Medical Device Single Audit Program [MDSAP] Quiz

NameEmailPhone Number

1. Which of the following lists ALL current participating countries in the Medical Device Single Audit Program (MDSAP)?

a) United States, Canada, Japan, Brazil, Germany

b) United States, Canada, Australia, Brazil, China

c) United States, Canada, Australia, Brazil, Japan

d) United States, Canada, Japan, Mexico, United Kingdom

e) United States, Canada, Korea, France, United Kingdom

2. What are the four primary processes in the MDSAP?

a) Management; Measurement, Analysis and Improvement; Design and Development, Purchasing

b) Management; Risk Management; Production and Service Controls; Post-Market Surveillance

c) Management; Measurement, Analysis and Improvement, Design/Development, Production/Service Controls

d) Quality Assurance, Regulatory Compliance, Design Control, Supplier Management

e) Planning, Implementation, Monitoring, and Improvement

3. What is the primary purpose of a special audit in the MDSAP program?

a) To conduct routine surveillance of a manufacturer's QMS

b) To evaluate the manufacturer's financial stability

c) To investigate specific concerns or non-conformities outside the regular audit schedule

d) To certify new medical devices for market approval

e) To extend the manufacturer's certification validity period

4. According to MDSAP, which of the following are considered critical suppliers?

a) Suppliers that provide packaging materials only

b) Suppliers that provide components or services that directly affect the safety or performance of the medical device

c) Suppliers used exclusively for administrative purposes

d) Suppliers of office equipment and stationery

e) Any supplier that has been deprecated in the last year

5. What is the structure of the MDSAP audit cycle?

a) Initial audit, annual surveillance audits, and re-certification every two years

b) One comprehensive audit every five years with no interim checks

c) Continuous real-time monitoring without scheduled audits

d) Monthly spot checks by regulatory authorities

e) Only audits conducted after a product recall

6. What determines if it's an event is reportable?

a) The event occurs within the manufacturing facility

b) The event is related to customer complaints only

c) The event involves a potentially serious device malfunction or safety issue affecting patient health

d) The event is a routine production delay

e) The event is related to marketing strategies

7. What is a key component of management planning in the context of MDSAP?

a) Developing marketing campaigns for medical devices

b) Establishing objectives and processes to ensure compliance with regulatory requirements and continuous improvement

c) Selecting suppliers based on cost alone

d) Training staff exclusively on product sales techniques

e) Focusing only on post-market surveillance activities

8. Which of the following is TRUE about the responsibilities of a Management Representative in a medical device organization's Quality Management System (QMS)?

a) Must be appointed by name (not by title) in an official organizational document

b) Responsible for reporting to regulatory authorities on QMS performance

c) Must ensure the QMS is effectively defined, documented, implemented, and maintained.

d) Does not need authority to place products or processes on hold

e) Does not have responsibility for contributing to corrective and preventive action activities, complaint handling and the handling of nonconforming products

9. Under Health Canada's MDSAP requirements, which of the following is MANDATORY for a medical device manufacturer outsourcing a critical production process?

a) Maintaining an internal audit schedule for the supplier's facility

b) Documenting the supplier's roles and ensuring they are qualified under the manufacturer's QMS

c) Requiring the supplier to hold a Health Canada establishment license

d) Conducting monthly on-site inspections of the supplier's operations

e) Supplier must have MDSAP certification

10. According to U.S. FDA requirements under MDSAP, records must be kept for at least ______ or ______ years from the date of release if the device has a short lifespan, and in ______ with ______. Which of the following correctly completes the statement? (MDSAP p.26-27)

a) device lifetime, 1, digital format, cloud storage

b) device lifetime, 2, electronic form, backup

c) device lifetime, 2, paper form, signature from the auditory organization

d) shelf life, 4, electronic form, hardcopy backup

e) electronic format only

11. Which of the following roles may NOT require complete training before working in a medical device manufacturing environment? (MDSAP p.25)

a) A temporary assembly line worker handling sterile devices

b) A janitor cleaning only production site areas

c) A quality inspector performing final product release checks

d) A designer developing a poster for an implantable device

e) Personnel performing device packaging

12. Which of the following is NOT an input for a Management Review procedure under MDSAP requirements? (MDSAP p.28)

a) Customer feedback and complaints

b) Results of internal and external audits

c) Employee personal performance evaluations

d) Process performance and product conformity data

e) Status of preventive and corrective actions

13. When auditing a medical device organization's distribution control under MDSAP, which of the following statements is NOT TRUE regarding ensuring devices have proper marketing authorization before distribution?

