Quiz-summary
0 of 10 questions completed
Questions:
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
Information
Premium Practice Questions
You have already completed the quiz before. Hence you can not start it again.
Quiz is loading...
You must sign in or sign up to start the quiz.
You have to finish following quiz, to start this quiz:
Results
0 of 10 questions answered correctly
Your time:
Time has elapsed
Categories
- Not categorized 0%
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- Answered
- Review
-
Question 1 of 10
1. Question
Serving as operations manager at an audit firm, you are called to advise on Ensuring employees can perform tasks safely during internal audit remediation. The briefing an incident report highlights that an internal auditor suffered a near-miss fall while verifying the installation of new ventilation equipment on a construction site rooftop. The auditor was equipped with a full-body harness but failed to attach the lanyard to a certified anchorage point because the inspection was expected to take less than five minutes. To prevent a recurrence and ensure auditors can perform these field tasks safely, which action should the firm prioritize?
Correct
Correct: A Job Hazard Analysis (JHA) is a proactive hazard assessment technique recommended by OSHA to identify potential hazards and determine the necessary controls before work begins. By requiring a JHA that specifically identifies anchorage points, the firm ensures that hazard recognition is a formal part of the audit planning process, addressing the root cause of the near-miss (failure to identify/use an anchor) rather than just providing equipment.
Incorrect: Emphasizing PPE as the primary method is incorrect because, according to the hierarchy of controls, PPE is the least effective and final line of defense. Upgrading equipment (self-retracting lifelines) does not address the behavioral or administrative failure of not tying off. Restricting auditors to ground-level observations may hinder the audit’s objective of independent verification and does not address how to safely perform the task when it is necessary.
Takeaway: Proactive hazard recognition through a Job Hazard Analysis (JHA) is more effective than relying on PPE alone, as it forces the identification of specific safety requirements before a task commences.
Incorrect
Correct: A Job Hazard Analysis (JHA) is a proactive hazard assessment technique recommended by OSHA to identify potential hazards and determine the necessary controls before work begins. By requiring a JHA that specifically identifies anchorage points, the firm ensures that hazard recognition is a formal part of the audit planning process, addressing the root cause of the near-miss (failure to identify/use an anchor) rather than just providing equipment.
Incorrect: Emphasizing PPE as the primary method is incorrect because, according to the hierarchy of controls, PPE is the least effective and final line of defense. Upgrading equipment (self-retracting lifelines) does not address the behavioral or administrative failure of not tying off. Restricting auditors to ground-level observations may hinder the audit’s objective of independent verification and does not address how to safely perform the task when it is necessary.
Takeaway: Proactive hazard recognition through a Job Hazard Analysis (JHA) is more effective than relying on PPE alone, as it forces the identification of specific safety requirements before a task commences.
-
Question 2 of 10
2. Question
Senior management at a broker-dealer requests your input on Specific steps for de-energizing electrical circuits as part of control testing. Their briefing note explains that during a recent facility upgrade at their primary data center, a contractor narrowly avoided an arc flash incident when a circuit they believed was isolated remained live due to an undocumented back-fed uninterruptible power supply (UPS). As the internal auditor reviewing the safety protocols for the upcoming Phase II renovation, you are evaluating the effectiveness of the lockout/tagout (LOTO) procedures. According to OSHA standards for electrical safety, which action must be performed as the final step to ensure the circuit is safe to work on after locks and tags have been applied?
Correct
Correct: According to OSHA 29 CFR 1910.333(b)(2)(iv), the final and most critical step in de-energizing electrical equipment is verification. A qualified person must use test equipment to verify that the circuit elements and electrical parts of equipment to which employees will be exposed are de-energized. This ensures that no residual energy, induced voltage, or back-fed power (such as from a UPS or generator) is present, regardless of the position of the breakers.
