Free GAQM ISO-QMS-13485 Exam Questions

Question 1

During an ISO 13485:2016 audit, the Lead Auditor is reviewing the Supplier Quality Agreement between the medical device company and a contract manufacturer of a critical component. The Supplier Quality Agreement details the product specifications, quality requirements, and acceptance criteria. The Lead Auditor confirms there is evidence of recent performance data trending showing sustained compliance. However, the Lead Auditor discovers that the Supplier Quality Agreement does not define how the contract manufacturer must manage changes to its own suppliers, including sub-tier supplier changes. As a Lead Auditor, what is the MOST appropriate determination regarding the company's approach?

A : The company's approach is acceptable because the contract manufacturer is responsible for managing their own suppliers.

B : The company's approach is acceptable, provided the contract manufacturer is ISO 13485 certified.

C : The company's approach is noncompliant. The medical device company should have approval authority over the contract manufacturer's changes to sub-tier suppliers.

D : The company's approach is acceptable because of the evidence of recent performance data trending showing sustained compliance.

Answer: C

Question 2

During an ISO 13485:2016 audit, the Lead Auditor is reviewing the process for design transfer. The design transfer documentation includes detailed specifications, drawings, and manufacturing instructions. However, the documentation does not explicitly define the verification activities required to ensure the design is correctly translated into production. As a Lead Auditor, what should be your PRIMARY concern?

A : The lack of documented traceability between design inputs and design outputs.

B : The absence of a risk management plan specifically for the design transfer process.

C : The lack of defined verification activities to confirm successful design transfer to production.

D : The absence of evidence of review and approval of the design transfer documentation.

Answer: C

Question 3

A medical device company is undergoing an ISO 13485:2016 audit. The company manufactures a Class IIa medical device. The Lead Auditor discovers that the company's internal audit program is conducted by personnel who have received training on auditing techniques but lack specific technical expertise related to the processes they are auditing (e.g., design, manufacturing, sterilization). The company claims that the auditors' general understanding of the QMS is sufficient. What is the MOST appropriate action for the Lead Auditor to take?

A : Accept the company's rationale, as the personnel are trained auditors and possess a general understanding of the QMS requirements.

B : Issue a minor nonconformity, requiring the company to enhance the general QMS knowledge of the auditors.

C : Issue a major nonconformity, requiring the company to revise its internal audit program to ensure auditors possess the necessary technical expertise or involve technical experts in the audits.

D : Recommend that the company outsource all internal audits to a qualified third-party auditing firm.

Answer: C

Question 4

A medical device company is undergoing an ISO 13485:2016 audit. The company uses a contract manufacturer for a critical component of their Class II medical device. The Lead Auditor reviews the company's **documented procedure**, or lack thereof, for controlling the outsourced process. The quality agreement with the contract manufacturer clearly defines the product specifications, quality requirements, and acceptance criteria. The medical device company performs a thorough risk assessment of any changes notified to them. There is evidence of recent performance data trending showing sustained compliance, however, the quality agreement does not define how frequently the quality agreement itself is reviewed or updated. As a Lead Auditor, what is the MOST appropriate determination regarding the company's approach?

A : The Lead Auditor should determine that the lack of a defined review frequency may represent a significant nonconformity, requiring corrective action.

B : The Lead Auditor should determine that the approach is acceptable because the ISO 13485:2016 standard doesn't explicitly state a specific frequency.

C : The Lead Auditor should determine that the lack of a defined review frequency could be a minor issue; however, the recent trend shows that performance data ensures sustained compliance. Sustained compliance is a good foundation, but a periodic review could improve the QMS.

D : The Lead Auditor should determine that the lack of a defined review frequency could be a potential area for improvement; however, the recent trend shows that performance data and clearly defined quality requirements and acceptance criteria ensure sustained compliance, therefore no corrective action is currently needed, but the area should be added to a preventative actions review at the next audit.

Answer: D

Question 5

A medical device company is undergoing an ISO 13485:2016 audit. They have a well-defined process for handling nonconforming product, which includes identification, segregation, review, and disposition. The company has clearly defined responsibilities for each step of the process. However, the Lead Auditor discovers that the procedure does not specify timeframes for completing each step, particularly the review and disposition of nonconforming product. What is the MOST significant concern for the Lead Auditor?

A : The lack of timeframes could lead to delays in addressing nonconformities, potentially resulting in the use of nonconforming product.

B : The nonconforming product may lose traceability to the production lot.

C : Without timeframes, the process becomes too rigid and inflexible, inhibiting the investigation of non-conformances.

D : The lack of defined responsibilities in the process, even with the lack of time frames, allows for a clear assignment of responsibilities.

Answer: A