I85PREP
⌘ K
HTSP study materials
HTSP study resources

HTSP practice questions

One question at a time. Build your HTSP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Healthcare Technology Management Fundamentals

In a healthcare technology management (HTM) program, which document is the primary record that links a specific medical device to its maintenance history, calibration results, and safety-test outcomes over its service life?

  1. The device history record Correct answer.
  2. The capital purchase requisition
  3. The departmental staffing roster
  4. The equipment work order

Explanation

The device history record is the cumulative, device-specific file that consolidates installation data, preventive maintenance, repairs, calibration, and safety testing for the life of the equipment. Work orders are individual transactions that feed into it rather than the master record. Surveyors and accreditation standards expect this record to be retrievable for each device.

Question 2Healthcare Technology Management Fundamentals

A hospital's HTM department uses a risk-based scoring method to set preventive maintenance intervals. Which input most directly reflects the consequence to the patient if the device fails during use?

  1. Physical failure rate of the device
  2. Device acquisition cost
  3. Clinical function and physiologic support provided Correct answer.
  4. Manufacturer's recommended calibration interval

Explanation

Risk-based prioritization weighs the clinical role of the device, because a failure of life-support or critical monitoring equipment poses far greater patient harm than failure of a non-clinical device. Cost and failure rate influence resource decisions but do not by themselves express patient consequence. The manufacturer interval is a starting input, not a measure of harm severity.

Question 3Healthcare Technology Management Fundamentals

Which electrical safety test verifies that current flowing through the chassis of a Class I device under a single-fault condition stays below a specified limit?

  1. Chassis leakage current test Correct answer.
  2. Ground wire resistance test
  3. Insulation resistance test
  4. Defibrillator discharge energy test

Explanation

Chassis, or enclosure, leakage current testing measures current that could flow through the housing to a patient or operator, including under single-fault conditions such as an open ground. Ground resistance testing checks the integrity of the protective earth path rather than the magnitude of leakage. Insulation resistance and defibrillator energy tests address different properties entirely.

Question 4Healthcare Technology Management Fundamentals

An HTM technician is asked to service a ventilator whose manufacturer has issued a field safety corrective action. What is the most appropriate first step?

  1. Defer action until the next scheduled accreditation survey
  2. Continue routine preventive maintenance on the original schedule without change
  3. Apply the manufacturer's correction per the notice and document the action in the device record Correct answer.
  4. Return the unit to the manufacturer and remove it from inventory permanently

Explanation

A field safety corrective action, or recall, requires the facility to follow the manufacturer's specified correction promptly and document completion. The action may be a software update, part replacement, or inspection rather than permanent removal. Deferring or ignoring the notice leaves patients exposed to the identified hazard.

Question 5Healthcare Technology Management Fundamentals

Which standard is most commonly cited as the basis for a hospital's medical equipment management plan under accreditation requirements in the United States?

  1. OSHA bloodborne pathogens standard
  2. ANSI/AAMI ES60601-1
  3. The Joint Commission's Environment of Care standards Correct answer.
  4. NFPA 99, Health Care Facilities Code

Explanation

The Joint Commission's Environment of Care chapter, particularly the medical equipment management standards, defines the planning, inspection, and documentation expectations for hospital equipment programs. NFPA 99 addresses facility systems and electrical safety but is not the accreditation standard for the management plan. ES60601-1 is a device design standard, and the bloodborne pathogens rule concerns occupational exposure.

Question 6Healthcare Technology Management Fundamentals

An infusion pump library is being reviewed after a series of programming errors. Which control most directly reduces the chance of a wrong-dose entry at the point of care?

  1. Shortening the preventive maintenance interval for the pumps
  2. Configuring dose-error reduction software with hard limits for high-alert drugs Correct answer.
  3. Increasing the number of pumps in the unit
  4. Adding the pumps to the capital replacement plan

Explanation

Dose-error reduction software, often called drug library or guardrails programming, compares entered values against configured limits and blocks or warns on out-of-range doses. This directly targets programming errors at the bedside. Adding pumps, changing PM intervals, or planning replacement does not alter the programming safeguard.

