FREE CMAA Study Guide 2026: All 7 Domains

This free CMAA study guide walks through every content domain the NHA Certified Medical Administrative Assistant exam tests, organized to the current NHA test plan.^[2]

It’s interactive, not a wall of text: every module has built-in checkpoint quizzes, flashcards, and practice questions, so you learn by doing — not just reading.

The CMAA is the front-officemedical credential — it certifies the person who runs the medical office’s administrative side: scheduling, registration, the medical record, communication, compliance, and billing intake. It tests seven official domains, and we teach them as seven study modules that map one-to-one to the NHA outline.

The two heaviest are Communication & Professionalism and Patient Encounter (21 scored items each), so the exam rewards front-desk skills. Read a module, test yourself at each checkpoint, then drill gaps with our free practice test and flashcards. This is a high-yield overview mapped to the official content — the best free CMAA resource online, not a full medical-office textbook.

CMAA Exam Snapshot

The CMAA covers seven domains under the NHA test plan.^[2] Study by weight — Communication & Professionalism and Patient Encounter are the heaviest at 21 scored items each:

The CMAA is the front-office counterpart to NHA’s clinical and coding credentials. Where the CCMA adds hands-on clinical skills (vital signs, phlebotomy, EKGs) and the CBCS goes deep on medical coding and claims, the CMAA focuses on running the administrative side of the practice. If you are weighing credentials, see our CCMA study guide and CBCS study guide.

Module 1 · Foundational Knowledge

10 items — about 9% of the exam. This domain sets the vocabulary and the lay of the land: basic medical terminology, the body systems, who is on the healthcare team, where care is delivered, and how it is paid for. It is the smallest domain, but it underpins everything else.

1.1 Medical Terminology & Body Systems

Medical terms are built from a root (the body part or system), an optional prefix (often position, number, or negation), and a suffix (often a condition or procedure). Breaking a word into parts lets you decode it: cardi/o (heart) + -itis(inflammation) = carditis. A CMAA doesn’t diagnose, but reads these terms constantly in charts, referrals, and scheduling requests.

1.2 The Healthcare Team & Care Settings

Care is delivered by a team — physicians, physician assistants, nurse practitioners, nurses, medical assistants, and administrative staff — across many settings. The key split a CMAA must know is Inpatient (formally admitted, overnight stay) versus Outpatient (ambulatory, no admission), because the setting drives the forms, codes, and workflow.

1.3 How Care Is Paid For

Payers fall into three groups: commercial/managed care (employer plans, HMO, PPO), government programs (Medicare, Medicaid, TRICARE, CHIP), and other liabilitypayers (workers’ compensation, auto). The plan type sets the rules the front desk follows — networks, Referral, and the patient’s cost share.^[9]

Module 2 · Communication & Professionalism

21 items — about 19% of the exam, tied for the largest domain. The CMAA is the voice and face of the practice. This domain tests how you communicate by phone and in writing, deliver customer service, and carry yourself professionally with patients, providers, and the public.

2.1 Telephone & Written Communication

The phone is the office’s front line. Answer promptly and identify yourself and the practice, speak clearly, and gather complete information before acting. Use Triage to sort calls by urgency — a chest-pain caller is handled before a prescription refill. Written communication (letters, emails, secure messages) must be accurate, professional, and HIPAA-compliant.

2.2 Customer Service & Patient Relations

Therapeutic communication — active listening, empathy, open-ended questions, and matching nonverbal cues — makes patients feel heard. Avoid communication blocks like false reassurance, judging, or changing the subject. When a patient is upset, stay calm, acknowledge the feeling, move somewhere private, focus on what can be done, and escalate to a supervisor when needed.

2.3 Professionalism, Teamwork & Cultural Competence

Professionalism covers appearance, punctuality, reliability, confidentiality, and a respectful manner. Teamwork means understanding each role’s Scope of practice and communicating clearly across the team. Cultural competence is delivering respectful care across language, beliefs, and backgrounds — using qualified interpreters rather than family members for medical conversations, and avoiding assumptions.

Module 3 · Medical Law, Ethics & Compliance

17 items — about 15% of the exam. This is the rules domain: HIPAA and confidentiality, consent and records release, patient rights, ethics, and liability. It is heavily tested because the front desk handles PHI all day, and a single mistake can be a serious legal problem.

