Questions 1–6: Hazards & Risk Identification
Question 1
An HR Manager conducts a facility walkthrough and notices that cluttered cables in a busy hallway present a tripping threat to employees. Under risk management standards, what does the cluttered cable situation represent?
A. A risk
B. A hazard
C. A secondary risk
D. A residual risk
Correct Answer: B
Why B is correct: A hazard is an intrinsic condition, substance, or situation that has the potential to cause harm or damage.
Explanation of Distractors:
A: A risk is the probability and potential severity of loss occurring from exposure to a hazard, not the physical condition itself.
C: A secondary risk is a new risk created directly as a result of implementing a risk control measure.
D: Residual risk is the remaining level of risk that exists after controls have been implemented.
Question 2
An HR Business Partner identifies three distinct workplace concerns: toxic chemical fumes in production, an outdated salary structure, and employee burnout from mandatory overtime. How should HR classify the toxic chemical fumes?
A. An operational risk
B. A health hazard
C. A secondary hazard
D. A strategic risk
Correct Answer: B
Why B is correct: Fumes are an environmental agent with the inherent potential to cause bodily illness or injury, making them a health hazard.
Explanation of Distractors:
A: Fumes themselves are the physical hazard; operational risk refers to the broader uncertainty in business operations and processes.
C: Secondary hazard is an incorrect term in standard risk terminology; secondary risks arise from control implementations.
D: Strategic risk relates to high-level corporate decisions, business model shifts, and market positioning.
Question 3
During an audit of a regional service center, HR uncovers that several line supervisors are not enforcing mandatory ear protection protocols. What type of hazard does this supervisor non-compliance represent?
A. A physical hazard
B. An administrative hazard
C. A behavioral hazard
D. A secondary hazard
Correct Answer: C
Why C is correct: Non-compliance driven by human actions, supervisory neglect, or unsafe behaviors is classified as a behavioral hazard.
Explanation of Distractors:
A: Physical hazards refer to environmental factors like high noise levels, extreme temperatures, or moving machinery.
B: Administrative hazard is not a standard risk classification; administrative controls are interventions used to manage hazards.
D: Secondary hazard is a non-standard term that confuses physical agents with secondary risks created by controls.
Question 4
An HR Manager reviews an industrial plant's safety log and notes high ambient noise levels near stamping machines. What is the distinction between the noise and the risk of hearing loss?
A. The noise is the risk, while hearing loss is the hazard.
B. The noise is the hazard, while hearing loss is the potential outcome.
C. The noise and hearing loss are both considered secondary risks.
D. The noise is a residual risk, while hearing loss is a hazard.
Correct Answer: B
Why B is correct: High noise is the source of harm (hazard), and hearing loss is the negative health impact or loss outcome resulting from exposure.
Explanation of Distractors:
A: Inverts standard risk definitions; hazards are the sources, and risks evaluate the likelihood/impact of outcomes.
C: Secondary risks arise only after implementing a control; ambient machine noise is a primary operational hazard.
D: Residual risk refers to leftover exposure post-control implementation, not the primary hazardous condition itself.
Question 5
An HR compliance team evaluates workplace threats and categorizes them into natural, technological, and human-caused categories. Which item represents a human-caused hazard?
A. A flash flood in a warehouse
B. A server hardware failure
C. Workplace violence by an employee
D. A regional power grid blackout
Correct Answer: C
Why C is correct: Workplace violence stems directly from human behavior, making it a human-caused hazard.
Explanation of Distractors:
A: Flash floods represent natural hazards caused by weather events.
B: Server hardware failures represent technological or physical equipment hazards.
D: Power grid blackouts represent infrastructure or utility technology hazards.
Question 6
An HR Director audits emergency exit routes and finds that inventory boxes are stored against emergency doors. How should HR document the inventory boxes in the risk register?