Incorrect: Visual inspection of the breaker panel is a necessary part of the isolation process but does not account for mechanical failure of the breaker or back-feeding from other sources. Reviewing single-line diagrams is a preparatory step used to identify energy sources before the de-energization process begins. Notifying affected employees is an administrative requirement that occurs at the start of the LOTO process to ensure they do not attempt to restart equipment, but it does not verify the physical state of the electrical circuit.
Takeaway: The de-energization process is only complete once a qualified person has verified the absence of voltage using appropriate testing equipment at the work site.
Incorrect
Correct: According to OSHA 29 CFR 1910.333(b)(2)(iv), the final and most critical step in de-energizing electrical equipment is verification. A qualified person must use test equipment to verify that the circuit elements and electrical parts of equipment to which employees will be exposed are de-energized. This ensures that no residual energy, induced voltage, or back-fed power (such as from a UPS or generator) is present, regardless of the position of the breakers.
Incorrect: Visual inspection of the breaker panel is a necessary part of the isolation process but does not account for mechanical failure of the breaker or back-feeding from other sources. Reviewing single-line diagrams is a preparatory step used to identify energy sources before the de-energization process begins. Notifying affected employees is an administrative requirement that occurs at the start of the LOTO process to ensure they do not attempt to restart equipment, but it does not verify the physical state of the electrical circuit.
Takeaway: The de-energization process is only complete once a qualified person has verified the absence of voltage using appropriate testing equipment at the work site.
-
Question 3 of 10
3. Question
As the relationship manager at a broker-dealer, you are reviewing Maintenance of visibility of devices during incident response when an incident report arrives on your desk. It reveals that during a night-shift renovation at a regional office, a worker bypassed a hazardous area because the warning signs and barricade lights were obscured by accumulated drywall dust and stacked debris. The audit must determine if the site’s safety controls were deficient under OSHA standards. Which of the following best describes the requirement for maintaining the visibility of such safety devices?
Correct
Correct: According to OSHA standards (specifically 29 CFR 1926 Subpart G), all signs, signals, and barricades must be maintained in a clean and legible condition. This includes ensuring that reflective surfaces and lights are not obscured by dirt, dust, or debris, as their effectiveness depends on being clearly visible to workers and motorists at all times, especially during night operations or in low-light environments.
Incorrect: Restricting visibility requirements to daylight hours is incorrect because hazards persist 24/7 and night shifts require even higher visibility standards. Suggesting that initial placement is sufficient ignores the ongoing requirement for maintenance and cleaning to ensure functionality. Substituting visibility with PPE is a violation of the hierarchy of controls, as PPE does not replace the need for effective hazard communication and warning systems.
Takeaway: Safety and traffic control devices must be continuously maintained in a clean and legible state to ensure they remain visible and effective under all operating conditions.
Incorrect
Correct: According to OSHA standards (specifically 29 CFR 1926 Subpart G), all signs, signals, and barricades must be maintained in a clean and legible condition. This includes ensuring that reflective surfaces and lights are not obscured by dirt, dust, or debris, as their effectiveness depends on being clearly visible to workers and motorists at all times, especially during night operations or in low-light environments.
Incorrect: Restricting visibility requirements to daylight hours is incorrect because hazards persist 24/7 and night shifts require even higher visibility standards. Suggesting that initial placement is sufficient ignores the ongoing requirement for maintenance and cleaning to ensure functionality. Substituting visibility with PPE is a violation of the hierarchy of controls, as PPE does not replace the need for effective hazard communication and warning systems.
Takeaway: Safety and traffic control devices must be continuously maintained in a clean and legible state to ensure they remain visible and effective under all operating conditions.
-
Question 4 of 10
4. Question
The MLRO at a private bank is tasked with addressing Environmental Management and Legal Compliance – Advanced Topics during periodic review. After reviewing a customer complaint, the key concern is that a large-scale mining project funded by the bank has allegedly failed to account for the cumulative impact of its water abstraction on downstream agricultural communities across a national border. The project’s existing Environmental Impact Assessment (EIA) was approved by the local ministry, but the complaint suggests this approval ignored the requirements of the Espoo Convention and the bank’s commitment to the Equator Principles. The bank must now determine the most appropriate risk assessment strategy to mitigate legal and reputational exposure. What is the most robust course of action to address these advanced environmental compliance risks?
