects to extend reporting capabilities.”

“Ensure users have the appropriate object and field permissions to run reports.

Step-by-Step Explanation:

CRM Analytics for Health Cloud:

Exact Extract:

“CRM Analytics for Health Cloud delivers prebuilt dashboards and extended analytics for monitoring care plans, outcomes, and adherence across networks and facilities.”

Step 1: Understanding the Discovery Framework in Health Cloud

The Discovery Framework in Salesforce Health Cloud is designed to streamline intake and clinical assessments by providing reusable, modular, and compliant tools for healthcare organizations. It enables organizations to collect, store, and reuse responses to assessment questions efficiently and securely.

Comprehensive Detailed Step by Step Explanation with exact Extracts from Salesforce Health Cloud documents that you have with References

Business Rules Engine (BRE):

Enables you to define, automate, and manage approval criteria for prior authorizations.

Extract:

“Use Business Rules Engine to automate decisions and apply approval criteria for utilization management and prior authorizations.”

— OmniStudio: Business Rules Engine

Utilization Management Data Model:

Provides standard Health Cloud objects to manage prior authorizations, including requests, approvals, and denials.

Extract:

“Health Cloud Utilization Management provides a complete data model for tracking prior authorization requests and decisions.”

— Health Cloud: Utilization Management Data Model

Out-of-the-box Process Libraries:

Prebuilt processes for common healthcare workflows, including prior authorizations.

Extract:

“Out-of-the-box process libraries provide reusable flows for utilization management, including authorizations, appeals, and notifications.”

— Administer Health Cloud: Process Libraries

Incorrect Options:

A. Claims data model: Related to claims, not prior authorizations.

B. Intelligent Appointment Management: Focused on scheduling, not utilization management or prior authorization.

Step-by-Step Explanation:

Health Cloud Best Practice for Displaying Internal and External Data:

FlexCards (part of OmniStudio) can display data from multiple sources in a unified view on a patient record.

Integration Procedures connect to external systems and bring in data (e.g., from EHRs or other sources).

DataRaptors extract and transform Salesforce data for display and use in FlexCards.

Salesforce Documentation Reference:

“FlexCards can display internal Salesforce data and call Integration Procedures or DataRaptors to bring in external or standard object data.”— OmniStudio Standard Guide

“Integration Procedures are used to retrieve and update data from external systems and can be invoked directly from FlexCards or OmniScripts.”— OmniStudio Integration Procedures

“DataRaptors map Salesforce data to and from FlexCards and Integration Procedures, enabling seamless display of patient information.”— OmniStudio DataRaptors

Other Options:

Salesforce Flows: Good for automation but not for real-time display of combined external and internal data on record pages.

Visualforce Pages: Legacy solution, not recommended for modern Health Cloud patient page display, and does not natively integrate with OmniStudio tools.

DataRaptors are best for extracting, transforming, and loading Salesforce data, especially when handling data from related SObjects.

Single DataRaptor for related SObjects:

Extract:

“Use a DataRaptor Extract when you need to read Salesforce data, such as retrieving fields from multiple related SObjects in a single read.”

(Source: Omnistudio Standard Guide – DataRaptors)

Why not B, C, or D?

SendMail tasks, complex multi-step logic, or external data connections are handled by Integration Procedures, not DataRaptors.

To ensure that the new office address is sent to patients via email after booking, you need logic in the Integration Procedure that checks the office location and triggers the correct email template.

Conditional Blocks in Integration Procedures allow developers to execute actions (like sending a specific email) only when certain conditions are met—such as the new office location.

Extract:

“Use a Conditional Block in an Integration Procedure to execute logic based on data values or conditions. For example, send a specific notification when a record matches certain criteria.”

(Source: Omnistudio Standard Guide – Integration Procedures)

Why not A, B, or C?

Removing Try-Catch, building If-Elself logic, or only updating test conditions do not leverage the maintainable and declarative power of Conditional Blocks in Integration Procedures.

Step 1: Requirement Analysis

The payer wants to use predefined rules for prior authorization request reviews, seeking out-of-the-box Health Cloud functionality for speed to value.

Step 2: Health Cloud Prior Authorization & Rules Engine

The Expression Set Templates in Health Cloud provide a prebuilt, configurable framework to automate and standardize prior authorization request reviews. These templates contain reusable logic and criteria that can be easily tailored and applied to common authorization scenarios.

Extract:

“Use Health Cloud’s prebuilt Expression Set Templates to accelerate prior authorization configuration. These templates enable payers to implement standardized review criteria and automate decision logic without building rules from scratch.”

Administer Health Cloud – Utilization Management and Expression Sets

Integration Procedures, FlexCards, and OmniScript Templates are OmniStudio tools for integration, UI, and guided processes, but Expression Set Templates are the feature specifically designed for rules automation in Utilization Management.

 Dependent Intervention Tasks:

Exact Extract:

“Action Plan Templates allow you to define and manage dependent intervention tasks for integrated care management workflows, enabling conditional task sequencing.”

Expanding Access to Auditors:

Exact Extract:

“Use criteria-based sharing rules to grant additional access to Person Account (patients) records for users or groups who do not own the records, such as auditors.”

Video Visits for Social Determinants of Health (SDOH):

Exact Extract:

“Use Virtual Care in Health Cloud to enable video visits between care providers and patients, including for conversations about social and economic factors.”

