Certified Regulatory Affairs Professional (CRAP) — Questions and Answers

Question 1: Which type of labeling change to an NDA requires a Prior Approval Supplement (PAS)?

Adding a new boxed warning based on post-market safety data (Correct answer)
Correcting a typographical error in inactive ingredient listing
Updating the manufacturer's address
Updating the product lot number format

Correct answer: Adding a new boxed warning based on post-market safety data

Adding a new boxed warning requires a Prior Approval Supplement because it represents a significant safety labeling change that must be reviewed and approved by FDA before implementation.

Question 2: Under 21 CFR Part 7, what distinguishes a Class I recall from a Class II recall?

Class I involves cosmetics; Class II involves drugs
Class I requires public press release; Class II does not
Class I is voluntary; Class II is mandatory
Class I involves a reasonable probability of serious adverse health consequences; Class II involves remote probability (Correct answer)

Correct answer: Class I involves a reasonable probability of serious adverse health consequences; Class II involves remote probability

Class I recall involves a reasonable probability that use of the product will cause serious adverse health consequences or death, while Class II involves a remote probability of adverse consequences.

Question 3: Which best describes a 'help-seeking' advertisement in pharmaceutical promotion?

An ad that promotes a drug for unapproved off-label indications
An ad that provides patient assistance program contact information
An ad that describes a condition and directs consumers to speak with their doctor (Correct answer)
An ad that asks patients to help test new investigational medications

Correct answer: An ad that describes a condition and directs consumers to speak with their doctor

A help-seeking ad describes a disease or condition and encourages consumers to consult their physician, without mentioning a specific drug, and is regulated by the FTC rather than FDA.

Question 4: Which federal law requires food labels to include a standardized Nutrition Facts panel?

Federal Food, Drug, and Cosmetic Act of 1938
Food Quality Protection Act (FQPA)
Nutrition Labeling and Education Act (NLEA) of 1990 (Correct answer)
Food Safety Modernization Act (FSMA) of 2011

Correct answer: Nutrition Labeling and Education Act (NLEA) of 1990

The Nutrition Labeling and Education Act (NLEA) of 1990 mandated standardized Nutrition Facts panels on most packaged food products sold in the US.

Question 5: What is a Risk Evaluation and Mitigation Strategy (REMS)?

An FDA-required safety program to manage known serious risks of a marketed drug (Correct answer)
A pre-approval risk assessment required for all new drug applications
A voluntary industry program for tracking post-market adverse events
A post-market study required for all biologic products

Correct answer: An FDA-required safety program to manage known serious risks of a marketed drug

REMS is a drug safety program that FDA requires when risk management measures beyond standard labeling are necessary to ensure a drug's benefits outweigh its risks.

Question 6: Under ICH Q10, the concept of 'knowledge management' in pharmaceutical quality systems primarily supports continuous improvement by:

Capturing and leveraging product and process understanding throughout the lifecycle (Correct answer)
Replacing the need for formal change control procedures
Documenting only post-market commitments
Limiting access to proprietary formulation data

Correct answer: Capturing and leveraging product and process understanding throughout the lifecycle

ICH Q10 knowledge management ensures that product and process understanding gained during development and manufacturing is captured, shared, and applied to drive continuous improvement.

Question 7: In a risk matrix, a hazard with 'Critical' severity and 'Remote' probability would typically fall into which risk category?

Unacceptable risk requiring immediate mitigation
Medium risk requiring risk reduction consideration (Correct answer)
Acceptable risk needing only monitoring
Negligible risk requiring no action

Correct answer: Medium risk requiring risk reduction consideration

Critical severity combined with remote probability typically produces a medium risk level that warrants consideration of risk reduction measures.

Question 8: A pharmaceutical manufacturer receives an FDA Form 483 with three observations. What is the appropriate initial response timeframe?

45 days
60 days
15 business days
30 days (Correct answer)

Correct answer: 30 days

FDA expects a written response to Form 483 observations within 15 business days (approximately 21 calendar days), but industry convention often targets 30 calendar days.