A. A hazard
B. A secondary risk
C. A residual risk
D. A risk control
Correct Answer: A
Why A is correct: Blocked exit doors are a physical condition that creates potential harm during an evacuation, defining a hazard.
Explanation of Distractors:
B: Secondary risk refers to new threats introduced by controls, not unaddressed physical blockages.
C: Residual risk is leftover exposure after controls are installed; blocked exits represent a primary uncontrolled hazard.
D: Risk controls are measures designed to eliminate or mitigate threats, whereas blocked exits exacerbate risk.
Questions 7–12: The Risk Matrix & Severity Scoring
Question 7
An HR professional uses a standard 5x5 risk matrix to evaluate corporate compliance gaps. What two core metrics form the axes of this matrix?
A. Cost and implementation time
B. Likelihood and impact
C. Frequency and velocity
D. Severity and tolerance
Correct Answer: B
Why B is correct: Standard risk matrices plot Likelihood (probability of occurrence) against Impact (severity of loss).
Explanation of Distractors:
A: Cost and implementation time relate to project management and resource budgeting during risk treatment.
C: Frequency is a component of likelihood, but velocity measures speed of onset rather than overall loss impact.
D: Tolerance is an organizational threshold used to prioritize risks, not a dimensional axis of the matrix itself.
Question 8
During a risk evaluation, HR assesses a potential legal claim with a "High" likelihood of occurrence but a "Very Low" financial impact. Where does this threat fall on the risk priority matrix?
A. Extreme Risk requiring immediate board escalation
B. Low-to-Medium Risk managed through standard controls
C. Unacceptable Risk requiring business closure
D. Secondary Risk requiring third-party indemnification
Correct Answer: B
Why B is correct: High likelihood combined with very low impact yields a low-to-medium risk score that can be managed through routine operational controls.
Explanation of Distractors:
A: Extreme risks require both high likelihood and high/catastrophic impact to justify board escalation.
C: Business closure is reserved for unmitigatable catastrophic risks that threaten enterprise survival.
D: Secondary risk is a concept related to control implementation, not a quadrant position on a primary risk matrix.
(This blog utilizes amazon.com affiliate links)
Question 9
An HR Director evaluates a potential workplace hazard that occurs once every ten years but would result in complete facility destruction and bankruptcy if it occurred. How should this hazard be categorized on a risk matrix?
A. Low Likelihood, High Impact
B. High Likelihood, Low Impact
C. High Likelihood, High Impact
D. Low Likelihood, Low Impact
Correct Answer: A
Why A is correct: A 10-year cycle reflects low probability (likelihood), while bankruptcy/facility destruction reflects catastrophic loss (impact).
Explanation of Distractors:
B: Incorrectly rates an infrequent event as high probability and catastrophic financial collapse as low impact.
C: Incorrectly rates an event occurring once a decade as having a high frequency of occurrence.
D: Incorrectly minimizes total financial collapse and bankruptcy to a low impact score.
Question 10
HR maps several identified organizational risks onto a risk matrix. What is the primary purpose of plotting risks on this matrix?
A. Eliminating the need for secondary risk controls
B. Prioritizing risks to guide resource allocation
C. Automatically transferring financial liability to insurers
D. Guaranteeing full statutory OSHA compliance
Correct Answer: B
Why B is correct: A risk matrix visually ranks risks by severity, allowing HR leadership to prioritize where time and capital should be spent first.
Explanation of Distractors:
A: Plotting risks on a matrix does not eliminate secondary risks created when controls are implemented.
C: Plotting a risk does not transfer liability; risk transfer requires executing legal contracts or buying insurance.
D: Visual mapping is an analytical exercise that does not inherently guarantee compliance without action.
Question 11
An HR team evaluates an IT security gap that could expose employee health records. The team scores Likelihood as 4 out of 5 and Impact as 5 out of 5. How should HR treat a risk scored in this top-right quadrant of the matrix?
A. Accept the risk without allocating funds.
B. Treat the risk immediately with high-priority controls.
C. Defer discussion to the next annual audit.
D. Classify the threat as a secondary risk.
Correct Answer: B
Why B is correct: Top-right quadrant risks (High Likelihood, High Impact) represent critical threats requiring immediate remediation and high-priority resources.
Explanation of Distractors:
A: Risk acceptance is appropriate only for low-impact, low-likelihood risks within acceptable tolerance limits.
C: Deferring critical risks leaves the organization exposed to severe regulatory fines and catastrophic loss.
D: High score position reflects primary risk magnitude, not whether the risk was created by a secondary control.
Question 12
When presenting a risk matrix to executive leadership, HR highlights risks located in the "Green" zone (Low Likelihood, Low Impact). What action is typically recommended for Green zone risks?
A. Immediate risk avoidance
B. Routine monitoring and acceptance
C. Executive board escalation
D. Mandatory insurance transfer
Correct Answer: B
Why B is correct: Green zone risks fall within standard risk tolerance levels and are managed through routine monitoring and risk acceptance.
Explanation of Distractors:
A: Avoidance is an expensive response reserved for severe, unacceptable risks that cannot be effectively mitigated.
C: Executive boards focus oversight on red-zone, high-impact enterprise risks rather than minor low-impact items.
D: Purchasing insurance for low-impact items is inefficient because premium costs exceed the risk's financial exposure.
Questions 13–18: Hazard Control & Hierarchy of Controls
Question 13
An HR Safety Manager wants to eliminate chemical exposure on an assembly line. Following NIOSH’s Hierarchy of Controls, which control level is considered the most effective?
A. Personal Protective Equipment (PPE)
B. Administrative Controls
C. Engineering Controls
D. Elimination
Correct Answer: D
Why D is correct: Elimination physically removes the hazard entirely and sits at the very top (most effective level) of the Hierarchy of Controls.
Explanation of Distractors:
A: PPE is at the bottom of the hierarchy because it relies heavily on user compliance and does not remove the hazard.
B: Administrative controls change how people work but leave the physical hazard in place.
C: Engineering controls isolate workers from hazards but are less effective than completely eliminating the hazard.
Question 14
A facility uses a toxic solvent to clean machine parts. HR works with engineering to replace the toxic solvent with a non-toxic, water-based cleaning solution. Which Hierarchy of Control strategy was used?
A. Elimination
B. Substitution
C. Engineering Control
D. Administrative Control
Correct Answer: B
Why B is correct: Substitution involves replacing a hazardous material, process, or equipment with a less hazardous one.
Explanation of Distractors:
A: Elimination would mean discontinuing the part-cleaning process altogether rather than changing the chemical used.
C: Engineering controls would involve building ventilation hoods or physical barriers around the solvent.
D: Administrative controls would involve limiting worker shift hours spent near the solvent.
Question 15
To reduce employee exposure to high noise levels in a stamping plant, HR installs soundproof acoustic enclosures around the noise-producing equipment. What level of hazard control does this represent?
A. Substitution
B. Engineering Control
C. Administrative Control
D. Personal Protective Equipment
Correct Answer: B
Why B is correct: Engineering controls isolate people from hazards by placing physical barriers or structural redesigns between workers and threats.
Explanation of Distractors:
A: Substitution would involve swapping the stamping machine for a fundamentally quieter production technology.
C: Administrative controls would involve rotating staff shifts so workers spend less time near noisy machines.
D: PPE would involve distributing earplugs or noise-canceling earmuffs directly to individual workers.
Question 16
An HR Director implements mandatory job rotation schedules so that warehouse workers spend no more than two hours per shift operating heavy machinery. Which type of hazard control is being applied?
A. Engineering Control
B. Administrative Control
C. Elimination
D. Substitution
Correct Answer: B
Why B is correct: Administrative controls alter workplace policies, schedules, procedures, or training to limit worker exposure duration to a hazard.
Explanation of Distractors:
A: Engineering controls modify physical machinery or environmental structures rather than work schedules.
C: Elimination would require getting rid of heavy machinery operations entirely.
D: Substitution would involve replacing heavy machinery with automated conveyor systems.
Question 17
An HR team equips field technicians with high-visibility vests, hard hats, and steel-toed boots. According to the Hierarchy of Controls, why is this strategy considered the least effective defense against hazards?
A. It is significantly more expensive than engineering controls.
B. It relies entirely on individual worker compliance and does not remove the hazard.
C. It requires federal OSHA approval prior to deployment.
D. It automatically creates severe secondary legal risks.
Correct Answer: B
Why B is correct: PPE is the last line of defense because the hazard remains in the environment, and protection fails if workers wear or use the equipment incorrectly.
Explanation of Distractors:
A: PPE is often less expensive upfront than major engineering redesigns, though it is less effective long-term.
C: Employers select compliant PPE without needing prior individualized federal approval from OSHA.
D: Equipping workers with PPE does not inherently generate severe secondary legal liability.
(This blog utilizes amazon.com affiliate links)
Question 18
An HR Manager reviews a proposal to address chemical fumes in a laboratory. The proposal suggests four controls. Which option follows the correct order from MOST effective to LEAST effective?
A. PPE -> Administrative Controls -> Engineering Controls -> Elimination
B. Substitution -> Engineering Controls -> Administrative Controls -> PPE
C. Administrative Controls -> Substitution -> PPE -> Engineering Controls
D. Engineering Controls -> Elimination -> PPE -> Administrative Controls
Correct Answer: B
Why B is correct: The standard Hierarchy of Controls order is Elimination, Substitution, Engineering Controls, Administrative Controls, and PPE.
Explanation of Distractors:
A: Inverts the hierarchy, placing the weakest control (PPE) first and the strongest (Elimination) last.
C: Mismatches the effectiveness levels by putting Administrative controls above Substitution and Engineering controls.
D: Incorrectly places Engineering controls ahead of Elimination and puts PPE above Administrative controls.
Questions 19–24: Secondary Risk & Control Evaluation
Question 19
HR implements a strict two-factor authentication (2FA) policy to mitigate cyber threats. However, the new policy causes employees to use personal cell phones on the factory floor, creating a distraction hazard near moving machinery. What does this distraction hazard represent?
A. Residual risk
B. Secondary risk
C. Unmitigated primary risk
D. Inherent risk
Correct Answer: B
Why B is correct: A secondary risk is a new risk created as a direct consequence of implementing a primary risk control.
Explanation of Distractors:
A: Residual risk is the remaining portion of the original cyber risk after controls are put in place.
C: Unmitigated primary risk refers to unaddressed elements of the original threat, not a brand-new operational hazard.
D: Inherent risk is the raw risk level that exists before any controls are introduced.
Question 20
To eliminate injury hazards associated with manual lifting, HR approves the installation of automated mechanical hoists. Months later, HR discovers that operators are suffering repetitive strain injuries from operating the hoist control pendants. What risk concept does the strain injury illustrate?
A. Secondary risk
B. Inherent risk
C. Hazard elimination
D. Risk acceptance
Correct Answer: A
Why A is correct: Introducing the hoist (a control for manual lifting) generated a new, secondary ergonomic risk (pendant strain).
Explanation of Distractors:
B: Inherent risk refers to the original manual lifting threat before hoists were introduced.
C: Hazard elimination means completely removing physical hazards without creating new exposure.
D: Risk acceptance means consciously deciding to retain a risk without applying controls.
Question 21
An HR department mandates that all job candidates undergo rigorous pre-employment psychological testing to lower workplace violence risk. The new testing process significantly increases time-to-fill, causing severe staffing shortages in critical operational roles. What type of risk has been introduced?
A. Primary risk
B. Secondary risk
C. Residual risk
D. Environmental risk
Correct Answer: B
Why B is correct: The staffing shortage (operational risk) was caused directly by implementing the screening test (a risk control).
Explanation of Distractors:
A: Primary risk refers to the original threat being addressed—in this case, workplace violence.
C: Residual risk is the leftover risk of workplace violence remaining after psychological testing is used.
D: Environmental risk relates to physical, natural, or outdoor working conditions.
Question 22
After installing physical guardrails around high-altitude walkways (an engineering control), HR notes that a minor fall risk still exists if employees climb onto the guardrails. What term describes this remaining fall exposure?
A. Inherent risk
B. Secondary risk
C. Residual risk
D. Avoided risk
Correct Answer: C
Why C is correct: Residual risk is the remaining level of risk that exists after primary risk controls have been implemented.
Explanation of Distractors:
A: Inherent risk is the initial level of risk before guardrails were installed.
B: A secondary risk would be a completely new category of threat introduced by the guardrail installation (e.g., snagging clothing).
D: Avoided risk refers to threat exposure that was eliminated by discontinuing an activity.
Question 23
Before approving a new risk control measure, an HR Director insists that the risk team perform a "secondary risk assessment." What is the primary purpose of this assessment?
A. Calculating the premium cost of commercial insurance policies
B. Identifying new threats that the proposed control itself might create
C. Measuring the original likelihood of the primary hazard
D. Satisfying federal OSHA annual reporting requirements
Correct Answer: B
Why B is correct: Secondary risk assessments evaluate proposed controls to ensure they do not introduce unforeseen hazards or operational bottlenecks.
Explanation of Distractors:
A: Premium calculations relate to risk transfer decisions rather than analyzing control side effects.
C: Measuring primary hazard likelihood occurs during the initial risk analysis step.
D: OSHA standards mandate hazard controls but do not require formal documentation titled "secondary risk assessment."
Question 24
An HR Manager introduces mandatory safety goggles to protect workers from flying debris. The goggles frequently fog up, causing workers to remove them or misread equipment displays. How should HR handle this secondary risk?
A. Accept the fogging issue and penalize workers who remove goggles.
B. Evaluate alternative controls, such as anti-fog coatings or ventilation.
C. Eliminate the primary safety goggle mandate immediately.
D. Reclassify the fogging issue as an inherent risk.
Correct Answer: B
Why B is correct: When a control creates a secondary risk (fogging/visibility issues), HR should adjust or upgrade the control to resolve the side effect.
Explanation of Distractors:
A: Penalizing workers ignores a legitimate safety control flaw that creates a new hazard.
C: Removing eye protection leaves workers completely exposed to the primary flying debris hazard.
D: Reclassifying terms does not eliminate the physical visibility hazard created by the goggles.
Questions 25–30: Integrated Risk Control Strategies
Question 25
An HR Director oversees a comprehensive workplace safety audit. Which option represents an Administrative Control paired with a Personal Protective Equipment (PPE) control?
A. Redesigning machinery guards and issuing safety glasses
B. Rotating employee work shifts and issuing respirators
C. Substituting non-toxic cleaning chemicals and building exhaust hoods
D. Eliminating high-voltage equipment and conducting safety briefings
Correct Answer: B
Why B is correct: Shift rotation is an administrative policy control, and issuing respirators is a PPE control.
Explanation of Distractors:
A: Redesigning machinery guards is an engineering control, paired with PPE (glasses).
C: Substituting chemicals is substitution, paired with an engineering control (exhaust hoods).
D: Eliminating equipment is elimination, paired with an administrative control (briefings).
(This blog utilizes amazon.com affiliate links)
Question 26
An organization wants to address employee burnout caused by high call volumes in a customer contact center. HR recommends hired contractors to handle peak call times and automated self-service portals. Which risk control approach is demonstrated?
A. Combining risk transfer and engineering controls
B. Relying exclusively on personal protective equipment
C. Applying hazard elimination without secondary review
D. Utilizing administrative controls exclusively
Correct Answer: A
Why A is correct: Outsourcing peak call volume to contractors transfers operational burden, while automated portals act as technology/engineering controls.
Explanation of Distractors:
B: PPE applies to physical safety hazards, not workload or burnout risks.
C: Automated self-service portals mitigate workload but do not eliminate customer service operations entirely.
D: Tech portals and third-party contractor arrangements go beyond internal administrative scheduling policies.
Question 27
An HR compliance audit reveals that an outdated payroll system exposes employee bank details to unauthorized internal access. HR decides to restrict system access permissions based on employee role and encrypt the payroll database. How should these controls be classified?
A. Role access is an administrative control; encryption is a technical/engineering control.
B. Role access is a substitution control; encryption is an elimination control.
C. Role access is PPE; encryption is an administrative control.
D. Role access is elimination; encryption is substitution.
Correct Answer: A
Why A is correct: Setting access policies is an administrative control, while applying data encryption is a technical/engineering safeguard.
Explanation of Distractors:
B: Neither measure substitutes the database with a non-data system or eliminates payroll processing.
C: Access policies are administrative, but encryption is a technical security safeguard rather than administrative procedure or PPE.
D: The payroll database remains in use, meaning the hazard was controlled rather than eliminated or substituted.
Question 28
When developing a risk treatment plan, an HR Manager notes that the cost of installing a custom ventilation system ($500,000) far exceeds the total value of the assets protected and potential regulatory fines ($10,000). What is the most appropriate risk decision?
A. Install the ventilation system regardless of cost.
B. Explore lower-cost administrative or PPE controls that bring risk within tolerance.
C. Falsify the risk matrix to hide the chemical exposure hazard.
D. Immediately shut down the entire manufacturing facility.
Correct Answer: B
Why B is correct: Risk management balances control costs against risk impact; when an engineering control is cost-prohibitive, HR should implement cost-effective alternative controls.
Explanation of Distractors:
A: Implementing controls whose costs drastically outweigh the risk exposure violates sound risk management fiscal principles.
C: Falsifying audit logs is unethical and illegal under federal compliance standards.
D: Facility closure is an extreme measure that is disproportionate for a manageable exposure gap.
Question 29
An HR Director reviews a post-implementation audit of a new remote work policy. What key indicator demonstrates that the selected risk controls were effective?
A. An increase in secondary risk incidents
B. A reduction in primary risk impact/likelihood without unacceptable secondary risks
C. Complete removal of all operational hazards across the entire enterprise
D. An immediate reduction in annual insurance premium expenditures
Correct Answer: B
Why B is correct: Effective controls lower the likelihood or impact of the targeted primary risk while keeping new secondary risks within acceptable bounds.
Explanation of Distractors:
A: Increasing secondary risks indicates that the control introduced new operational problems.
C: Controls target specific risks; expecting complete removal of all enterprise hazards is unrealistic.
D: Insurance premiums depend on market factors and claims history over time, not immediate policy updates.
Question 30
During an executive presentation, an HR leader explains why hazard controls must be reviewed periodically even if no safety incidents have occurred. What is the strongest rationale?
A. Periodic reviews ensure compliance with internal policy and catch evolving hazards.
B. OSHA requires daily written re-certification of all workplace risk controls.
C. Periodic reviews automatically eliminate all residual risks.
D. Insurance carriers cancel policies if controls are audited annually.
Correct Answer: A
Why A is correct: Work environments, technologies, and regulations change over time; periodic reviews ensure existing controls remain effective against emerging hazards.
Explanation of Distractors:
B: Federal OSHA regulations require regular safety programs, but not daily written re-certification of all controls.
C: Auditing controls does not eliminate residual risk; it merely measures and verifies current exposure levels.
D: Insurance underwriters encourage or mandate periodic safety audits rather than canceling policies because of them.
No comments:
Post a Comment