3.1 HIPAA, PHI & Confidentiality

HIPAA protects PHI through its Privacy and Security Rules. Staff may use or disclose only the Minimum necessary information, and most uses beyond treatment, payment, and operations (TPO) need the patient’s written authorization.^[3] HITECH strengthened enforcement and added breach-notification rules. The Security Rule adds administrative, physical, and technical safeguards for electronic PHI.

3.2 Consent, Records Release & Patient Rights

Informed consent is the patient’s documented agreement to treatment after being told the risks, benefits, and alternatives; Implied consent is inferred from actions or assumed in a true emergency. Releasing records requires a signed Release of information (ROI) form. Patients also have rights — to access their own records, to a Notice of Privacy Practices, and to request restrictions and amendments.^[5]

3.3 Ethics, Liability & Compliance

Medical ethics center on respecting patients, doing good (beneficence), avoiding harm (non-maleficence), and honesty. Liability turns on the Standard of care — what a reasonably prudent worker would do — and on staying within your Scope of practice.

Fraud is the knowing submission of false claims; abuse is improper practice without proven intent. Compliance plans, the False Claims Act, and OIG oversight keep practices honest.

Module 4 · Scheduling

16 items — about 15% of the exam. Scheduling is the CMAA’s signature skill. This domain tests the Appointment matrix, the major scheduling systems, special appointment types, and how to handle No-shows, reminders, and referrals.

4.1 The Matrix & Scheduling Systems

Build the Appointment matrix first — block off lunch, meetings, rounds, and time off — then schedule only into the open slots. Choose a system to match the practice: Stream scheduling (set times), Wave scheduling (top-of-hour groups), Modified wave, or Double-booking for short visits.^[2]

4.2 Appointment Types & Special Situations

Match the slot length to the visit: a new-patient or physical needs more time than a quick recheck. Handle special situations correctly — work-ins and emergencies are fit into the day, while recurring visits are scheduled as a series. Always confirm the patient’s contact info and any prep instructions (fasting, arriving early) when booking.

4.3 No-Shows, Reminders & Referrals

Reduce No-shows with reminder calls, texts, and emails, and document missed appointments per office policy (repeated no-shows may have consequences). When a visit needs a specialist, manage the Referral and any Prior authorization so the specialist visit is covered. Track recalls so patients return for needed follow-up.

Module 5 · Patient Encounter

21 items — about 19% of the exam, tied for the largest domain. This is the heart of the front desk: registering and checking in patients, maintaining the medical record and the EHR, and verifying insurance so the visit gets paid.

5.1 Registration & Intake

At check-in, collect or update the patient’s Demographics, scan the photo ID and insurance card, obtain required signatures (Notice of Privacy Practices acknowledgement, consent, assignment of benefits), and collect the Copayment. Accurate registration is the single biggest predictor of a clean claim — most denials start with a wrong name, date of birth, or policy number.

5.2 The Medical Record & EHR

The medical record documents the patient’s care; today it is usually an EHR.^[6] It must be accurate, complete, legible, and confidential, and retained for the state-required period.

The CMAA maintains the administrative parts — demographics, correspondence, consents — and files results and the SOAP notes the provider creates. Never alter a record improperly; corrections are made with a dated, signed addendum, never by deleting.

5.3 Insurance Verification & Front-Desk Flow

Verifying insurance before the visit confirms active coverage, effective dates, copay and deductible amounts, and whether a Referral or Prior authorization is needed. Catching coverage problems up front prevents denials and surprise bills. For Medicare services likely to be denied, the office gives the patient an ABN so they can accept responsibility.^[8]

Module 6 · Billing & Revenue Cycle

11 items — about 10% of the exam. The CMAA supports the front end of billing: capturing charges on the Encounter form, understanding the basics of coding and claims, and managing the patient’s financial responsibility. This is intake-level billing, not the deep coding of the CBCS.

6.1 The Revenue Cycle & Encounter Form

The Revenue cycle runs from scheduling and registration through coding, claim submission, and payment. The Encounter form (superbill) captures the diagnoses and services from a visit and is the source document for the claim. Clean front-end work — accurate registration and verification — is what lets the claim pay on the first pass.