Correct
Correct: The correct approach involves performing a gap analysis against international standards, such as the IFC Performance Standards and the Equator Principles, which are critical for advanced environmental management in a global context. This method specifically addresses the failure to account for cumulative and transboundary impacts, which are core requirements of the Espoo Convention and modern Environmental Impact Assessment (EIA) methodologies. By integrating these findings into a revised Environmental and Social Management Plan (ESMP), the organization ensures that risk mitigation is not just a one-time check but a continuous, monitored process that aligns with international legal expectations and best practices for large-scale infrastructure projects.
Incorrect: The approach of validating compliance solely through local permits and national water acts is insufficient because it ignores the broader international legal obligations and the specific transboundary risks that local regulations often fail to address in detail. Utilizing a Strategic Environmental Assessment (SEA) is inappropriate in this scenario because SEAs are designed for evaluating high-level policies, plans, and programs rather than providing a specific risk mitigation strategy for an individual project already in the operational or funding phase. Commissioning an independent audit of technical modeling and increasing reporting frequency is a reactive measure that fails to correct the fundamental scope deficiency of the original assessment, as it does not expand the assessment to include the missing cumulative and transboundary dimensions.
Takeaway: Advanced environmental risk management requires evaluating cumulative and transboundary impacts against international standards to ensure compliance beyond local regulatory minimums.
Incorrect
Correct: The correct approach involves performing a gap analysis against international standards, such as the IFC Performance Standards and the Equator Principles, which are critical for advanced environmental management in a global context. This method specifically addresses the failure to account for cumulative and transboundary impacts, which are core requirements of the Espoo Convention and modern Environmental Impact Assessment (EIA) methodologies. By integrating these findings into a revised Environmental and Social Management Plan (ESMP), the organization ensures that risk mitigation is not just a one-time check but a continuous, monitored process that aligns with international legal expectations and best practices for large-scale infrastructure projects.
Incorrect: The approach of validating compliance solely through local permits and national water acts is insufficient because it ignores the broader international legal obligations and the specific transboundary risks that local regulations often fail to address in detail. Utilizing a Strategic Environmental Assessment (SEA) is inappropriate in this scenario because SEAs are designed for evaluating high-level policies, plans, and programs rather than providing a specific risk mitigation strategy for an individual project already in the operational or funding phase. Commissioning an independent audit of technical modeling and increasing reporting frequency is a reactive measure that fails to correct the fundamental scope deficiency of the original assessment, as it does not expand the assessment to include the missing cumulative and transboundary dimensions.
Takeaway: Advanced environmental risk management requires evaluating cumulative and transboundary impacts against international standards to ensure compliance beyond local regulatory minimums.
-
Question 5 of 10
5. Question
Which practical consideration is most relevant when executing Empowering employees to identify and report hazards? An internal auditor is evaluating a construction firm’s safety management system to determine the effectiveness of its hazard recognition program. During interviews, several site workers indicate that while they are trained to spot risks, they are hesitant to submit formal reports because they fear that being associated with work delays might influence their eligibility for upcoming high-priority projects. To align with OSHA’s emphasis on worker rights and effective internal control environments, which factor is most critical for the auditor to verify?
Correct
Correct: Under Section 11(c) of the OSH Act, employers are prohibited from retaliating against employees for exercising their safety rights, which includes reporting hazards. A truly empowered workforce requires an environment where ‘adverse action’—which includes not just termination but also subtle changes in job duties or project assignments—is strictly prohibited and monitored. From an audit perspective, the absence of such protections renders the reporting control ineffective because it creates a ‘chilling effect’ on employee participation.
Incorrect: Peer-review systems can create social pressure and discourage individual reporting. Volume-based incentives may lead to the reporting of trivial issues to meet quotas rather than focusing on significant risks. Requiring project manager approval before a report is filed creates a conflict of interest and a barrier to reporting, as the manager may prioritize the timeline over safety, which contradicts the principle of empowering the individual worker.
Takeaway: Employee empowerment in safety is only effective when supported by a robust anti-retaliation framework that protects workers from both direct and indirect negative consequences for reporting hazards.
Incorrect
Correct: Under Section 11(c) of the OSH Act, employers are prohibited from retaliating against employees for exercising their safety rights, which includes reporting hazards. A truly empowered workforce requires an environment where ‘adverse action’—which includes not just termination but also subtle changes in job duties or project assignments—is strictly prohibited and monitored. From an audit perspective, the absence of such protections renders the reporting control ineffective because it creates a ‘chilling effect’ on employee participation.
Incorrect: Peer-review systems can create social pressure and discourage individual reporting. Volume-based incentives may lead to the reporting of trivial issues to meet quotas rather than focusing on significant risks. Requiring project manager approval before a report is filed creates a conflict of interest and a barrier to reporting, as the manager may prioritize the timeline over safety, which contradicts the principle of empowering the individual worker.
Takeaway: Employee empowerment in safety is only effective when supported by a robust anti-retaliation framework that protects workers from both direct and indirect negative consequences for reporting hazards.
-
Question 6 of 10
6. Question
During a committee meeting at a private bank, a question arises about Rewarding safe behaviors as part of conflicts of interest. The discussion reveals that the bank’s internal audit team is evaluating a safety incentive program implemented for a multi-year headquarters renovation project. The program provides a quarterly financial reward to project managers who achieve a zero-accident milestone. However, the audit team observes that while reported accidents have decreased to zero, the number of first-aid cases and near-miss reports has also dropped to zero during the same period. What is the most significant risk identified by the auditor regarding this incentive structure?
Correct
Correct: OSHA guidance and safety management principles emphasize that incentive programs should reward leading indicators (proactive behaviors like reporting hazards or attending training) rather than lagging indicators (the absence of reported injuries). When rewards are tied strictly to zero-incident rates, it creates a culture of silence where workers and managers may hide injuries to protect their bonuses. This leads to suppressed reporting, which prevents the identification of root causes and can be considered a form of retaliation against workers who might otherwise report an injury.
Incorrect: Rewarding based on hours worked is not a regulatory requirement for safety bonuses; the focus should be on proactive safety participation. While self-certification of logs is a general audit concern, the specific risk related to ‘rewarding safe behaviors’ in an OSHA context is the reporting bias created by rate-based incentives. The hierarchy of controls refers to the methods used to eliminate or reduce hazards (like engineering or PPE) and is not the primary framework for evaluating the effectiveness of a behavioral incentive program.
Takeaway: Safety incentive programs should reward proactive safety participation and hazard identification rather than the mere absence of reported injuries to ensure accurate data and a healthy safety culture.
Incorrect
Correct: OSHA guidance and safety management principles emphasize that incentive programs should reward leading indicators (proactive behaviors like reporting hazards or attending training) rather than lagging indicators (the absence of reported injuries). When rewards are tied strictly to zero-incident rates, it creates a culture of silence where workers and managers may hide injuries to protect their bonuses. This leads to suppressed reporting, which prevents the identification of root causes and can be considered a form of retaliation against workers who might otherwise report an injury.
Incorrect: Rewarding based on hours worked is not a regulatory requirement for safety bonuses; the focus should be on proactive safety participation. While self-certification of logs is a general audit concern, the specific risk related to ‘rewarding safe behaviors’ in an OSHA context is the reporting bias created by rate-based incentives. The hierarchy of controls refers to the methods used to eliminate or reduce hazards (like engineering or PPE) and is not the primary framework for evaluating the effectiveness of a behavioral incentive program.
Takeaway: Safety incentive programs should reward proactive safety participation and hazard identification rather than the mere absence of reported injuries to ensure accurate data and a healthy safety culture.
-
Question 7 of 10
7. Question
What distinguishes Identifying systemic issues from related concepts for Occupational Health and Safety (OSHA) 10-Hour Construction (OSHA 10)? During an internal audit of a construction firm’s safety program, an auditor observes that while individual fall protection violations are being corrected when identified, the same types of violations recur monthly across different project teams. To address this as a systemic issue rather than an isolated hazard, which approach should the auditor prioritize?
Correct
Correct: Identifying systemic issues involves looking beyond the immediate physical hazard to the root causes within the management system. By evaluating organizational factors like resource allocation (budget) and procurement/contracting processes (subcontractor selection), the auditor addresses the framework that allows hazards to persist across the entire company, rather than just fixing one-off problems.
Incorrect: Conducting more frequent inspections focuses on hazard recognition and immediate remediation, which is necessary but does not address why the hazards keep occurring. Updating JHA templates is a specific administrative improvement that may help, but it is too narrow to be considered a systemic evaluation of the safety culture. Increasing individual reprimands focuses on behavioral consequences rather than the organizational failures that might be driving those behaviors, such as lack of equipment or unrealistic production schedules.
Takeaway: Systemic issue identification focuses on the root organizational failures and management system gaps that allow recurring hazards to exist across multiple sites or teams.
Incorrect
Correct: Identifying systemic issues involves looking beyond the immediate physical hazard to the root causes within the management system. By evaluating organizational factors like resource allocation (budget) and procurement/contracting processes (subcontractor selection), the auditor addresses the framework that allows hazards to persist across the entire company, rather than just fixing one-off problems.
Incorrect: Conducting more frequent inspections focuses on hazard recognition and immediate remediation, which is necessary but does not address why the hazards keep occurring. Updating JHA templates is a specific administrative improvement that may help, but it is too narrow to be considered a systemic evaluation of the safety culture. Increasing individual reprimands focuses on behavioral consequences rather than the organizational failures that might be driving those behaviors, such as lack of equipment or unrealistic production schedules.
Takeaway: Systemic issue identification focuses on the root organizational failures and management system gaps that allow recurring hazards to exist across multiple sites or teams.
-
Question 8 of 10
8. Question
Which approach is most appropriate when applying Selecting appropriate arc-rated clothing and equipment in a real-world setting? During an internal audit of a construction firm’s electrical safety program, the auditor evaluates the process for equipping workers performing maintenance on energized switchgear. To ensure compliance with safety standards and effective risk mitigation, the auditor should verify that the selection process follows which protocol?
Correct
Correct: Arc-rated (AR) clothing must be selected based on the potential incident energy (measured in cal/cm2) that a worker might be exposed to during an arc flash event. This requires a site-specific hazard analysis to ensure the Arc Thermal Performance Value (ATPV) or Energy Breakopen Threshold (Ebt) of the PPE is sufficient to prevent second-degree burns. This approach aligns with OSHA requirements and NFPA 70E standards for electrical safety in the workplace.
Incorrect: Using 100% cotton is insufficient because while cotton does not melt like synthetics, it can still ignite and continue to burn; it is not a substitute for arc-rated clothing. Selecting gear based solely on voltage is incorrect because incident energy is determined by fault current and the duration of the arc, not just the voltage level. Synthetic blends, such as polyester, are prohibited in arc-flash environments because they can melt into the skin, and temporary flame-retardant sprays do not meet the rigorous testing standards required for arc-rated equipment.
Takeaway: Effective arc-rated PPE selection requires matching the garment’s thermal rating to the calculated incident energy of the specific electrical hazard identified through a formal risk assessment.
Incorrect
Correct: Arc-rated (AR) clothing must be selected based on the potential incident energy (measured in cal/cm2) that a worker might be exposed to during an arc flash event. This requires a site-specific hazard analysis to ensure the Arc Thermal Performance Value (ATPV) or Energy Breakopen Threshold (Ebt) of the PPE is sufficient to prevent second-degree burns. This approach aligns with OSHA requirements and NFPA 70E standards for electrical safety in the workplace.