Question 7Healthcare Technology Management Fundamentals

What is the primary purpose of a computerized maintenance management system (CMMS) in an HTM department?

  1. To track equipment inventory, work orders, and maintenance history Correct answer.
  2. To store patient clinical results for physician review
  3. To manage hospital payroll and staff scheduling
  4. To control building HVAC and electrical distribution

Explanation

A CMMS in HTM maintains the equipment inventory and records work orders, scheduled maintenance, parts, and service history. It is the operational backbone for planning and documenting maintenance activities. Clinical results, payroll, and building controls belong to other systems.

Question 8Healthcare Technology Management Fundamentals

A device labeled as Class II by the FDA's device classification scheme is best described by which characteristic?

  1. It is a life-sustaining device requiring premarket approval in all cases
  2. It poses the lowest risk and is generally exempt from premarket review
  3. It poses moderate risk and typically requires premarket notification with special controls Correct answer.
  4. It is a laboratory reagent exempt from all regulatory oversight

Explanation

FDA Class II devices present moderate risk and generally reach the market through the 510(k) premarket notification pathway with special controls such as performance standards and labeling requirements. Class I covers low-risk devices, and Class III covers high-risk devices that usually need premarket approval. This risk-based scheme guides how HTM staff interpret regulatory status.

Question 9Healthcare Technology Management Fundamentals

During a pre-purchase evaluation of a new patient monitor, which activity best supports a defensible technology assessment decision?

  1. Selecting the lowest-priced bid without clinical input
  2. Conducting a structured trial with clinicians and reviewing safety and interoperability data Correct answer.
  3. Deferring evaluation until after the purchase order is issued
  4. Ordering units directly from the first vendor who responds

Explanation

Technology assessment combines clinical need, safety, interoperability, lifecycle cost, and user feedback before commitment. A structured trial and review of safety and integration data produce evidence for the decision. Price-only or vendor-driven selection ignores clinical fit and total cost of ownership.

Question 10Healthcare Technology Management Fundamentals

Which practice best supports alarm safety for physiologic monitors in a critical care unit?

  1. Setting all alarm limits to the widest possible range to reduce noise
  2. Disabling audible alarms during night shifts across the unit
  3. Relying solely on manufacturer default alarm settings
  4. Establishing a multidisciplinary alarm management policy with customized limits and periodic review Correct answer.

Explanation

Alarm safety requires a coordinated policy that tailors limits to the patient population, addresses nuisance alarms, and is reviewed by a multidisciplinary team. Widening limits indiscriminately or silencing alarms can suppress clinically important alerts. Default settings alone rarely fit every care area.

Question 11Healthcare Technology Management Fundamentals

In a medical device integration project, what does the term interoperability primarily refer to?

  1. The physical durability of device housings
  2. The ability of devices to exchange and use data accurately with other systems Correct answer.
  3. The speed at which a device charges its battery
  4. The ability of a device to operate on battery power

Explanation

Interoperability is the capability of devices and information systems to exchange data and use the exchanged information correctly, such as sending vital signs into the EHR. Battery operation, housing durability, and charging speed are hardware characteristics, not data exchange capability.

Question 12Healthcare Technology Management Fundamentals

A hospital plans to replace a fleet of aging infusion pumps. Which financial measure best captures the total cost of owning and operating the devices over their lifecycle?

  1. Total cost of ownership including acquisition, maintenance, consumables, and downtime Correct answer.
  2. Resale value at end of life
  3. Purchase price only
  4. Vendor financing interest rate alone

Explanation

Total cost of ownership aggregates acquisition, service contracts, parts, consumables, training, and downtime costs across the device lifecycle. Purchase price alone understates the real cost and can mislead replacement decisions. Resale value and financing rates are single components, not the full picture.

Question 13Healthcare Technology Management Fundamentals

Which action is most appropriate when an HTM technician discovers a device with a damaged power cord during a safety inspection?

  1. Tag the device out of service and route it for repair before returning it to use Correct answer.
  2. Continue using the device until the next scheduled inspection
  3. Wrap the damaged section with tape and return the device to service
  4. Move the device to another department without documentation

Explanation

A damaged power cord is an electrical hazard, so the device must be removed from service, tagged, and repaired before reuse. Taping or continued use exposes patients and staff to shock and fire risk. Undocumented relocation also breaks the chain of accountability.

Question 14Healthcare Technology Management Fundamentals

What distinguishes a corrective maintenance work order from a preventive maintenance work order in an HTM program?

  1. Corrective work responds to a reported fault, while preventive work follows a scheduled plan Correct answer.
  2. Corrective work is optional, while preventive work is prohibited between inspections
  3. Corrective work is always performed by the manufacturer, while preventive work is always in-house
  4. Corrective work applies only to imaging equipment, while preventive work applies only to monitors

Explanation

Corrective maintenance is reactive work triggered by a failure or reported problem, whereas preventive maintenance is scheduled work intended to reduce failures and verify performance. Either type may be performed in-house or by a vendor depending on contracts. The distinction is trigger and intent, not device category.

Question 15Healthcare Technology Management Fundamentals

An HTM department is deciding whether to bring a service line in-house or continue with a manufacturer contract. Which factor most directly supports an in-house decision?

  1. The vendor's marketing budget
  2. Availability of trained staff, parts, and service documentation Correct answer.
  3. The number of patient beds in the facility
  4. The color scheme of the device

Explanation

In-house service requires competent technicians, access to parts, and the service documentation and software needed to perform work safely. Without these, insourcing can compromise safety and warranty terms. Marketing budgets, device appearance, and bed count do not determine service capability.

Question 16Healthcare Technology Management Fundamentals

Which element is essential in a medical equipment management plan to demonstrate that equipment is maintained according to a defined process?

  1. A list of staff birthdays
  2. A copy of the hospital's parking policy
  3. A summary of cafeteria menus
  4. A description of inventory, risk criteria, maintenance strategies, and documentation requirements Correct answer.

Explanation

The management plan should define how equipment is inventoried, how risk is assessed, which maintenance strategies apply, and how activities are documented and reviewed. These elements show a deliberate, auditable process. Unrelated administrative content does not satisfy the requirement.

Question 17Healthcare Technology Management Fundamentals

A pulse oximeter is suspected of reading falsely high saturations. Which verification approach is most appropriate before returning it to clinical use?

  1. Compare readings against a calibrated reference simulator across a range of values Correct answer.
  2. Replace the sensor and assume the device is accurate
  3. Increase the alarm limits to compensate
  4. Ask several nurses whether the readings look reasonable

Explanation

Performance verification uses a calibrated simulator or reference standard to check the device across its operating range and confirm accuracy. Informal opinion or sensor replacement alone does not quantify error. Adjusting alarm limits masks rather than resolves a measurement problem.

Question 18Healthcare Technology Management Fundamentals

Which practice best protects networked medical devices from cybersecurity threats in a hospital?

  1. Segmenting the medical device network and maintaining an accurate device inventory Correct answer.
  2. Disabling all logging to reduce storage use
  3. Connecting all devices to the public internet for vendor updates
  4. Sharing administrator passwords among all clinical staff

Explanation

Network segmentation limits lateral movement of attacks, and a current inventory is needed to identify and patch vulnerable devices. Direct internet exposure, shared credentials, and disabled logging all weaken security posture. These controls are core to medical device cybersecurity programs.

Question 19Healthcare Technology Management Fundamentals

What is the role of a biomedical equipment technician (BMET) in the safe use of a newly installed surgical device?

  1. Verify installation, perform acceptance testing, and train users on safe operation Correct answer.
  2. Approve the patient's surgical consent form
  3. Set the surgical technique policy for the operating room
  4. Determine the patient's anesthesia plan

Explanation

The BMET confirms proper installation, conducts acceptance testing against specifications, and supports user training on safe device operation. Clinical policy, consent, and anesthesia decisions belong to surgeons, nursing, and anesthesia providers. The technician supports safe use without assuming clinical authority.

Question 20Healthcare Technology Management Fundamentals

An HTM team is analyzing recurring failures of the same infusion pump model across several units. Which approach best identifies a systemic root cause rather than treating each event in isolation?

  1. Repair each pump as it fails and take no further action
  2. Aggregate failure data by model and use, then apply root cause analysis to the pattern Correct answer.
  3. Blame the nearest clinician for each event
  4. Replace the entire fleet immediately without investigation

Explanation

Aggregating failure data by model and clinical use reveals patterns that individual repairs hide, enabling root cause analysis of design, training, or environment factors. Isolated repair, blame, or wholesale replacement without investigation can miss the real cause and waste resources. Pattern analysis supports informed corrective action.

Question 21Healthcare Technology Management Fundamentals

Which metric best indicates the operational reliability of a medical device fleet over a period of time?

  1. Mean time between failures Correct answer.
  2. Average purchase price per device
  3. Number of staff trained on the device
  4. Number of devices in inventory

Explanation

Mean time between failures measures the average operating interval between failures and is a standard reliability indicator. Inventory count, price, and training numbers describe scale, cost, and competency rather than reliability. Tracking MTBF by model helps target maintenance and replacement decisions.

Question 22Healthcare Technology Management Fundamentals

During acceptance testing of a new defibrillator, which result should prompt rejection of the unit before clinical use?

  1. The unit powers on within the expected time
  2. Delivered energy falls outside the manufacturer's specified tolerance Correct answer.
  3. The self-test completes successfully
  4. The battery charges to full capacity

Explanation

Acceptance testing compares measured performance against manufacturer specifications, and delivered energy outside tolerance indicates the device may not deliver a therapeutic dose. Successful power-on, self-test, and charging are expected normal behaviors. A unit failing energy tolerance should not be placed into service.

Question 23Healthcare Technology Management Fundamentals

Which document typically defines the manufacturer's required maintenance tasks and intervals for a specific medical device?

  1. The service manual Correct answer.
  2. The patient consent form
  3. The hospital's annual budget
  4. The nursing shift report

Explanation

The service manual, or the manufacturer's maintenance documentation, specifies required tasks, intervals, and test limits for the device. Budgets, consent forms, and shift reports contain no device maintenance specifications. HTM programs use these instructions to build PM procedures.

Question 24Healthcare Technology Management Fundamentals

A hospital wants to reduce the risk of device-related pressure injuries from patient monitoring cables. Which HTM-led action is most appropriate?

  1. Change the color of the cables
  2. Reduce the number of preventive maintenance inspections
  3. Evaluate cable routing and padding options with nursing and update the device use plan Correct answer.
  4. Increase the frequency of electrical safety testing

Explanation

Device-related pressure injuries are addressed through use-environment and workflow changes such as cable routing, padding, and staff education developed jointly with nursing. Electrical safety testing and PM frequency address electrical and functional integrity, not tissue injury. Color changes have no clinical effect.

Question 25Healthcare Technology Management Fundamentals

What is the primary reason HTM departments maintain an accurate, current equipment inventory?

  1. To satisfy staff requests for new furniture
  2. To support maintenance planning, recall tracking, and regulatory documentation Correct answer.
  3. To reduce the number of clinical staff needed
  4. To avoid purchasing any new equipment

Explanation

An accurate inventory enables scheduling of maintenance, matching recall notices to affected units, and producing documentation for accreditation and regulatory review. It is not about furniture, staffing reduction, or avoiding purchases. Incomplete inventories are a common audit finding.

Question 26Healthcare Technology Management Fundamentals

In an HTM program, which document records the manufacturer's specified performance verification steps that a BMET must complete after repairing a physiologic monitor?

  1. The departmental staffing roster
  2. The service manual procedure section Correct answer.
  3. The capital purchase requisition
  4. The operator's quick-reference card

Explanation

Service manuals are the manufacturer-controlled reference that defines performance verification procedures, tolerances, and test equipment needed after repair. HTM technicians document completion of these steps in the work order so the repair is traceable and defensible during survey.

Question 27Healthcare Technology Management Fundamentals

A BMET needs to confirm that a repaired electrosurgical unit's leakage current is within acceptable limits before returning it to the operating room. Which resource defines the applicable test limits?

  1. The hospital's capital equipment depreciation schedule
  2. The operating room's room-turnover checklist
  3. The unit's recall history in the CMMS
  4. The current edition of IEC 60601-1 and the manufacturer's service documentation Correct answer.

Explanation

Electrical safety limits for medical devices come from the applicable IEC 60601-1 standard plus any device-specific standard and the manufacturer's own test specifications. Recall history, room checklists, and finance records do not establish pass/fail thresholds for leakage current.

Question 28Healthcare Technology Management Fundamentals

An HTM department must decide how often to perform scheduled maintenance on a low-risk, battery-powered thermometer fleet with no history of failure. Which approach best applies risk-based maintenance planning?

  1. Extend or reduce the interval using documented risk scoring, failure history, and manufacturer input Correct answer.
  2. Keep the manufacturer's interval unchanged indefinitely regardless of use
  3. Eliminate all scheduled maintenance and rely solely on user-reported failures
  4. Shorten the interval to monthly for every unit to maximize safety margin

Explanation

Risk-based maintenance uses documented criteria such as equipment function, clinical application, incident history, and manufacturer recommendations to justify interval changes. Any deviation from the manufacturer's interval should be recorded and approved so the decision is defensible during accreditation review.

Question 29Healthcare Technology Management Fundamentals

A hospital's HTM team is building a business case to add a second BMET position. Which set of workload indicators most directly supports the request?

  1. Number of beds in the facility and the age of the building
  2. Number of vendors attending the annual trade show and the size of the capital budget
  3. Work order volume per FTE, scheduled maintenance completion rate, and average repair turnaround time Correct answer.
  4. Patient satisfaction scores and nursing overtime hours

Explanation

Staffing justification in HTM rests on measurable workload and service performance, such as work orders per technician, PM completion rates, and turnaround times. These metrics show whether current staff can meet maintenance obligations and response expectations.

Question 30Healthcare Technology Management Fundamentals

During an investigation of a patient injury involving a volumetric infusion pump, the HTM technician must preserve the device for root-cause analysis. Which action best protects the integrity of the physical evidence?

  1. Clean and recalibrate the pump so it can return to service quickly
  2. Power-cycle the pump repeatedly to reproduce the fault before documenting anything
  3. Return the pump to the manufacturer immediately without recording its settings
  4. Quarantine the device, label it as involved in an event, and document its state before any testing Correct answer.

Explanation

Evidence preservation requires that the device be sequestered with its configuration, alarm logs, and accessories intact and its condition documented before testing or shipping. Altering settings or cleaning the device before documentation can destroy data needed for root-cause analysis and regulatory reporting.

Question 31Medical Device Safety and Risk Management

During design verification of a new infusion pump, a hazard analysis identifies that a software fault could deliver an unintended bolus. Which risk control measure is preferred first under the standard risk management hierarchy for medical devices?

  1. Inherently safe design, such as limiting the maximum programmable bolus volume in firmware Correct answer.
  2. Adding a warning label on the pump housing that alerts clinicians to the bolus risk
  3. Publishing the software fault rate in the instructions for use so users can assess risk
  4. Requiring the hospital to train nursing staff on recognizing bolus over-delivery

Explanation

Medical device risk management follows a defined priority order: inherently safe design and protective measures in the device come first, followed by information for safety such as labels and training. Warnings and training rely on human behavior and are the least reliable controls, so they are used only after design controls are exhausted. Selecting a firmware limit addresses the hazard at its source.

Question 32Medical Device Safety and Risk Management

Which document records the systematic identification of foreseeable hazards and the estimation of the risk associated with each hazardous situation before any controls are applied?

  1. The post-market surveillance plan
  2. The clinical evaluation report
  3. The design history file index
  4. The risk analysis within the risk management file Correct answer.

Explanation

Risk analysis is the part of risk management that identifies hazards and estimates the risk of associated hazardous situations, and it is retained in the risk management file. The design history file demonstrates design control compliance but does not itself estimate risk. Clinical evaluation and post-market surveillance are separate processes with different objectives.

Question 33Medical Device Safety and Risk Management

A manufacturer identifies a use error in which clinicians misload a cartridge into an analyzer. Which classification best describes this event when performing use-related risk analysis?

  1. A device malfunction caused by a component failure
  2. An abnormal use that is outside the scope of risk management
  3. A manufacturing nonconformity requiring a recall
  4. A use error arising from an interaction between the user, the task, and the device interface Correct answer.

Explanation

Use errors are unintended acts or failures to act during device use that result from the interaction of the user, the task, and the device user interface. They are not device malfunctions and must be addressed through usability engineering and design of the interface. Abnormal use, by contrast, is deliberate misuse outside intended use and is handled differently.

Question 34Medical Device Safety and Risk Management

In a failure mode and effects analysis, a team assigns severity 9, occurrence 4, and detection 5 to a failure mode. What is the resulting risk priority number and what does it represent?

  1. 180, representing the combined ranking of severity, likelihood of occurrence, and difficulty of detection Correct answer.
  2. 45, representing the product of occurrence and detection only
  3. 18, representing the average of the three factor scores
  4. 9, representing the highest single factor score

Explanation

The risk priority number is the product of the severity, occurrence, and detection scores, so 9 times 4 times 5 equals 180. It is used to rank failure modes for corrective action, though teams should also act on any high severity score regardless of the product. The number is a relative prioritization index, not an absolute measure of harm.

Question 35Medical Device Safety and Risk Management

A software-controlled radiation therapy device could cause serious injury if it delivers dose at the wrong gantry angle. Which architecture best exemplifies a protective measure that reduces risk without relying on the operator?

  1. Adding a caution symbol next to the angle readout
  2. Documenting the angle verification step in the treatment procedure
  3. Displaying the gantry angle prominently on the operator console
  4. Interlocking dose delivery so it is inhibited unless the gantry angle matches the planned value Correct answer.

Explanation

An interlock is a protective measure built into the device that prevents the hazardous event independent of user action. Displays, procedure steps, and symbols are information for safety that depend on the operator perceiving and responding correctly. Interlocks therefore rank higher in the risk control hierarchy.

Question 36Medical Device Safety and Risk Management

Which statement correctly distinguishes correction from corrective action in a medical device quality system?

  1. Correction addresses the immediate nonconformity, while corrective action eliminates the cause to prevent recurrence Correct answer.
  2. Correction removes the cause of a nonconformity, while corrective action fixes the immediate problem
  3. Correction and corrective action are synonyms and may be used interchangeably in records
  4. Corrective action applies only to design defects, while correction applies only to production defects

Explanation

A correction repairs or addresses the nonconforming product or problem at hand, whereas corrective action investigates and removes the underlying cause so the problem does not recur. Confusing the two leads to records that document a fix without any root cause elimination. Both are distinct from preventive action, which addresses potential problems.

Question 37Medical Device Safety and Risk Management

A risk management team is deciding whether a residual risk is acceptable after all feasible controls are applied. Which approach is most consistent with good practice?

  1. Defer the decision entirely to the regulatory reviewer
  2. Raise the acceptability threshold until the residual risk passes
  3. Compare the residual risk against predefined acceptability criteria and document the benefit-risk determination Correct answer.
  4. Declare the risk acceptable because all controls were applied, without further evaluation

Explanation

Residual risk should be evaluated against acceptability criteria established in advance, and the overall benefit-risk determination should be documented in the risk management file. Applying controls does not by itself prove acceptability. Adjusting criteria after the fact to pass undermines the integrity of the process.

Question 38Medical Device Safety and Risk Management

Which of the following is the primary purpose of a health hazard evaluation following a complaint about a device that may have malfunctioned in the field?

  1. To calculate the warranty cost of replacing the affected units
  2. To confirm that the complaint was filed within the required time window
  3. To determine whether the device failure could have caused or contributed to a serious adverse health outcome Correct answer.
  4. To verify that the production line met its daily output quota

Explanation

A health hazard evaluation assesses whether a device problem could cause or contribute to death or serious injury, which then informs reporting and field action decisions. It is a safety assessment, not a financial or production review. The outcome drives whether the event is reportable and whether a recall or correction is warranted.

Question 39Medical Device Safety and Risk Management

A manufacturer learns that a competitor's similar device was linked to battery overheating. No adverse events have occurred with its own device, but the same battery cell is used. What is the most appropriate action?

  1. Take no action because no complaints have been received
  2. Evaluate the information as a potential safety issue and assess whether corrective or preventive action is needed Correct answer.
  3. Remove the battery information from the labeling to reduce liability
  4. Wait until an adverse event occurs before investigating

Explanation

Information about similar devices using the same component is relevant safety data that should be evaluated even without local adverse events. The manufacturer should assess whether its device is affected and take preventive action if warranted. Waiting for harm to occur or suppressing labeling information is inconsistent with a proactive safety culture.

Question 40Medical Device Safety and Risk Management

Which term describes the combination of the probability of occurrence of harm and the severity of that harm?

  1. Benefit
  2. Risk Correct answer.
  3. Hazard
  4. Hazardous situation

Explanation

Risk is defined as the combination of the probability of occurrence of harm and the severity of that harm. A hazard is the potential source of harm, and a hazardous situation is a circumstance in which people or property are exposed to a hazard. Keeping these terms distinct is essential for consistent risk analysis.

Question 41Medical Device Safety and Risk Management

During summative usability testing, several participants fail to notice an alarm because it is masked by ambient noise. Which action is most appropriate for the design team?

  1. Conclude that the participants were insufficiently trained and proceed to validation
  2. Reclassify the failure as abnormal use and exclude it from the analysis
  3. Redesign the alarm characteristics or add a redundant alert and retest the interface Correct answer.
  4. Add a note in the instructions for use recommending a quiet environment

Explanation

A use-related hazard revealed in summative testing should drive design changes to the user interface, such as improving alarm audibility or adding redundant alerts, followed by retesting. Blaming users or relabeling the failure does not reduce the risk. Labeling changes are the lowest-priority control and cannot substitute for a workable interface.

Question 42Medical Device Safety and Risk Management

Which element is essential when documenting a risk control measure in the risk management file?

  1. The projected sales volume for the first year
  2. The verification evidence showing the measure was implemented and effective Correct answer.
  3. The marketing budget allocated to promote the device
  4. The names of all clinicians consulted during development

Explanation

Each risk control measure must be verified for implementation and effectiveness, and that verification evidence belongs in the risk management file. Commercial and promotional data are unrelated to risk control traceability. Documenting verification supports the traceability from hazard to control to evidence.

Question 43Medical Device Safety and Risk Management

A sterile implant is found to have a higher-than-expected infection rate in post-market data. Which sequence best reflects a structured risk management response?

  1. Immediately recall all devices before any investigation
  2. Assess the data, update the risk analysis, determine root cause, and implement and verify corrective action Correct answer.
  3. Increase the price to cover potential liability costs
  4. Ignore the signal because the device passed premarket testing

Explanation

Post-market signals should trigger an assessment that feeds back into risk analysis, followed by root cause investigation and verified corrective action. Premarket testing does not guarantee ongoing safety, and an immediate blanket recall without investigation may be disproportionate. The risk management file should be updated to reflect the new information.

Question 44Medical Device Safety and Risk Management

Which of the following best describes a hazardous situation?

  1. A circumstance in which people, property, or the environment are exposed to one or more hazards Correct answer.
  2. The probability that a device will fail within its service life
  3. The potential source of harm itself
  4. The physical injury or damage that results from an event

Explanation

A hazardous situation is the circumstance of exposure to a hazard, and it sits between the hazard and the occurrence of harm in the risk sequence. The hazard is the source, and harm is the resulting injury or damage. Distinguishing these stages helps teams identify where controls can interrupt the sequence.

Question 45Medical Device Safety and Risk Management

A team is selecting a risk control for a hazard where severity is high but occurrence is very low. Which consideration is most important?

  1. High-severity hazards should be evaluated for additional controls regardless of the computed priority number Correct answer.
  2. Detection scores should be ignored when severity is high
  3. Because occurrence is low, the risk priority number will be low and no action is required
  4. Only hazards with occurrence scores above the midpoint require controls

Explanation

When severity is high, even a low occurrence can represent unacceptable risk, so teams should not rely solely on the computed priority number. High-severity failure modes warrant scrutiny and additional controls where feasible. This is a common weakness of purely multiplicative prioritization schemes.

Question 46Medical Device Safety and Risk Management

Which practice best supports traceability in a medical device risk management file?

  1. Linking each hazard to its associated hazardous situations, harms, risk controls, and verification evidence Correct answer.
  2. Recreating the risk analysis from memory at the end of the project
  3. Storing risk records only in email threads among the project team
  4. Summarizing all hazards in a single paragraph without identifiers

Explanation

Traceability requires a clear chain from each hazard through hazardous situations and harms to the chosen controls and the evidence that they were implemented and effective. Maintaining this linkage supports review, audits, and updates when new information arises. Informal storage or end-of-project reconstruction undermines the integrity of the file.

Question 47Medical Device Safety and Risk Management

A software update changes an alarm limit in a patient monitor. Which action is required before release under risk management principles?

  1. Reassess the risk analysis for the changed function and verify that controls remain effective Correct answer.
  2. Release the update and update the risk file only if complaints arise
  3. Assume the original risk analysis still applies unchanged because the device is already cleared
  4. Remove the alarm from the labeling to simplify the update

Explanation

Any design change, including software changes, requires the risk analysis to be reviewed and updated to reflect the new or modified hazards. Verification should confirm that controls remain effective after the change. Assuming prior analyses remain valid can leave new hazards unaddressed.

Question 48Medical Device Safety and Risk Management

Which of the following is an example of a fault that should be considered in a fault tree analysis for a powered surgical device?

  1. The number of units sold in a region
  2. The color scheme chosen for the device housing
  3. A loss of power supply during an active cutting sequence Correct answer.
  4. The hospital's decision to purchase a competitor's device

Explanation

Fault tree analysis examines combinations of faults and failures that can lead to an undesired top event, and loss of power during cutting is a relevant fault. Commercial decisions, cosmetic choices, and sales figures are not failure events in the device's functional logic. Identifying credible faults is the foundation of the analysis.

Question 49Medical Device Safety and Risk Management

Which statement about information for safety as a risk control is correct?

  1. It should be used in place of design controls whenever possible
  2. It is the most reliable control because users always read the instructions
  3. It eliminates the need to verify the effectiveness of other controls
  4. It can reduce risk but is generally less effective than design measures and should be used after them Correct answer.

Explanation

Information for safety, such as warnings and instructions, can reduce risk but depends on user behavior and is therefore less reliable than design-based controls. It should be applied after inherently safe design and protective measures have been considered. Its effectiveness should still be verified where it is relied upon.

Question 50Medical Device Safety and Risk Management

A risk management review finds that a required risk control was designed but never verified in the finished device. What is the most significant consequence?

  1. The clinical evaluation must be repeated in full
  2. The manufacturing process is invalidated
  3. The device automatically fails electromagnetic compatibility testing
  4. The risk management file is incomplete because implementation and effectiveness are unproven Correct answer.

Explanation

Risk control measures must be verified for implementation and effectiveness, so an unverified control leaves a gap in the risk management file. Without verification, there is no evidence that the intended risk reduction actually occurs in the finished device. Other testing and processes are not automatically invalidated by this gap.