6.2 Coding & Claims Basics

Two code sets drive the claim: ICD-10-CM reports the diagnosis (the “why”) and CPT/HCPCS reports the procedure or service (the “what”). Each procedure must be supported by a diagnosis to show medical necessity. Professional claims go out on the CMS-1500, often through a Clearinghouse, electronically.^[7] The CMAA doesn’t need to code in depth, but must recognize these pieces.

6.3 Patient Financials & Collections

The patient’s share is the sum of any Copayment, Deductible, and Coinsurance, up to an out-of-pocket maximum. The front desk collects copays at the visit and bills the remaining balance after the payer responds. Patient billing and collections follow fair-debt rules (the FDCPA) and the office’s financial policy.

Module 7 · Administrative Procedures & Logistics

14 items — about 13% of the exam. This domain covers running the office: daily operations, inventory and supplies, mail and correspondence, records management, and the safety and emergency rules (including OSHA) that keep staff and patients safe.

7.1 Office Operations & Inventory

Smooth operations mean opening and closing routines, maintaining equipment, and keeping supplies stocked. Inventory control tracks what’s on hand, sets reorder points, and verifies deliveries against packing slips and invoices. Petty cash, banking, and accounts-payable basics may also appear.

7.2 Mail, Correspondence & Records Management

The CMAA processes incoming and outgoing mail, drafts professional correspondence, and manages records under HIPAA. Records retention follows state law (varies; longer for minors), and disposal of PHI must be secure (shredding paper, wiping electronic media). Filing systems — alphabetic, numeric, or subject — must be consistent and confidential.

7.3 Safety, OSHA & Emergency Preparedness

OSHA protects employees: the Bloodborne Pathogens Standard requires exposure plans and PPE, and Hazard Communication requires a SDS for hazardous chemicals.^[10] The office also needs emergency procedures — fire, evacuation, and medical emergencies — and the CMAA helps keep exits clear, knows the codes, and can call for help. Infection control (hand hygiene, standard precautions) protects everyone.

How to Use This CMAA Study Guide

This guide is built to be worked, not just read. The most efficient path to a pass:

• Study by weight. Communication & Professionalism (21) and Patient Encounter (21) are the heaviest — start there, then Medical Law (17), Scheduling (16), Administrative Procedures (14), Billing (11), and Foundational Knowledge (10).
• Master the front-desk workflows. Know the scheduling systems, HIPAA rules, registration steps, and the medical record cold — these recur across domains.
• Check off as you go. Use the Study Guide Contents to mark each section done; it raises your exam-readiness score.
• Take every checkpoint. The end-of-module quizzes show you exactly which domains need another pass.
• Drill the weak domain. Send your weak area into the flashcards and a practice test until the score climbs.

CMAA Glossary

The high-yield CMAA terms in one place — hover any dotted term in the guide, or flip the whole deck here as a self-grading flashcard set.

ABN

Advance Beneficiary Notice of Noncoverage (CMS-R-131) — a notice that a Medicare service may be denied and the patient may owe.

Appointment matrix

The framework in the schedule that blocks the times a provider is unavailable (lunch, meetings, vacations) before any patients are booked.

Bloodborne Pathogens Standard

The OSHA rule requiring exposure-control plans, PPE, and safe sharps handling to protect staff.

Clearinghouse

A service that validates, reformats, and routes electronic claims to the correct payer.

CMS-1500

The standard paper claim form used by physicians and other non-institutional (professional) providers.

Coinsurance

The percentage of a covered service's cost the patient pays after meeting the deductible.

Coordination of benefits

COB — the rules that decide which plan pays first when a patient has more than one.

Copayment

A fixed dollar amount the patient pays for a covered service at the time of care.

CPT

Current Procedural Terminology — the AMA code set used to report physician and outpatient procedures and services.

Deductible

The amount a patient must pay out of pocket each year before the plan begins to pay.

Demographics

The patient's identifying and contact information collected at registration (name, DOB, address, insurance).

Double-booking

Scheduling two patients in the same time slot, used for short visits or when one may not need the full time.

EHR

Electronic Health Record — a secure digital version of a patient's chart, shareable across authorized providers.

Encounter form

The superbill — the document recording the services and diagnoses from a visit; the source for the claim.

HIPAA

The Health Insurance Portability and Accountability Act, which protects health information through its Privacy and Security Rules.

HITECH

The Health Information Technology for Economic and Clinical Health Act, which strengthened HIPAA enforcement and breach notification.

HMO

Health Maintenance Organization — a managed-care plan requiring in-network care and usually a referral.

ICD-10-CM

The U.S. code set for reporting diagnoses and the reasons for an encounter.

Implied consent

Consent inferred from a patient's actions (rolling up a sleeve) or assumed in a true emergency.

Informed consent

A patient's voluntary, documented agreement to treatment after being told the risks, benefits, and alternatives.

Inpatient

Care for a patient who is formally admitted to a hospital or facility for an overnight or longer stay.

Medicaid

The joint federal-state program for low-income individuals; generally the payer of last resort.

Medicare

The federal health program for people 65+ and certain others: Part A (hospital), B (medical), C (Advantage), D (drugs).

Minimum necessary

The HIPAA principle of using or disclosing only the least PHI needed to accomplish a purpose.

Modified wave

A blend of wave and stream: two or three patients at the start of each half-hour, then single slots.

No-show

A patient who misses an appointment without canceling; tracked and managed under office policy.

OSHA

The Occupational Safety and Health Administration, which sets workplace-safety standards that protect medical-office staff.

Outpatient

Ambulatory care provided without an overnight admission — offices, clinics, urgent care, same-day surgery.

PHI

Protected Health Information — individually identifiable health information protected under HIPAA.

PPO

Preferred Provider Organization — a managed-care plan allowing out-of-network care without a referral at higher cost.

Prior authorization

A payer's approval that must be obtained before certain services or drugs, or the claim is denied.

Problem list

The running list of a patient's active diagnoses and conditions kept in the chart.

Records retention

The state- and payer-required period a medical record must be kept before secure destruction.

Referral

A primary-care provider's authorization for a patient to see a specialist, common in HMO plans.

Release of information

ROI — the patient-authorized disclosure of medical records to a third party, using a signed form.

Revenue cycle

The financial process of a patient encounter from scheduling and registration through coding, claims, and payment.

Scope of practice

The duties a credentialed worker is legally permitted to perform; acting outside it is a liability risk.

SDS

Safety Data Sheet — the document describing a hazardous chemical's handling, hazards, and first aid (Hazard Communication).

SOAP note

A progress-note format: Subjective, Objective, Assessment, Plan.

Standard of care

The level of care a reasonably prudent provider would give under similar circumstances; the benchmark in liability.

Stream scheduling

Time-specified scheduling: each patient is given a set appointment time and slot length; the most common system.

Triage

Sorting patient needs by urgency so the most serious are handled first — used in phone screening and scheduling.

Wave scheduling

Booking several patients at the top of the hour and seeing them in arrival order to smooth out late arrivals and no-shows.

CMAA Study Guide FAQ

References

1. 1.National Healthcareer Association. “Certified Medical Administrative Assistant (CMAA).” nhanow.com. ↑
2. 2.National Healthcareer Association. “CMAA Test Plan (2021 Job Analysis).” nhanow.com. ↑
3. 3.U.S. Department of Health & Human Services. “HIPAA for Professionals: The Privacy Rule.” hhs.gov. ↑
4. 4.U.S. Department of Health & Human Services. “HIPAA Minimum Necessary Requirement.” hhs.gov. ↑
5. 5.U.S. Department of Health & Human Services. “Your Medical Records and Patient Rights.” hhs.gov. ↑
6. 6.Office of the National Coordinator for Health IT. “What is an Electronic Health Record (EHR)?.” healthit.gov. ↑
7. 7.Centers for Medicare & Medicaid Services. “CMS-1500 Paper Claim and Professional Billing.” cms.gov. ↑
8. 8.Centers for Medicare & Medicaid Services. “Advance Beneficiary Notice of Noncoverage (ABN).” cms.gov. ↑
9. 9.Centers for Medicare & Medicaid Services. “Medicare Program — Parts A, B, C, and D.” cms.gov. ↑
10. 10.Occupational Safety and Health Administration. “Bloodborne Pathogens and Healthcare Worker Safety.” osha.gov. ↑

Career Employer

Career Employer is the ultimate resource to help you get started working the job of your dreams. We cover topics from general career information, career searching, exam preparation with free study materials, career interviewing, and becoming successful in your career of choice.

Follow Us:

All Posts