Step-by-Step Explanation:

Salesforce Health Cloud Prerequisites:

Enable Person Accounts:

Required for representing patients and healthcare contacts.

“Person Accounts must be enabled before installing Health Cloud.”

— Reference: Health Cloud Installation Prerequisites

Enable Chatter:

Health Cloud uses Chatter for collaboration between care teams.

“Chatter must be enabled to use Health Cloud features like care coordination and notes.”

— Reference: Health Cloud Installation Prerequisites

Enable Contacts to Multiple Accounts:

Necessary to relate patients to multiple organizations/providers.

“Enable Contacts to Multiple Accounts to relate contacts (patients) to more than one account (e.g., provider, payer).”

— Reference: Health Cloud Installation Prerequisites

Other Options:

B. Enable Shield Event Monitoring: Not required for Health Cloud installation (but is a best practice for auditing and compliance in some orgs).

D. Enable Health Cloud Installation Monitor: Not a standard Salesforce setting or prerequisite.

Comprehensive Detailed Step by Step Explanation with exact Extracts from Salesforce Health Cloud documents that you have with References

Request Review Types:

Utilization Management processes center around reviewing requests for appropriateness of care, with the three main types being Prior Authorization Review, Concurrent Review, and Retrospective Review.

Extract:

“Utilization Management supports prior authorization, concurrent, and retrospective reviews to evaluate care appropriateness case by case.”

— Utilization Management in Health Cloud

Care Requests:

Care Requests are the mechanism for providers to seek authorization from payers for drugs, services, or admissions.

Extract:

“Design care request processes to support providers seeking health plan authorization for services, medications, or admissions.”

— Health Cloud Utilization Management Data Model

Why not the other options?

A: Next Best Action is more for care management recommendations, not utilization review.

C: Intake agent count is an operational consideration, not a UM process.

When complying with HIPAA using Salesforce Shield, Bloomington Caregivers must:

Encrypt sensitive data in transit and at rest:

Shield Platform Encryption ensures encryption at rest; Salesforce uses TLS for encryption in transit.

Extract:

“Salesforce Shield encrypts sensitive data at rest. Salesforce also encrypts data in transit using TLS.”

(Source: Salesforce Security Guide, Shield Platform Encryption Guide)

Implement and regularly review audit trails:

Shield Event Monitoring and Field Audit Trail help monitor data access and modifications.

Extract:

“Implement audit trails and monitor them to detect unauthorized or suspicious activities.”

([Source: Salesforce Security Guide, Shield Platform Encryption Guide])

Configure data retention policies:

Retain records for legally required periods to comply with HIPAA.

Extract:

“Data retention policies must comply with legal and regulatory requirements, including HIPAA.”

([Source: Salesforce Security Guide])

Why not B or C?

Providing access to third-party auditors is not a Salesforce Shield requirement; such reviews are typically handled internally.

Using third-party backup solutions is not a core Shield/HIPAA control within Salesforce, and data residency must be managed with care.

Step 1: Requirement Analysis

Admin needs to leverage Advanced Therapy Management for complex gene therapy scheduling.

Step 2: Key Capabilities of Advanced Therapy Management

Book multi-step appointments: Supports sequencing and booking complex, interdependent appointments and procedures (e.g., cell collection, manufacturing, infusion).

Reschedule part of the appointment chain: Enables rescheduling one step in a multi-step process without rebooking the entire chain.

Extract:

“Advanced Therapy Management allows for the orchestration of complex, multi-step appointment chains and the flexibility to reschedule individual steps in the chain.”

Administer Health Cloud – Advanced Therapy Management

Other options:

A: Telehealth scheduling is not a specific feature of Advanced Therapy Management.

D: Einstein is not natively used for chain optimization in Advanced Therapy Management as per current documentation.

Verified Answers:

B. Book multi-step appointments.

C. Reschedule part of the appointment chain.

Step 1: Requirement Analysis

After deploying a care plan template (including problems, goals, and tasks) via Data Loader to the final environment, users must be able to use the new template for creating care plans in production.

Step 2: Salesforce Health Cloud Documentation Guidance

According to the official Health Cloud administration guide, two key post-deployment steps are required:

1. Confirm User Access to Care Plan Objects

Users must have the correct permissions to view, create, and use care plan templates and related records. This involves assigning the appropriate permission sets or profiles to allow access to the Care Plan, Care Plan Template, and related objects.

Extract:

“Ensure users have the necessary permissions to access care plan templates and related objects so they can view and apply templates to patients’ care plans.”

Administer Health Cloud – Care Plans and Permissions

2. Activate the New Care Plan Template

Templates (and their related records) must be activated after being deployed to make them available for use by end users. Care plan templates in Salesforce Health Cloud have an “Active” status that must be set to “True” or “Activated” before users can select them when creating new care plans.

Extract:

“After importing care plan templates and related data, administrators must activate the template to make it available to care coordinators and clinicians.”

Administer Health Cloud – Deploying and Activating Care Plan Templates

Other Options:

B. Activate the problems, goals, and tasks associated with the template:Not required as a separate step. When you activate the care plan template, its associated problems, goals, and tasks become available.

D. Conduct end-user training:While important, it is not a required technical step for enabling the template after deployment.

Verified Answers:

A. Confirm User access to Care Plan objects.

C. Activate the new care plan template.