Incorrect: Using 100% cotton is insufficient because while cotton does not melt like synthetics, it can still ignite and continue to burn; it is not a substitute for arc-rated clothing. Selecting gear based solely on voltage is incorrect because incident energy is determined by fault current and the duration of the arc, not just the voltage level. Synthetic blends, such as polyester, are prohibited in arc-flash environments because they can melt into the skin, and temporary flame-retardant sprays do not meet the rigorous testing standards required for arc-rated equipment.
Takeaway: Effective arc-rated PPE selection requires matching the garment’s thermal rating to the calculated incident energy of the specific electrical hazard identified through a formal risk assessment.
-
Question 9 of 10
9. Question
Two proposed approaches to Verification of de-energization conflict. Which approach is more appropriate, and why? During an internal audit of a construction site’s safety management system, an auditor evaluates the lockout/tagout (LOTO) procedures used during the maintenance of a 480V electrical panel. The site supervisor suggests that verifying the disconnect switch is in the ‘off’ position and locked is sufficient. The safety officer insists that the authorized employee must also test the circuit with a calibrated voltmeter.
Correct
Correct: Verification is the most critical step in the lockout/tagout process. A visual check of a disconnect handle is unreliable because the internal blades of the switch could be welded closed or the linkage could be broken, leaving the circuit energized. Testing with a voltmeter provides definitive proof that no electrical energy is reaching the equipment, ensuring a zero-energy state.
Incorrect
Correct: Verification is the most critical step in the lockout/tagout process. A visual check of a disconnect handle is unreliable because the internal blades of the switch could be welded closed or the linkage could be broken, leaving the circuit energized. Testing with a voltmeter provides definitive proof that no electrical energy is reaching the equipment, ensuring a zero-energy state.
-
Question 10 of 10
10. Question
A transaction monitoring alert at a fund administrator has triggered regarding Assessing the stability of structures before demolition during risk appetite review. The alert details show that a portfolio company specializing in urban redevelopment failed to provide documentation for a structural integrity assessment prior to beginning a multi-story teardown. The internal audit team is now evaluating whether the project’s safety protocols align with regulatory requirements and the firm’s risk management framework. According to OSHA standards for demolition, which of the following actions is required before any demolition work begins to ensure the stability of the structure?
Correct
Correct: According to OSHA standard 29 CFR 1926.850(a), prior to permitting employees to start demolition operations, an engineering survey shall be made by a competent person of the structure to determine the condition of the framing, floors, and walls, and the possibility of unplanned collapse of any portion of the structure. This is a critical safety step to identify hazards related to structural integrity that may have been compromised by age, fire, or previous damage.
Incorrect: Verifying utilities and fencing is a standard safety procedure but does not fulfill the specific requirement for a structural stability assessment. Relying on original blueprints is insufficient because the current condition of the structure, including deterioration or unauthorized modifications, must be physically assessed. Obtaining permits and notifying OSHA are administrative and legal requirements that do not replace the technical necessity of a structural engineering survey.
Takeaway: OSHA requires a competent person to perform a formal engineering survey before demolition to assess structural stability and prevent accidental collapse.
Incorrect
Correct: According to OSHA standard 29 CFR 1926.850(a), prior to permitting employees to start demolition operations, an engineering survey shall be made by a competent person of the structure to determine the condition of the framing, floors, and walls, and the possibility of unplanned collapse of any portion of the structure. This is a critical safety step to identify hazards related to structural integrity that may have been compromised by age, fire, or previous damage.
Incorrect: Verifying utilities and fencing is a standard safety procedure but does not fulfill the specific requirement for a structural stability assessment. Relying on original blueprints is insufficient because the current condition of the structure, including deterioration or unauthorized modifications, must be physically assessed. Obtaining permits and notifying OSHA are administrative and legal requirements that do not replace the technical necessity of a structural engineering survey.
Takeaway: OSHA requires a competent person to perform a formal engineering survey before demolition to assess structural stability and prevent accidental collapse.