a) Controls must prevent distribution in unauthorized markets (e.g., segregated inventory or order validation)

b) Sales and marketing materials (including websites) must be reviewed to ensure they only promote devices in regions where valid marketing authorization exists

c) The organization is only required to verify marketing authorizations for high-risk (Class III) devices, as low-risk (Class I) devices are exempt from distribution controls

d) Specific language in distribution agreements limiting devices that can be distributed in certain jurisdictions.

e) Devices should only be distributed if they have obtained the necessary regulatory clearances or approvals

14. Which of the following entities may NOT need to register their establishment and list devices with the FDA? (MDSAP p.35)

a) A company that develops device specifications manufactured by a third party for commercial distribution

b) An initial importer for devices they didn't specify or modify

c) A complaint file establishment

d) A device establishment in a foreign trade zone

e) An entity that repackages or relabels devices

15. Under Health Canada regulations, which of the following statements about medical device licensing is CORRECT? (MDSAP p.36)

a) Only Class I medical devices require a manufacturer's license for import or sale in Canada

b) Class II, III, and IV medical devices can be freely imported and sold without any licensing requirements

c) A manufacturer must hold a valid license (or amended license) to import or sell Class II, III or IV medical devices in Canada

d) Only foreign manufacturers need licenses for Class III and IV devices, while Class II devices are exempt

e) Importer device must have a Canadian agent located in Canada

16. According to 21 CFR 807.81 (Premarket Notification), which of the following modifications to an existing medical device would NOT typically require the submission of a new 510(k)? (MDSAP p.40-41)

a) Changing the sterilization method from ethylene oxide to gamma radiation

b) Updating the device's cybersecurity system via a patch (e.g., bug fixes, vulnerability mitigation)

c) Modifying the structural material of the device to improve durability

d) Expanding the device's intended use to a new patient population

e) Adjusting operating parameters (e.g., expanding the temperature range of a continuous measurement thermometer)

17. Under FDA regulations, when is a manufacturer required to submit a new 510(k) for a medical device?

a) When making minor changes that do not affect safety or effectiveness

b) When modifying a device in a way that could significantly affect its safety or effectiveness or alter its intended use

c) When updating the device's label to include new branding

d) When changing the manufacturing location within the same state

e) When introducing the same device into a different market without design changes

18. A medical device manufacturer received 15 complaints about device malfunctions from the same hospital within one month. The quality team's investigation confirmed the issue stems from a supplier's out-of-specification component. After implementing corrective action, what is the most complete compliance with MDSAP CAPA requirements? (MDSAP p.43-44)

a) Replace the faulty components, document the change in the supplier log, and file the complaint reports

b) Work with the supplier to resolve, verify no impact on device, update procedures with new testing, train staff, and document action

c) Retrieve the device from the hospital and replace with new one, then conduct a design review at the next scheduled audit

d) Add the complaints to the monthly quality metrics report and increase sampling of the supplier's next shipment

e) Initiate a field notice action with a modification on the IFU.

19. According to MDSAP requirements for assessing conformity, which of the following is NOT considered a valid source of quality data for identifying potential problems? (MDSAP p.45)

a) Customer complaint records and service reports

b) Results from environmental monitoring systems (e.g., cleanroom particulate counts)

c) Employee satisfaction survey results

d) Statistical process control (SPC) charts

e) Internal/External audit report findings

20. When a corrective or preventive action results in a design change/process change for a Class III or IV medical device in Canada, which of the following is REQUIRED according to MDSAP requirements? (MDSAP p.50-51)

a) Update the marketing materials and notify customers within 30 days

b) Document the change, evaluate its impact on safety and efficacy, and notify the regulator if necessary

c) Only document the change internally without notifying any authorities

d) Notify the regulator immediately, regardless of the impact of the change

e) Submit a new device application before implementing the change

21. According to MDSAP requirements, what must a manufacturer do when nonconforming medical devices are found after delivery? (MDSAP p.53)

a) Ignore the issue if the device has already been delivered to the customer

b) Recall the devices, evaluate the nonconformity, and take appropriate corrective actions, including notifying the relevant authorities if required

c) Only document the nonconformity internally without taking further action

d) Wait for customer complaints before deciding on a course of action

e) Re-label the devices to conceal the nonconformity

22. According to the MDSAP requirements (CMDR 61.4(1)), in Canada, how frequently must a manufacturer prepare summary reports for post-market surveillance data when they have received or become aware of information about Complaint or adverse event trends? (MDSAP p.57)

a) Every 6 months for Class II devices and every 12 months for Class III/IV devices

b) Every 12 months for Class II devices and every 6 months for Class III/IV devices

c) Every 24 months for Class II devices and every 12 months for Class III/IV devices

d) Every 24 months for Class II devices and every 36 months for Class III/IV devices

e) Every 24 months for all class of devices

23. According to U.S. FDA requirements (21 CFR 820.198), which of the following is NOT required to be included in the record of investigation for a medical device complaint? (MDSAP p.58-59)

a) The name and address of the complainant, along with the nature of the complaint

b) The dates of the investigation and a summary of its results

c) The complainant's medical history

d) Any unique device identifiers (e.g., UDI, UPC) and corrective actions taken

e) Corrective actions taken or planned based on investigation

24. When a hospital's misuse of a device contributes to a complaint, the manufacturer must: (MDSAP p.60)

a) Document the complaint but need not contact the hospital

b) Update risk management files without further investigation

c) Record evidence of communication with the hospital

d) Issue an advisory notice immediately

e) Provide immediate training to the hospital on the misuse

25. Which of the following correctly describes the preliminary reporting timelines for medical device incidents in Canada? (MDSAP p.65)

a) Events that led to death/serious deterioration: Report within 7 days; Events that might lead to death/serious deterioration: Report within 14 days

b) Events that led to death/serious deterioration: Report within 10 days; Events that might lead to death/serious deterioration: Report within 30 days

c) Both types of events must be reported within 15 days

d) Only events causing death require reporting; serious deterioration incidents are exempt

e) The initial notification to Health Canada made within 24 hours either verbally or in writing.

26. Which of the following is NOT correctly described regarding U.S. FDA medical device reporting (MDR) timelines? (MDSAP p.68-69)

a) Standard reportable events (death/serious injury): Within 30 calendar days after becoming aware

b) Events requiring remedial action to prevent public harm: Within 5 workdays after becoming aware

c) Device malfunctions likely to cause death/serious injury if recurring: Quarterly summary reporting permitted for most devices

d) Supplemental reports for new information: Within 60 calendar days after obtaining additional information

e) Response to FDA written request for 5-day reports: Immediate compliance for specified time period

27. According to Health Canada's Medical Device Regulations (SOR/98-282), which of the following is NOT required to be provided to the Minister when initiating a medical device recall? (MDSAP p.71-72)

a) The name and address of each person to whom affected devices were sold and quantity sold to each

b) Technical File of the medical device

c) An evaluation of the risk associated with the defectiveness or possible defectiveness

d) The proposed strategy for conducting the recall, including start date and completion timeline

e) The name, title and telephone number of the manufacturer's representative for recall inquiries

28. What is a common method to confirm that design inputs are complete, unambiguous, and consistent before proceeding with design and development?

a) Conducting a design review after the initial requirements are determined to verify the accuracy and completeness of design inputs

b) Eliminating the need for design reviews if the inputs are documented

c) Relying solely on team discussions without formal review to validate the design inputs

d) Testing the final device to ensure it meets user needs rather than reviewing inputs early in the process

e) Approving the final design without review, as long as the design outputs meet initial specifications

29. When auditing the Design and Development process for medical devices, which of the following is NOT a required outcome per MDSAP guidelines? (MDSAP p.73-74)

a) Ensuring design outputs meet input requirements through verification

b) Conducting post-market surveillance to track long-term device performance

c) Validating that the device conforms to user needs and intended use

d) Controlling design changes and mitigating associated risks

e) Addressing incomplete, ambiguous, or conflicting requirements through systematic review

30. Which of the following statements about design and development procedures in medical device organizations is NOT true according to MDSAP requirements? (MDSAP p.74-75)

a) Medical device organizations must maintain a defined and documented design change procedure even if they have no ongoing or planned design projects

b) Design inputs should be clearly defined and documented before design work begins

c) When outsourcing any design and development activities, the outsourced organization must be treated as a supplier

d) For fully outsourced design activities, auditors must verify proper design transfer controls and production line compliance

e) If design activities are outsourced, the medical device organization is exempt from ensuring the supplier complies with ISO 13485:2016 or country-specific regulations (e.g., 21 CFR Part 820)

31. When selecting a completed design and development project for review, which of the following should be the highest priority according to MDSAP guidelines? (MDSAP p.75)

a) A device with a long history of safe use and no recent design changes

b) A recently launched device with no customer complaints

c) A device with multiple recent complaints and a recent design change to address a quality issue

d) A legacy device that was last audited five years ago but has no known issues

e) A device having a highest sales volume

32. When auditing Design and Development Input (per ISO 13485:2016 and MDSAP), which of the following documents is NOT mandatory for review?

a) Design History File (DHF)

b) Design Input Evaluation Report

c) Production Batch Records

d) Control of Risk Management Procedure

e) Design Input Work Instruction

33. According to MDSAP requirements, which of the following statements about Design Inputs is NOT true? (MDSAP p.79)

a) Design inputs should exclude manufacturing process controls (e.g., sterilization, GMP for medicinal substances) as these are not part of device design requirements

b) Design input must address intended use, regulatory requirements, and safety/performance criteria

c) Post-production data (e.g., complaints, adverse events) from similar devices must be considered design inputs

d) Design input must be documented, reviewed, and approved by appropriate personnel

e) Design inputs must be complete, unambiguous, and reviewed to ensure they do not conflict with each other

34. During an MDSAP audit of design and development procedures, which of the following must be verified to ensure compliance? (MDSAP p.78-82)

a) Design input procedures include mechanisms to resolve incomplete, ambiguous, or conflicting requirements

b) Design output procedures ensure all essential outputs (e.g., specifications, risk controls) are identified

c) Confirm that risk acceptability criteria are established and met throughout the design and development process

d) All of the above

e) None of the above

35. According to MDSAP requirements for design and development outputs and verification, which of the following statements is NOT true? (MDSAP p.81-82)

a) For sterile devices, design outputs must ensure compatibility between the device, packaging, and sterilization processes

b) Essential outputs critical for device functionality must be identified, often using risk management tools

c) Design outputs must include device specifications, manufacturing process controls, and labelling, but do not need to be traceable to design inputs

d) Design verification must provide objective evidence (e.g., tests, analyses) that outputs meet input requirements, with predefined acceptance criteria

e) Verification methods can vary (including in-house-developed tests) as long as they reliably confirm output meets input.

36. Which of the following statements about risk management and design validation activities in medical device development is not true according to MDSAP requirements? (MDSAP p.83-87)

a) Risk management activities must be defined and implemented throughout product and process design and development, with established risk acceptability criteria.

b) Design verification and validation must include assurances that risk control measures are effective in reducing risk, regardless of the product's intended use.

c) Design validation data must demonstrate that the approved design meets the requirements for its specified application, with testing adjusted based on the nature and risk of the product.

d) Clinical evaluations are optional and only required if specifically mandated by national or regional regulations during the design validation process.

e) None of the above

37. According to MDSAP and FDA requirements for design reviews: (MDSAP p.90-91) The minimum number of formal design reviews required is ______. Personnel should include an individual who is _____ for the design stage being reviewed, along with ______ to ensure that design and development outputs are verified as suitable for manufacturing before becoming final production specification (according to US FDA requirements).

a) 1; directly responsible; manufacturing representative and corresponding specialist (if needed)

b) 2; directly responsible; management representative and the CEO of company

c) 1; not directly responsible; manufacturing representative and corresponding specialist (if needed)

d) 2; not directly responsible; a management representative and the CEO of the company

e) 3; not directly responsible; manufacturing representative and corresponding specialist (if needed)

38. According to MDSAP requirements, what is the role of the management representative in Production and Service Controls? (MDSAP p.94)

a) To directly oversee daily manufacturing operations and approve every batch of medical devices

b) To ensure the quality management system (QMS) requirements are defined, documented, implemented, and maintained

c) To conduct final inspections of finished medical devices before release to the market

d) To replace auditors during MDSAP audits if production issues are identified

e) To design and validate all production processes independently

39. According to MDSAP and FDA requirements for Unique Device Identifiers (UDI), which of the following statements is NOT true? (MDSAP p.96)

a) A UDI must be presented in both human-readable plain text and AIDC (Automated Identification and Data Capture) format

b) Only Class III medical devices are required to comply with UDI labelling requirements; Class I and II devices are exempt

c) Labellers must submit specific UDI data elements to the FDA's Global Unique Device Identification Database (GUDID)

d) Manufacturers, contract manufacturers, and private label distributors are typically considered "labellers" under UDI rules

e) UDIs must be issued in collaboration with an FDA-accredited issuing agency

40. According to MDSAP, which of the following must be included in a medical device manufacturer's documented work environment requirement? (MDSAP p.100)

a) Procedures for health, cleanliness, and clothing of personnel when these factors could affect product quality

b) Monitoring and control of environmental conditions that may impact product quality

c) Training/supervision protocols for personnel working in special environmental conditions

d) Controls to prevent contamination from returned or potentially contaminated products

e) All of the above.

41. Which of the following processes is required to undergo validation according to FDA requirements for medical device manufacturing in the USA? (MDSAP p.100-101)

a) Visual inspection of finished devices

b) Sterilization processes, aseptic processing, injection molding, and welding

c) CNC machining of non-critical components

d) Manual assembly of non-sterile devices

e) Cleaning of non-sterile, non-critical components

42. Which of the following is required practice for monitoring and measuring equipment in medical device manufacturing according to quality system requirements? (MDSAP p.107-108)

a) Equipment calibration could follow the manufacturer's recommended frequency and later on adjust based on personal preference

b) Monitoring and measuring devices used in production and service control is not required

c) The required accuracy and precision should be defined during the planning of product realization to ensure the equipment is suitable and capable of providing valid results

d) Maintenance procedures are optional for production equipment as long as calibration is performed regularly

e) None of the above

43. Which of the following statements is TRUE regarding validation of software used for production and service process control in medical device manufacturing? (MDSAP p.109)

a) Software validation is only required for custom-developed software, not for off-the-shelf quality management system software and software-controlled production

b) The medical device organization must validate all software-driven systems in the production process during each audit

c) Software validation must include documented requirements, a validation protocol with acceptance criteria, and records of validation activities

d) Software changes do not require validation if they are minor and don't affect the user interface

e) Software validation is not required for significant upgrade as long as the intended usage is the same

44. Which of the following statements about the Device Master File (DMF) is NOT true according to Canadian and U.S. regulations? (MDSAP p.110-111)

a) Companies must maintain a file for each type of device where the DMF must include comprehensive device specifications.

b) The DMF must contain traceability requirements based on the device's risk, and devices sold in Canada must have labelling that conforms to only English language requirements.

c) In the U.S., control numbers are required for traceability, and the DMF needs to include packaging specifications.

d) In Canada, manufacturers are required to maintain distribution records that permit a complete and rapid withdrawal of devices from the market.

e) None of the above.

45. Which of the following statements is NOT TRUE regarding traceability requirements for implantable, life-supporting, or life-sustaining medical devices under MDSAP? (MDSAP p.113-114)

a) Manufacturers must maintain traceability records of components, materials, and work environment conditions that could affect device performance

b) Traceability systems must allow tracking of each batch of devices throughout the distribution chain using control numbers or similar identifiers

c) Manufacturers are only required to track devices to the distributor level, not the end-user, even for implantable or life-sustaining devices

d) For Schedule 2 implants in Canada, manufacturers must provide implant registration cards or an approved alternative system

e) In the U.S., manufacturers must implement a tracking system for devices subject to an FDA tracking order and conduct periodic audits.

46. Which of the following is TRUE regarding the handling of nonconforming medical devices under MDSAP requirements? (MDSAP p.117-119)

a) Must be immediately destroyed to prevent accidental use

b) Can be fixed, used with special approval, or turned into demo units if properly controlled

c) Supplier notification is optional unless the nonconformity affects patient safety

d) Records of concessions (authorized use of nonconforming product) do not need to include the identity of the approving personnel

e) Nonconforming products detected after release always require a recall, regardless of risk.

47. Which of the following statements about service reports in the context of medical device servicing is not true according to MDSAP and U.S. regulations? (MDSAP p.121-123)

a) Service reports must include the name of the device serviced, any unique device identifier (UDI), and the date of service, but do not need to document any complaints

b) Each manufacturer must consider a service report representing an event that must be reported to the FDA as a medical device complaint report, regardless of the service's outcome

c) Service reports can be an important source of quality data for input into the medical device organization's Measurement, Analysis and Improvement process

d) The medical device organization is required to analyze service reports for adverse events that are reportable to the regulatory authorities

e) None of the above

48. Which of the following is a priority criterion for selecting supplier files to audit under MDSAP requirements? (MDSAP p.127)

a) Suppliers who provide products that directly impact device design outputs

b) Newly approved suppliers of products or services

c) Suppliers of higher risk products or processes

d) Suppliers of processes requiring validation

e) All of the above

49. Which of the following is NOT TRUE regarding supplier selection requirements under MDSAP? (MDSAP p.128-131)

a) Suppliers must be selected based on their ability to meet specified quality requirements

b) The level of control applied to suppliers should be the same for all suppliers regardless of risk level

c) Supplier evaluation records must be maintained to demonstrate compliance

d) Higher-risk suppliers should receive more stringent controls than lower-risk suppliers

e) Supplier controls must be proportional to the supplier's impact on finished device quality

50. Which of the following is REQUIRED for purchasing agreements with suppliers under MDSAP? (MDSAP p.133-136)

a) Purchasing requirements must be reviewed for adequacy before sending them to suppliers

b) Written agreements about product changes are optional for high-risk components

c) Risk management activities only need to be defined for the final device, not purchased materials

d) Suppliers may implement changes without notification if they don't affect product safety

e) None of the above

Your score is

0%