Question 9: An FDA Warning Letter cites a company for failure to investigate consumer complaints that could indicate product adulteration. Under 21 CFR 211.198, what corrective action is most critical?

Establish a complaint trending and investigation system that triggers CAPA for potentially serious complaints (Correct answer)
Close all open complaints within 30 days regardless of investigation status
Transfer complaint handling to the marketing department
Revise the complaint SOP to exclude minor complaints from investigation

Correct answer: Establish a complaint trending and investigation system that triggers CAPA for potentially serious complaints

21 CFR 211.198 requires investigation of complaints that could indicate product failure, necessitating a robust system that identifies and investigates potentially serious complaints.

Question 10: Under the EU Clinical Trials Regulation (CTR) 536/2014, which portal is used for clinical trial applications across EU member states?

CTIS (Clinical Trials Information System) (Correct answer)
EudraVigilance
EMA Connect
CESP portal

Correct answer: CTIS (Clinical Trials Information System)

CTIS is the single-entry portal established by EU CTR 536/2014 for submitting and managing clinical trial applications across the EU.

Question 11: Why is staying current with industry developments important for Certified Regulatory Affairs Professional professionals?

It is only important for certification renewal
To provide the best possible service using current knowledge and practices (Correct answer)
Only academic researchers need to stay current
Industry changes rarely affect practice

Correct answer: To provide the best possible service using current knowledge and practices

Staying current ensures professionals provide the best possible service by incorporating the latest knowledge, techniques, and regulatory requirements.

Question 12: What is the most effective way to communicate regulatory risk to a business development team evaluating a potential acquisition?

Focus exclusively on approved indications and omit pipeline regulatory status
Advise the team that all regulatory matters will be resolved post-acquisition
Deliver a structured regulatory due diligence report summarizing key risks, data gaps, and recommended mitigation strategies (Correct answer)
Provide a full regulatory submission dossier without interpretation

Correct answer: Deliver a structured regulatory due diligence report summarizing key risks, data gaps, and recommended mitigation strategies

A structured due diligence report that clearly identifies regulatory risks, gaps, and mitigation options equips the business development team to make informed acquisition decisions.

Question 13: How should a Certified Regulatory Affairs Professional professional handle situations beyond their expertise?

Accept the work to maintain the business relationship
Ignore the complexity and apply standard approaches
Attempt the work and learn from experience
Refer to a qualified specialist and communicate transparently with the client (Correct answer)

Correct answer: Refer to a qualified specialist and communicate transparently with the client

Referring to qualified specialists when facing situations beyond personal expertise protects clients and upholds professional integrity.

Question 14: What role does documentation play in Certified Regulatory Affairs Professional professional practice?

It is only needed for billing purposes
It creates accountability, supports decision-making, and provides legal protection (Correct answer)
It is optional for experienced professionals
It is an administrative burden with no practical value

Correct answer: It creates accountability, supports decision-making, and provides legal protection

Documentation creates accountability, supports informed decision-making, and provides legal protection for both the professional and the client.

Question 15: Under the Paperwork Reduction Act (PRA), what must agencies obtain before collecting information from 10 or more persons?

A public comment period of 30 days
OMB approval and a valid OMB control number (Correct answer)
GAO certification of burden estimates
Congressional authorization

Correct answer: OMB approval and a valid OMB control number

The PRA requires agencies to obtain OMB approval and display a valid OMB control number before collecting information from 10 or more persons.

Question 16: Under FDA regulations, which best describes the legal definition of 'labeling'?

Only promotional materials pre-approved by FDA
Only the physical label attached to the product container
The package insert distributed with prescription drugs only
All written, printed, or graphic material accompanying the product (Correct answer)

Correct answer: All written, printed, or graphic material accompanying the product

Under 21 USC 321(m), 'labeling' broadly includes all written, printed, or graphic matter on or accompanying a product, not just the physical label affixed to the container.

Question 17: What does the 'PLR' format refer to in FDA prescription drug labeling?

Post-Labeling Review process
Physician's Labeling Rule format for structured prescriber labeling (Correct answer)
Product Liability Report format
Pharmaceutical Literature Registry

Correct answer: Physician's Labeling Rule format for structured prescriber labeling

The Physician's Labeling Rule (PLR), effective 2006, restructured prescription drug package inserts into standardized sections to improve usability for healthcare professionals.

Question 18: Which of the following constitutes a breach of confidentiality for a regulatory affairs professional?

Sharing publicly available regulatory guidance with a colleague
Disclosing a client's proprietary formulation to a competitor during contract negotiations (Correct answer)
Discussing anonymized case studies in a professional training session
Citing published literature in a regulatory submission

Correct answer: Disclosing a client's proprietary formulation to a competitor during contract negotiations

Disclosing a client's proprietary information to any unauthorized party, including competitors, is a direct breach of confidentiality obligations.

Question 19: A company wants to demonstrate that its risk management process meets ISO 14971 for FDA submissions. Which document formally acknowledges ISO 14971 as a recognized consensus standard in the US?

ICH Q9 Annex I
FDA's Recognized Consensus Standards database listing ISO 14971 (Correct answer)
FDA 510(k) Guidance for Risk Management
21 CFR Part 820 QSR

Correct answer: FDA's Recognized Consensus Standards database listing ISO 14971

FDA maintains a database of recognized consensus standards, and ISO 14971 is listed there, allowing manufacturers to declare conformance in submissions.

Question 20: A medical device company uses a software tool to manage nonconformances. Under 21 CFR Part 820, the software validation status of this tool must be:

Documented with intended use but not formally validated
Validated regardless of whether it is commercial off-the-shelf (COTS) or custom (Correct answer)
Validated by the software vendor, removing the manufacturer's obligation
Validated only if the software is custom-developed

Correct answer: Validated regardless of whether it is commercial off-the-shelf (COTS) or custom

Under 21 CFR Part 820.70(i), software used as part of the quality system must be validated for its intended use, regardless of whether it is COTS or custom.

Question 21: Under which regulation must medical device labels include a Unique Device Identifier (UDI)?

21 CFR Part 880
21 CFR Part 830 (Correct answer)
21 CFR Part 820
21 CFR Part 801

Correct answer: 21 CFR Part 830

21 CFR Part 830 establishes the UDI system requirements, mandating that medical device labels include a unique device identifier for traceability throughout the supply chain.

Question 22: A regulatory strategy team identifies that their product may qualify for both Fast Track and Breakthrough Therapy designation. What is a key difference between these two designations?

Fast Track guarantees Priority Review; Breakthrough does not
Breakthrough Therapy designation is only available for biologics
Fast Track requires completed Phase 2 data; Breakthrough requires Phase 1 only
Breakthrough Therapy includes intensive FDA guidance and organizational commitment; Fast Track offers rolling review and more frequent meetings (Correct answer)

Correct answer: Breakthrough Therapy includes intensive FDA guidance and organizational commitment; Fast Track offers rolling review and more frequent meetings

Breakthrough Therapy designation provides more intensive FDA involvement, senior leadership engagement, and cross-disciplinary guidance beyond what Fast Track offers.

Question 23: Under 21 CFR Part 314.81, what is the required timeframe for an NDA holder to submit an expedited 15-day alert report?

45 calendar days
7 calendar days
30 calendar days
15 calendar days (Correct answer)

Correct answer: 15 calendar days

NDA holders must submit expedited safety reports to FDA within 15 calendar days of receiving information about serious and unexpected adverse drug experiences.

Question 24: What is required in the 'Indications and Usage' section of prescription drug labeling?

The mechanism of action of the drug
A description of the condition(s) for which the drug is approved (Correct answer)
The clinical trial methodology used for approval
The pharmacokinetic profile of the drug

Correct answer: A description of the condition(s) for which the drug is approved

The Indications and Usage section describes the specific disease, condition, or patient population for which FDA has approved the drug.

Question 25: When must a device manufacturer submit a 5-day MDR report to FDA?

Within 5 days of the end of each fiscal quarter
Within 5 days of completing an internal investigation
Within 5 days of becoming aware of an event requiring remedial action to prevent unreasonable risk of harm (Correct answer)
Within 5 days of receiving any product complaint

Correct answer: Within 5 days of becoming aware of an event requiring remedial action to prevent unreasonable risk of harm

Manufacturers must submit a 5-day MDR when they become aware of an event requiring remedial action to prevent an unreasonable risk of substantial harm to the public.

Question 26: Under 21 CFR 314.81, an annual report for an approved NDA must include trending data on what quality parameter?

Wholesale distributor inventory levels
Batch analyses and any out-of-specification results from the reporting period (Correct answer)
Annual sales volume by territory
Number of adverse event reports received

Correct answer: Batch analyses and any out-of-specification results from the reporting period

NDA annual reports must include summaries of batch analyses and quality-related data, including any OOS results, to support the continued evaluation of product quality.

Question 27: A pharmaceutical company implements a new electronic quality management system (eQMS). Which validation requirement applies under 21 CFR Part 11?

Validation is only required if the system stores batch records
Only FDA-approved software platforms may be used
The system must use paper backup for all critical records
The system must be validated to ensure accuracy, reliability, and consistent performance (Correct answer)

Correct answer: The system must be validated to ensure accuracy, reliability, and consistent performance

21 CFR Part 11 requires that electronic records systems be validated to ensure they accurately and reliably perform their intended functions.

Question 28: A company's internal audit identifies that change control records frequently lack adequate impact assessments. The MOST effective sustainable corrective action is to:

Increase audit frequency to quarterly
Require the QA director to personally approve all future changes
Revise the change control SOP and template to include mandatory structured impact assessment fields with examples (Correct answer)
Outsource change control management to a contract organization

Correct answer: Revise the change control SOP and template to include mandatory structured impact assessment fields with examples

Embedding structured impact assessment requirements directly into the SOP and record template creates systemic improvement rather than relying on individual oversight.

Question 29: When FDA issues a Warning Letter, what is the expected company response timeframe per FDA's Regulatory Procedures Manual?

30 calendar days (Correct answer)
60 calendar days
15 business days
7 calendar days

Correct answer: 30 calendar days

FDA's Regulatory Procedures Manual indicates companies are expected to respond to Warning Letters within 15 working days (approximately 21 calendar days), but FDA generally uses 30 calendar days as the standard response window.

Question 30: Under 21 CFR Part 7, how is a Class I recall defined?

A voluntary market withdrawal initiated for minor defects
A situation where use of the product is not likely to cause adverse health consequences
A situation where use of the product may cause temporary adverse health consequences
A situation where use or exposure to the product will cause serious adverse health consequences or death (Correct answer)

Correct answer: A situation where use or exposure to the product will cause serious adverse health consequences or death

A Class I recall is the most serious type, involving products where use or exposure is reasonably likely to cause serious adverse health consequences or death.

Question 31: Which FDA office is responsible for regulating direct-to-consumer (DTC) prescription drug advertising?

FDA Division of Drug Information
NIH Office of Consumer Affairs
Federal Trade Commission (FTC)
FDA Office of Prescription Drug Promotion (OPDP) (Correct answer)

Correct answer: FDA Office of Prescription Drug Promotion (OPDP)

The FDA's Office of Prescription Drug Promotion (OPDP) regulates DTC prescription drug advertising to ensure it is truthful and not misleading.

Certified Regulatory Affairs Professional (CRAP)

The CRAP certification validates expertise in regulatory affairs including compliance monitoring, labeling regulations, post-market surveillance, enforcement, and global regulatory standards for professionals in regulated industries.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds