Certified Regulatory Affairs Professional (CRAP) โ Questions and Answers
Question 1: A drug company's Quality Management Review reveals that the ratio of preventive actions to corrective actions is very low (10:90). What does this indicate about the company's quality culture?
- The company is largely reactive rather than proactive in its quality management approach (Correct answer)
- The company has excellent detection systems
- The preventive action process is too burdensome for staff to use
- The company has very few quality problems
Correct answer: The company is largely reactive rather than proactive in its quality management approach
A high corrective-to-preventive action ratio indicates the organization primarily responds to failures after they occur rather than identifying and eliminating potential risks proactively.
Question 2: Under 21 CFR Part 820 (Quality System Regulation), which document formally grants approval for a product or process to proceed after an audit finding is resolved?
- Device Master Record
- Design History File
- CAPA closure record (Correct answer)
- Product release certificate
Correct answer: CAPA closure record
The CAPA closure record formally documents that the corrective action was implemented and verified as effective, enabling process or product release to proceed.
Question 3: Which FDA regulation governs the labeling of over-the-counter (OTC) and prescription drug products?
- 21 CFR Part 201 (Correct answer)
- 21 CFR Part 314
- 21 CFR Part 600
- 21 CFR Part 207
Correct answer: 21 CFR Part 201
21 CFR Part 201 contains the general labeling requirements applicable to both OTC and prescription drug products.
Question 4: When a pharmaceutical company wishes to implement a continuous manufacturing process for a previously batch-manufactured product, FDA recommends addressing this change through:
- A Prior Approval Supplement with comprehensive validation data supporting the continuous process (Correct answer)
- An Annual Report filed within 60 days of implementation
- A Field Alert Report submitted before implementation
- A Type II meeting request with no supplemental filing
Correct answer: A Prior Approval Supplement with comprehensive validation data supporting the continuous process
Moving from batch to continuous manufacturing is a major manufacturing change that requires a Prior Approval Supplement with data demonstrating the continuous process produces equivalent product quality.
Question 5: Under EU regulations, what does the CE marking on a medical device signify?
- The device is approved by the EMA
- The device was manufactured in the EU
- The device has been clinically validated
- The device meets EU health, safety, and environmental requirements (Correct answer)
Correct answer: The device meets EU health, safety, and environmental requirements
CE marking indicates that a product conforms to applicable EU legislation and meets essential safety and performance requirements, allowing free market access across the European Economic Area.
Question 6: What is the primary distinction between a 'critical' and a 'major' audit observation under EU GMP guidelines (EMA Annex)?
- Critical observations pose an immediate risk to patient safety or data integrity; major observations indicate significant non-compliance without immediate risk (Correct answer)
- Critical observations apply only to sterile products
- Major observations require CAPA; critical observations require regulatory reporting
- Critical observations always result in import bans; major observations do not
Correct answer: Critical observations pose an immediate risk to patient safety or data integrity; major observations indicate significant non-compliance without immediate risk
Under EU GMP, critical observations indicate immediate risk to patient safety or data integrity, while major observations reflect significant GMP failures without immediate risk.
Question 7: What is required in the 'Indications and Usage' section of prescription drug labeling?
- The mechanism of action of the drug
- The pharmacokinetic profile of the drug
- The clinical trial methodology used for approval
- A description of the condition(s) for which the drug is approved (Correct answer)
Correct answer: A description of the condition(s) for which the drug is approved
The Indications and Usage section describes the specific disease, condition, or patient population for which FDA has approved the drug.
Question 8: What is the purpose of the 'Supplement Facts' panel required on dietary supplement labels?
- To list the manufacturer's quality certifications
- To indicate FDA approval status
- To provide dosing instructions for therapeutic use
- To disclose serving size, ingredient amounts, and percent daily values (Correct answer)
Correct answer: To disclose serving size, ingredient amounts, and percent daily values
The Supplement Facts panel, required under DSHEA, discloses serving size, ingredient amounts, and percent daily values for dietary supplements.
Question 9: What is a 'field safety corrective action' (FSCA) in the context of medical devices?
- A corrective action performed at the manufacturing facility before distribution
- Any action to reduce a risk of death or serious injury associated with an already-distributed device (Correct answer)
- An action required during pre-market device testing and validation
- An action taken in response to receiving an FDA warning letter
Correct answer: Any action to reduce a risk of death or serious injury associated with an already-distributed device
An FSCA is any action taken by a manufacturer or distributor to reduce the risk of death or serious health deterioration associated with a device already placed on the market.
Question 10: What is the purpose of a staging environment?
- To store backup data
- To host development tools
- To test configurations and changes before deploying to production (Correct answer)
- To run performance tests only
Correct answer: To test configurations and changes before deploying to production
Staging environments replicate production conditions for testing configurations and changes, reducing the risk of deployment failures affecting live systems.
Question 11: What is a 'reminder advertisement' in pharmaceutical promotion?
- An ad that names a drug but makes no efficacy or safety claims about it (Correct answer)
- An annual reminder of a drug's approved indications sent to physicians
- An ad that reminds patients to take medication as directed
- A follow-up ad sent after a new product launch
Correct answer: An ad that names a drug but makes no efficacy or safety claims about it
A reminder advertisement names a drug but makes no claims about it, which exempts it from the fair balance requirement for presenting risk information.
Question 12: What is the purpose of FDA's Expanded Access (compassionate use) program?
- It enables manufacturers to market unapproved drugs after completing post-market studies
- It provides patients with serious conditions access to investigational products outside clinical trials (Correct answer)
- It allows FDA to expand marketing authorization for post-approval drugs to new indications
- It expands FDA's authority to conduct unannounced post-market surveillance inspections
Correct answer: It provides patients with serious conditions access to investigational products outside clinical trials
The Expanded Access program allows patients with serious or life-threatening conditions to access investigational drugs or devices when no comparable alternatives exist and enrollment in a clinical trial is not feasible.
Question 13: When engaging with a Contract Research Organization (CRO) on regulatory submission timelines, which communication practice best reduces risk?
- Communicating only when regulatory issues arise
- Sending all regulatory guidance documents at once at project initiation
- Establishing regular status meetings with defined milestones and escalation paths (Correct answer)
- Delegating all regulatory communication to the CRO's project manager
Correct answer: Establishing regular status meetings with defined milestones and escalation paths
Regular status meetings with clear milestones and defined escalation procedures ensure alignment and allow early identification of risks with external partners like CROs.
Question 14: Which of the following is the primary purpose of a risk-based audit frequency model in pharmaceutical compliance?
- To meet FDA's minimum audit schedule requirements
- To ensure all departments are audited equally each year
- To reduce audit staff workload
- To allocate audit resources proportionally to the compliance risk of each area (Correct answer)
Correct answer: To allocate audit resources proportionally to the compliance risk of each area
Risk-based audit frequency ensures that higher-risk processes and suppliers receive more frequent scrutiny, optimizing resource allocation.
Question 15: A RAPS member disagrees with another member's interpretation of a regulation at a professional conference. The most ethical way to address this is to:
- Publicly challenge the member's credentials
- Ignore the situation to avoid conflict
- Engage in respectful professional dialogue and cite evidence (Correct answer)
- Report the member to RAPS for misconduct
Correct answer: Engage in respectful professional dialogue and cite evidence
Professional ethics call for respectful, evidence-based debate rather than personal attacks or dismissal of disagreement.
Question 16: In Japan, which regulatory body is responsible for approving pharmaceutical products and medical devices?
- TGA
- PMDA only
- Both MHLW and PMDA have roles (Correct answer)
- MHLW only
Correct answer: Both MHLW and PMDA have roles
In Japan, PMDA conducts the review and MHLW grants the final marketing authorization approval.
Question 17: A regulatory affairs manager wants to benchmark submission timelines against industry standards. Which publicly available FDA database provides approval timeline data to support this analysis?
- USP compendium online portal
- FAERS (FDA Adverse Event Reporting System)
- Drugs@FDA database and PDUFA performance reports (Correct answer)
- FDA Form 483 observation database
Correct answer: Drugs@FDA database and PDUFA performance reports
Drugs@FDA and PDUFA performance reports contain approval dates, review times, and cycle information that can be used to benchmark an organization's submission performance.
Question 18: During a process validation review under FDA's 2011 Guidance on Process Validation, Stage 3 (Continued Process Verification) is BEST described as:
- A retrospective review required only after an OOS event
- A one-time study conducted before commercial manufacturing begins
- Validation of cleaning procedures between product campaigns
- Ongoing assurance during routine production that the process remains in a state of control (Correct answer)
Correct answer: Ongoing assurance during routine production that the process remains in a state of control
Stage 3 involves ongoing data collection and statistical analysis during routine production to ensure the validated process remains capable and in control.
Question 19: Which regulatory concept requires that all data supporting a submission be traceable, verifiable, and attributable to the original source?
- Good Clinical Practice (GCP)
- Current Good Manufacturing Practice (cGMP)
- Data Integrity (ALCOA principles) (Correct answer)
- Good Laboratory Practice (GLP)
Correct answer: Data Integrity (ALCOA principles)
ALCOA (Attributable, Legible, Contemporaneous, Original, Accurate) principles define data integrity requirements across all regulatory submissions.
Question 20: A company receives an FDA Form 483 during an inspection. What is the legally correct characterization of this document?
- A formal enforcement action requiring immediate corrective action
- A preliminary injunction notice requiring court response
- A list of inspectional observations that are not final agency determinations (Correct answer)
- An official notice of violation triggering penalty calculations
Correct answer: A list of inspectional observations that are not final agency determinations
FDA Form 483 lists inspectional observations but explicitly states they are not final agency determinations of regulatory violations.
Question 21: Under FDA's labeling requirements, which section of a drug's prescribing information must describe potential adverse reactions identified in clinical trials?
- Drug Interactions
- Adverse Reactions (Correct answer)
- Contraindications
- Warnings and Precautions
Correct answer: Adverse Reactions
The Adverse Reactions section of the prescribing information is specifically designated to describe undesirable effects observed in clinical trials and post-marketing experience.
Question 22: A pharmaceutical company disagrees with FDA's interpretation of a regulation affecting its product. Which is the most appropriate first step in challenging this interpretation?
- File a lawsuit in federal district court
- Submit a citizen petition requesting reconsideration (Correct answer)
- Contact congressional oversight committee staff
- Publish a white paper disputing FDA's position
Correct answer: Submit a citizen petition requesting reconsideration
A citizen petition is the formal mechanism for requesting FDA to reconsider, issue, amend, or revoke a regulation or order.
Question 23: A compliance auditor notes that out-of-specification (OOS) investigations are consistently concluding 'laboratory error' without assignable cause documentation. This pattern most likely indicates:
- Adequate method validation
- Potential manipulation of OOS results to avoid manufacturing investigations (Correct answer)
- Normal statistical variation in laboratory methods
- Effective root cause analysis practices
Correct answer: Potential manipulation of OOS results to avoid manufacturing investigations
A pattern of OOS results attributed to undocumented laboratory error without assignable cause suggests potential data integrity issues or inadequate OOS investigation procedures.
Question 24: Under ICH Q10, which lifecycle phase does the Pharmaceutical Quality System (PQS) cover?
- Pre-clinical studies only
- Commercialization only
- Post-market surveillance only
- Development, technology transfer, manufacturing, and discontinuation (Correct answer)
Correct answer: Development, technology transfer, manufacturing, and discontinuation
ICH Q10 applies across all phases of the pharmaceutical product lifecycle including development, technology transfer, commercial manufacturing, and product discontinuation.
Question 25: Which FDA office is responsible for regulating direct-to-consumer (DTC) prescription drug advertising?
- Federal Trade Commission (FTC)
- NIH Office of Consumer Affairs
- FDA Office of Prescription Drug Promotion (OPDP) (Correct answer)
- FDA Division of Drug Information
Correct answer: FDA Office of Prescription Drug Promotion (OPDP)
The FDA's Office of Prescription Drug Promotion (OPDP) regulates DTC prescription drug advertising to ensure it is truthful and not misleading.
Question 26: What does the 'PLR' format refer to in FDA prescription drug labeling?
- Pharmaceutical Literature Registry
- Physician's Labeling Rule format for structured prescriber labeling (Correct answer)
- Post-Labeling Review process
- Product Liability Report format
Correct answer: Physician's Labeling Rule format for structured prescriber labeling
The Physician's Labeling Rule (PLR), effective 2006, restructured prescription drug package inserts into standardized sections to improve usability for healthcare professionals.
Question 27: An EU-regulated medical device company updates its Quality Management System to comply with MDR 2017/745 (replacing MDD). What is the PRIMARY change management priority?
- Apply for a transition period extension from the European Commission
- Conduct a gap analysis between MDD requirements and MDR, then develop a remediation plan (Correct answer)
- Withdraw products from the EU market until full MDR compliance is achieved
- Immediately re-certify all products under MDD
Correct answer: Conduct a gap analysis between MDD requirements and MDR, then develop a remediation plan
A systematic gap analysis between existing MDD compliance and new MDR requirements is the essential first step to understanding what changes are needed and prioritizing remediation efforts.
Question 28: Which FDA guidance document outlines the concept of a Predetermined Change Control Plan (PCCP) for AI/ML-based software as a medical device?
- Digital Health Center of Excellence Framework
- Software as a Medical Device (SaMD) Guidance 2017
- Artificial Intelligence and Machine Learning-Based Software as a Medical Device Action Plan (Correct answer)
- De Novo Classification Process Guidance
Correct answer: Artificial Intelligence and Machine Learning-Based Software as a Medical Device Action Plan
FDA's AI/ML SaMD Action Plan introduced the Predetermined Change Control Plan concept, allowing developers to plan and implement modifications to AI/ML algorithms without a new submission for each update.
Question 29: An audit team discovers that supplier qualification records are incomplete for 40% of critical raw material vendors. This is most appropriately classified as:
- Informational finding
- Minor observation
- Critical observation
- Major observation (Correct answer)
Correct answer: Major observation
Incomplete supplier qualification for a significant portion of critical vendors represents a systemic major observation, indicating a breakdown in the quality system.
Question 30: ICH Q12 (Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management) introduced the concept of Established Conditions (ECs). How do ECs support continuous improvement?
- ECs distinguish between changes requiring regulatory submissions and those that can be managed internally, streamlining innovation (Correct answer)
- ECs are only applicable to biologics and biosimilars
- ECs eliminate the need for post-approval stability studies
- ECs replace all existing change control obligations under regional regulations
Correct answer: ECs distinguish between changes requiring regulatory submissions and those that can be managed internally, streamlining innovation
ICH Q12 ECs define the minimum set of conditions requiring regulatory notification, allowing manufacturers to make non-EC changes internally and enabling faster implementation of improvements.
Question 31: Which QMS principle requires that organizations identify and manage interrelated processes as a system to improve overall efficiency?
- Customer focus
- Leadership commitment
- Process approach (Correct answer)
- Continual improvement
Correct answer: Process approach
The process approach principle recognizes that consistent, predictable results are achieved more effectively when processes are understood and managed as an interconnected system.
Question 32: Under 21 CFR Part 202, what is required in prescription drug advertisements?
- Color-coded safety ratings
- Patient testimonials approved by FDA
- Full prescribing information or a brief summary of key safety information (Correct answer)
- Cost comparison with competitor drugs
Correct answer: Full prescribing information or a brief summary of key safety information
21 CFR Part 202 requires that prescription drug ads include either the full prescribing information or a brief summary disclosing contraindications, warnings, and adverse effects.
Question 33: What is the most important principle in professional Certified Regulatory Affairs Professional practice?
- Maximizing revenue from each client
- Maintaining competence through continuous learning and adherence to standards (Correct answer)
- Following only personal judgment
- Working as quickly as possible
Correct answer: Maintaining competence through continuous learning and adherence to standards
Maintaining competence through continuous learning and adherence to professional standards ensures quality service delivery and public protection in Certified Regulatory Affairs Professional practice.
Question 34: During a management review, a company identifies that deviations related to label reconciliation have increased 40% over six months. The MOST appropriate continuous improvement response is to:
- Retrain staff and close the trend without further action
- Increase batch release testing to compensate
- Notify FDA of the trend immediately
- Open a CAPA, investigate root cause, and implement systemic corrective measures (Correct answer)
Correct answer: Open a CAPA, investigate root cause, and implement systemic corrective measures
A sustained upward deviation trend requires a formal CAPA with root cause investigation and systemic corrective actions, not just retraining.
Question 35: A company receives an FDA Complete Response Letter (CRL). Within what timeframe must the company resubmit to be considered a Class 1 resubmission?
- Within 3 months (Correct answer)
- Within 6 months
- Within 2 months
- No time limit applies for Class 1
Correct answer: Within 3 months
A Class 1 resubmission addresses minor deficiencies and must be filed within 3 months of the CRL to qualify for a 2-month review goal.
Question 36: Under FDA regulations, which outcome qualifies an adverse event as 'serious'?
- Any event requiring a pharmacy visit
- Any event reported by more than 1% of patients in a clinical trial
- An event requiring a dosage adjustment
- Death, life-threatening condition, hospitalization, disability, or congenital anomaly (Correct answer)
Correct answer: Death, life-threatening condition, hospitalization, disability, or congenital anomaly
A serious adverse event is defined as one resulting in death, life-threatening conditions, inpatient hospitalization, significant disability, congenital anomaly, or requiring medical intervention to prevent permanent harm.
Question 37: Which regulation authorizes FDA to require post-approval studies for medical devices?
- 21 CFR Part 820
- 21 CFR Part 807
- 21 CFR Part 814
- 21 CFR Part 822 (Correct answer)
Correct answer: 21 CFR Part 822
21 CFR Part 822 grants FDA authority to require post-approval studies (PAS) for Class II and Class III devices when additional safety or effectiveness data is needed after approval.
Question 38: Which best describes a 'help-seeking' advertisement in pharmaceutical promotion?
- An ad that provides patient assistance program contact information
- An ad that asks patients to help test new investigational medications
- An ad that describes a condition and directs consumers to speak with their doctor (Correct answer)
- An ad that promotes a drug for unapproved off-label indications
Correct answer: An ad that describes a condition and directs consumers to speak with their doctor
A help-seeking ad describes a disease or condition and encourages consumers to consult their physician, without mentioning a specific drug, and is regulated by the FTC rather than FDA.
Question 39: Which metric is MOST useful for evaluating the effectiveness of a regulatory affairs continuous improvement program over time?
- First-cycle approval rate for regulatory submissions (Correct answer)
- Number of SOPs in the quality system
- Total employee headcount in regulatory affairs
- Volume of published FDA guidance documents reviewed
Correct answer: First-cycle approval rate for regulatory submissions
First-cycle approval rate directly measures whether process improvements are producing higher-quality submissions that gain approval without requests for additional information.
Question 40: Under which regulation must medical device labels include a Unique Device Identifier (UDI)?
- 21 CFR Part 830 (Correct answer)
- 21 CFR Part 880
- 21 CFR Part 801
- 21 CFR Part 820
Correct answer: 21 CFR Part 830
21 CFR Part 830 establishes the UDI system requirements, mandating that medical device labels include a unique device identifier for traceability throughout the supply chain.
Question 41: Why is staying current with industry developments important for Certified Regulatory Affairs Professional professionals?
- Only academic researchers need to stay current
- Industry changes rarely affect practice
- To provide the best possible service using current knowledge and practices (Correct answer)
- It is only important for certification renewal
Correct answer: To provide the best possible service using current knowledge and practices
Staying current ensures professionals provide the best possible service by incorporating the latest knowledge, techniques, and regulatory requirements.
Question 42: What does 'fair balance' require in pharmaceutical advertising?
- Balancing the number of ads for competing products
- Ensuring equal representation of patient demographics
- Equal airtime for brand and generic drugs
- Presenting risks and benefits with comparable emphasis and prominence (Correct answer)
Correct answer: Presenting risks and benefits with comparable emphasis and prominence
Fair balance requires that risk information be presented with similar prominence and emphasis as benefit information in drug promotional materials.
Question 43: ICH M4 defines which regulatory submission format used globally?
- Drug Master File (DMF)
- Periodic Safety Update Report (PSUR)
- Electronic Data Capture (EDC)
- Common Technical Document (CTD) (Correct answer)
Correct answer: Common Technical Document (CTD)
ICH M4 defines the organization and content of the Common Technical Document (CTD), the globally harmonized dossier format for drug marketing authorization applications.
Question 44: Under ICH Q10, the concept of 'knowledge management' in pharmaceutical quality systems primarily supports continuous improvement by:
- Limiting access to proprietary formulation data
- Replacing the need for formal change control procedures
- Documenting only post-market commitments
- Capturing and leveraging product and process understanding throughout the lifecycle (Correct answer)
Correct answer: Capturing and leveraging product and process understanding throughout the lifecycle
ICH Q10 knowledge management ensures that product and process understanding gained during development and manufacturing is captured, shared, and applied to drive continuous improvement.
Question 45: What is the regulatory classification of a product whose label contains false or unauthorized claims?
- The product is considered adulterated
- The product must be reformulated before sale
- The product requires a mandatory boxed warning
- The product is considered misbranded (Correct answer)
Correct answer: The product is considered misbranded
A product with false, misleading, or unauthorized labeling claims is considered misbranded under the FD&C Act and is subject to regulatory action.
Question 46: A regulatory affairs team is implementing Key Performance Indicators (KPIs) for continuous improvement. Which KPI directly measures the quality of regulatory submissions?
- Number of regulatory staff trained annually
- Cost per regulatory submission processed
- Rate of Information Requests (IR) or Major Objections received per submission (Correct answer)
- Total volume of submissions filed per year
Correct answer: Rate of Information Requests (IR) or Major Objections received per submission
The rate of Information Requests or Major Objections received indicates submission qualityโhigh IR rates suggest deficiencies in content, format, or data package completeness.
Question 47: A company's annual product review reveals that three lots failed dissolution specifications in the past year. Which continuous improvement tool is MOST appropriate to identify the systemic cause?
- Statistical process control chart review
- Benchmarking against competitor dissolution data
- Fishbone (Ishikawa) diagram root cause analysis (Correct answer)
- Failure Mode and Effects Analysis (FMEA)
Correct answer: Fishbone (Ishikawa) diagram root cause analysis
A fishbone diagram systematically explores all potential causes (equipment, method, material, environment, personnel) contributing to dissolution failures.
Question 48: In regulatory affairs, the term 'whistleblower protection' most directly relates to which ethical principle?
- Integrity and non-retaliation (Correct answer)
- Confidentiality
- Competence
- Respect for intellectual property
Correct answer: Integrity and non-retaliation
Whistleblower protections reinforce integrity by ensuring individuals can report misconduct without fear of retaliation.
Question 49: A regulatory affairs professional is monitoring the Federal Register for rule changes. A final rule is published with a compliance date 18 months away. What is the FIRST step in an effective continuous improvement response?
- Immediately perform a gap assessment to identify affected processes and products (Correct answer)
- Notify the sales team to adjust forecasts
- File public comments requesting an extension
- Wait 12 months before planning to allow for potential amendments
Correct answer: Immediately perform a gap assessment to identify affected processes and products
Immediate gap assessment identifies all affected products, processes, and submissions so implementation planning can begin with adequate lead time.
Question 50: A supplier qualification program in a QMS typically requires which of the following as a minimum?
- Evaluation of supplier capability to meet specified requirements (Correct answer)
- On-site audits of all suppliers annually
- ISO certification for all suppliers
- FDA registration of all suppliers
Correct answer: Evaluation of supplier capability to meet specified requirements
Supplier qualification requires evaluating whether suppliers can consistently meet quality, regulatory, and technical requirements before they are approved for use.
Question 51: Under FDA regulations, which best describes the legal definition of 'labeling'?
- Only promotional materials pre-approved by FDA
- The package insert distributed with prescription drugs only
- All written, printed, or graphic material accompanying the product (Correct answer)
- Only the physical label attached to the product container
Correct answer: All written, printed, or graphic material accompanying the product
Under 21 USC 321(m), 'labeling' broadly includes all written, printed, or graphic matter on or accompanying a product, not just the physical label affixed to the container.
Certified Regulatory Affairs Professional (CRAP)
The CRAP certification validates expertise in regulatory affairs including compliance monitoring, labeling regulations, post-market surveillance, enforcement, and global regulatory standards for professionals in regulated industries.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong โ answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds