Everything the adaptive question bank can teach and test in Food Safety Management, from foundations through advanced practice. Work through it in order, or start practicing and let the questions find your level.
Three routes to harm needing three different controls: living organisms are controlled by time and temperature, chemicals by separation and labeling, physical objects by exclusion. Identifying the type selects the control.
Each pathogen has characteristic foods and routes, so knowing the pairing tells you which step in your own process is the one that matters for it.
Where the organism produces a heat-stable toxin, cooking kills the bacteria and leaves the toxin behind. Prevention has to happen before the toxin forms, which means temperature control earlier.
Bacteria multiply in food while viruses do not — they are transferred, usually from a person, and a very small dose suffices. That is why the control for one is temperature and for the other is hygiene.
Six conditions support growth, and removing any one of them slows or stops it. Most controls in the whole discipline are an attack on one of the six.
These foods support rapid growth, so they are the ones time and temperature rules exist for. Classifying a food correctly decides which rules apply to it at all.
Cross-contact transfers the protein itself, so it is not reduced by cooking and is a different problem from microbial cross-contamination. The two words are not interchangeable.
A smaller dose causes illness and the consequences are more severe, so several ordinary practices become prohibited rather than discouraged when serving these groups.
One arises from temperature abuse after harvest and the other is present in the fish from its diet. Only the first is preventable by handling, which is why the distinction matters operationally.
B. Personal hygiene & health
The scrub is what removes organisms mechanically, so duration and friction matter more than water temperature. A dedicated sink exists so the act cannot contaminate food or equipment.
Gloves are a barrier that becomes contaminated exactly as hands do, so they are changed at the same moments hands would be washed. They do not replace handwashing.
The decision grid maps a symptom or diagnosis to exclusion or restriction, and it becomes stricter where a vulnerable population is served. It is a lookup, not a judgment call.
The policy only works if employees report, which is why reporting duties and return criteria are written down and agreed in advance rather than decided during an incident.
Both are reservoirs that also physically interfere with handwashing, so the rules address contamination and cleanability together.
Eating and drinking move hands to and from the mouth, so designated areas separate that from food handling. The limited beverage allowance exists to keep staff hydrated without that transfer.
C. Time & temperature control
Growth is possible across the band and fastest in its middle, so total time spent there is what accumulates risk. It is cumulative across every step, not reset by each one.
Targets differ because the hazard differs: surface organisms on whole muscle, organisms mixed throughout ground product, and more resistant organisms in poultry. The ladder follows the biology.
The first stage is shorter because growth is fastest at the upper end of the range, so most of the risk sits in the first part of the descent. Two stages target the dangerous part.
Cooling rate depends on surface area and airflow, so depth is the dominant variable. A deep covered container insulates the product and cools it slowest of all.
Reheating must be rapid because the food passes back through the growth range, and a holding unit cannot supply the energy to do it quickly enough.
Holding maintains a temperature rather than achieving one, so food must arrive already at target. Checks on a schedule exist because drift is gradual and invisible.
Using time alone abandons temperature control deliberately, so it requires a written procedure, marking, and discarding at the limit. It is a documented substitution, not an exemption.
Each approved method keeps the outer surface out of the growth range while the center thaws. Room-temperature thawing fails exactly there, at the surface, where the outside sits warm for hours.
An uncalibrated thermometer produces confident wrong numbers, and placement decides whether you measured the coldest part. Both are more common failures than the device being broken.
The rule addresses an organism that grows slowly at refrigeration temperature, so the limit is about accumulated time rather than spoilage. Food can be within the limit and unsafe, or past it and appear fine.
D. Cross-contamination & flow of food
Receiving is the last point at which a problem can be refused rather than owned, so checks happen before the product is accepted and moved.
Ordering by final cook temperature means anything that drips lands on something that will be cooked hotter, so a drip cannot carry a surviving hazard downward.
Labeling makes age visible and rotation acts on it; without the label, rotation is guesswork and the oldest product is the one least likely to be found.
Separation by time or space prevents transfer from raw to ready-to-eat, and color coding makes the rule visible rather than remembered.
Small batches limit how long any portion sits out, so the control is about exposure time rather than working faster. Returning product to temperature promptly is the other half.
Service is where food is exposed to customers, so the controls address handling, barriers and the prohibition on re-serving what has left your control.
Pooling combines many eggs so one contaminated egg reaches every portion, which is why pasteurised substitution is required where the population is vulnerable.
E. Cleaning & sanitizing
Cleaning removes the soil that would otherwise shield organisms from the sanitizer, so sanitizing an uncleaned surface accomplishes very little. The order is not interchangeable.
Each compartment does one job and the sequence ends with air drying, because a towel reintroduces what the sanitizer just removed.
Concentration, temperature and contact time trade against each other, so changing one without the others moves the result. Too strong is a chemical hazard rather than better sanitizing.
One machine type sanitizes with heat and the other with chemical, so the check differs — a temperature reading versus a concentration measurement.
Surfaces in continuous use accumulate contamination over time, so cleaning is scheduled by elapsed time as well as by task change.
A cloth left on a counter becomes an incubator and then a distribution mechanism, which is why storage in solution and separation by use are both required.
Labeling, separation and storing below food address the two ways chemicals reach food: being mistaken for something else, and falling or spilling into it.
F. Facilities, pests & equipment
Potable supply can be contaminated by backflow from equipment, so the protection is a physical break or a device on every connection that could reverse.
A sink that is inconvenient or unstocked is not used, so location and stocking are the requirement rather than the presence of plumbing.
Smooth, nonabsorbent and cleanable surfaces can actually be sanitized; a porous or pitted one cannot, whatever is applied to it.
Waste handling addresses pests and odor, and cross-connection is where waste can reach the supply — two hazards in the same system.
Denying entry, food and shelter removes the reason pests stay, which is why sanitation is the primary control and treatment the secondary one.
Adequate light makes soil visible so it can be cleaned, and shatter protection keeps glass out of food. Both are about what people can and cannot see.
G. Management systems & regulation
Managing the known risk factors in advance is different from correcting violations found at inspection, and the second is a reactive substitute for the first.
Seven principles form a loop from identifying hazards to verifying the system works, and each depends on the ones before it being done properly.
Where the process itself is the control rather than a temperature, the regulator requires a documented plan in advance — because nothing visible would reveal a failure.
Someone must be accountable and able to demonstrate knowledge on the spot, which is why the requirement is about capability rather than a title.
Training sets the expectation, monitoring establishes whether it is being met, and corrective action closes the loop. Any one of the three alone achieves little.
An inspection samples conditions at one moment, so its value is in the follow-up and the pattern across visits rather than the single score.
Response steps are defined in advance because an outbreak or recall leaves no time to design a process, and the first hours decide the scope.
Disclosure names which item is raw or undercooked and the reminder states the risk; both are required because either alone leaves the customer unable to decide.
H. Food Code Chapter 1 — purpose, scope & the definitions that drive every rule
The model has no force until a jurisdiction adopts it, and adoption is frequently partial or of an older edition. The enforceable text is always the local one.
Scope decides whether the rules apply at all, and the exclusions are specific rather than general — which is why an operation can look like a restaurant and sit outside.
The definition is what triggers the no-bare-hand rule, so classifying a food as ready-to-eat is a decision with immediate operational consequences.
Status is determined by measurable properties rather than by whether a food seems perishable, which is why intuition misclassifies cooked rice and cut melon.
Below a threshold acidity most pathogens cannot grow, which is the mechanism behind pickling and behind deliberately acidifying a food to change its classification.
Growth needs available water rather than total water, so drying, salting and sugaring all work by binding it. That is why shelf-stable foods can still feel moist.
The two properties interact, so a food can be safe on the combination while failing either alone. Where the table does not settle it, a documented assessment does.
Surfaces that food splashes onto are treated as contact surfaces because contamination travels back, which is why the category is broader than what food rests on.
Defining the population is what activates the tightened rules, so knowing whether you serve one is a prerequisite to knowing which rules you are under.
The tiers rank how directly an item relates to illness, and correction deadlines follow the tier. It is a triage scheme rather than a severity label.
Three defined roles carry different duties, so an obligation attaches to the role rather than to the person — which matters when staffing changes mid-shift.
I. Chapter 2 — management, personnel & the employee health program
Presence during all operating hours means physically there, because the role is continuous supervision rather than availability by phone.
Certification evidences knowledge at a point in time; it does not substitute for the supervision duties, which are performed rather than held.
Three routes exist, and the first is simply having no priority violations — which means a well-run operation demonstrates knowledge by its own condition.
The duties are monitoring activities as they happen, so the role is on the floor. Completing paperwork afterwards is not the same activity.
It is a two-sided commitment: employees report and management acts. A policy where reporting leads to loss of shifts produces silence instead.
These are singled out because they transmit readily through food and cause serious illness, so a diagnosis triggers a defined response rather than a judgment.
It is handled separately from the typhoid form because the transmission risk and the return criteria differ, despite the shared organism name.
Exclusion removes the person from the premises entirely, which is reserved for situations where presence alone is a risk.
Restriction keeps the person working away from exposed food and clean equipment, which is the proportionate response where the risk is contact rather than presence.
Several responses escalate one step when the population is vulnerable, so the same symptom produces a different decision depending on who is served.
Return depends on defined intervals and sometimes documentation or approval, so it is not the employee's or the manager's judgment to make.
Each step does something distinct, and the scrub is where organisms are physically removed. Skipping the dry leaves hands that recontaminate on the next surface.
Washing in the restroom addresses the heaviest contamination, and washing again in the food area addresses what was picked up between the two. Each covers a different exposure.
An antiseptic reduces what remains after washing; applied to unwashed hands it acts on soil rather than skin, which is why it never substitutes.
Nails harbor organisms that handwashing reaches poorly, and coatings can chip into food — two separate hazards addressed by one rule.
Restraints address hair as a physical contaminant and also stop the hand-to-hair-to-food loop, which is the larger of the two effects.
Clothing accumulates contamination through the shift, and removing the apron on leaving prevents carrying it to the restroom and back.
The alternative route exists and is narrow, requiring written procedures, training and records — so it is an approved system rather than a permission.
J. Chapter 3 — sources, receiving & the condition of incoming food
An approved source is one subject to inspection, which is what makes the food's history knowable. Home-prepared food has no such history, whatever its actual quality.
Inspecting at the dock is the last moment refusal is possible, and checking the vehicle as well as the product catches problems the product does not yet show.
Each criterion indicates a specific failure — temperature abuse, compromised packaging, thawing and refreezing, or pests — so rejection is evidence-based rather than a judgment of quality.
Tags identify the harvest lot, and retaining them in order is what allows an illness to be traced back to a specific harvest area.
These are received alive because a dead shellfish has been decomposing for an unknown period, and the shell gives no indication of how long.
Freezing to defined parameters destroys parasites, which is why fish served raw must be frozen or come from an exempt source. It addresses parasites only, not bacteria.
Certification traces product to a dealer operating under a monitored harvest program, which is the mechanism behind the tags.
Untreated juice carries a real risk, so it is either processed under a control plan or labeled so the customer can decide. On-premises squeezing has its own rules.
Receiving temperature and shell condition both matter because the hazard can be inside an intact egg, which is why substitution is required for vulnerable populations.
Pasteurisation is the kill step, and raw milk has none — which is why the prohibition is categorical rather than dependent on the producer's practices.
Wild-harvested product has no inspection history and, for mushrooms, an identification risk that is not recoverable after service.
Each defect indicates a compromised seal or spoilage, which is why the rejection is based on the container rather than on opening it to check.
Treating ice as a food follows from what it is: made from water, handled with utensils, and never reused once it has chilled a raw product.
K. Chapter 3 — cooking, cooling & specialized processes
Microwaves heat unevenly, so the higher target and the stirring, covering and standing steps exist to let temperature equalize before the food is considered cooked.
Lethality is a function of temperature AND time held, so a lower temperature sustained longer achieves the same reduction. The table encodes that trade.
Interrupting cooking leaves partially cooked food passing through the growth range twice, so the intervals are bounded and the procedure must be written in advance.
Plant food needs no kill step for a pathogen it does not carry; the target exists because holding it warm would otherwise permit growth.
One part identifies which item is affected and the other explains the risk, so a menu carrying only the asterisk has completed half the requirement.
Some settings may not honor the request at all, because the population served cannot safely accept the risk even when it is disclosed.
Removing oxygen suppresses the spoilage organisms that would otherwise warn you, while favoring two that do not — so the food can be dangerous and appear fine.
Here the process is the control rather than a final temperature, so nothing observable would reveal a failure. That is why a plan and approval are required in advance.
Curing agents are effective and toxic at higher concentrations, so approved limits are a safety boundary in both directions.
Deliberately changing a food's classification is a process control, so it requires measurement and documentation rather than a recipe followed by habit.
Sprouting conditions are ideal for growth, and washing removes soil and some surface contamination without being a kill step. Neither fact is intuitive from appearance.
Heat leaves through the surface, so depth and airflow dominate. Lowering the refrigerator setpoint barely helps a deep container and warms everything else.
Measuring at the center is the only place the slowest cooling shows, and checking on a schedule is what allows a corrective action while it is still possible.
Commercially processed ready-to-eat food has already had a validated kill step, so reheating it is about reaching holding temperature rather than achieving lethality.
The bound exists because slow reheating means a long pass through the growth range, and holding equipment cannot deliver heat fast enough to meet it.
Running water carries heat in and loose particles away, and the temperature limit keeps the thawed outer layer out of the growth range.
Freezing pauses growth and organisms resume on thawing, so frozen storage buys time rather than safety. The parasite case is the defined exception.
The decision rests on accumulated time and temperature rather than on how the food looks, because the organisms that matter produce no visible change.
Anything that left your control may have been handled, so only intact, protected items may be re-served. Unwrapped items fail that test by definition.
L. Chapter 4 — equipment, utensils & warewashing
Each property addresses a failure mode: corrosion and absorption trap soil, and a rough surface shelters organisms from the sanitizer. Together they make a surface cleanable.
Acidic foods dissolve these metals into the food, so the restriction is about the combination rather than the metal alone. The backflow rule protects the same line.
Both are porous or reactive and are permitted only in narrow uses where the risk is understood, which is why they are exceptions rather than options.
A certification mark attests that the equipment meets a sanitation design standard, not that it is safe in use or suitable for your process.
Seams, crevices and sharp internal corners hold soil that cleaning cannot reach, so cleanability is designed in rather than achieved by effort.
Equipment must either seal to the surface or stand clear enough to clean under, because the gap between is exactly where debris and pests accumulate.
A unit thermometer shows the air temperature and a probe shows the food's, which are different questions. Scale increment and accuracy determine whether a reading can be trusted.
A bimetallic stem averages over its sensing length, so on a thin food most of that length is outside the product. A thin-tip probe measures where the food actually is.
Drainboards give clean and soiled items separate space, and keeping the prep sink separate prevents washing food where dishes were washed.
Mechanical action removes the soil, and detergent and temperature make that possible. Sanitizing works only on what the wash step already cleaned.
Heat sanitizing depends on the item reaching temperature, not the water, which is why immersion time and final-rinse temperature are specified.
Five variables change the outcome, so a correct concentration in water that is too cold or too hard can still fail. Testing the concentration checks only one of them.
Concentration cannot be judged by appearance or by how much was poured, so a kit matched to the chemical is what makes the control measurable.
The plate states the conditions the machine was designed to achieve, which is the reference a reading is checked against rather than a general standard.
A towel deposits whatever it carries onto a surface that was just sanitized, which undoes the step immediately before it.
Inverted, covered and off the floor addresses the three ways a clean item becomes contaminated again while waiting to be used.
These are designed for one use and cannot be effectively cleaned, so reuse is a hazard rather than a saving. Storage still has to protect them.
Each permitted method either keeps the utensil in the product, keeps it cold, or keeps it hot enough — the options all prevent it sitting at growth temperature.
Keeping the handle out of the product prevents transfer from the hand, which is why handle orientation is a rule rather than a preference.
Linens accumulate soil and moisture, so laundering frequency and separating soiled items address a reservoir that is easy to overlook.
M. Chapters 5 and 6 — water, plumbing, waste & physical facilities
Approval means the supply is monitored by someone, which is what makes it trustworthy. A private supply substitutes scheduled testing for that monitoring.
Capacity is sized to peak demand rather than average, because the moment hot water runs out is exactly the moment warewashing and handwashing both fail.
A physical gap of air cannot fail mechanically, which is what separates it from every device-based protection. Sizing it to the pipe diameter is what preserves the gap under flow.
These admit air to break a siphon, and the type depends on whether the line is under continuous pressure — which is why one cannot be substituted for the other.
Each example is an ordinary convenience that creates a path from contaminated water to the supply, which is why they are so common and so easy to miss.
One is caused by a pressure drop in the supply and the other by higher pressure downstream, so they arise in different circumstances and need different protection.
An air gap in the drain line prevents sewage backing up into equipment, which a direct connection would permit whenever the line surcharges.
An interceptor works by holding grease long enough to separate, so an unmaintained one passes grease downstream and eventually backs up into the building.
Every listed element removes an excuse not to wash — reachable, unobstructed, comfortable water, supplies present. Missing one reliably reduces handwashing.
Using it for anything else makes it unavailable and contaminates it, which converts the one fixture dedicated to hygiene into a hazard.
Mop water needs a disposal point that is neither a food sink nor a handwash sink, because it is the most heavily contaminated water in the building.
Ventilation, self-closing doors and stocking all address containment and the likelihood that handwashing actually happens after use.
It is treated as an imminent hazard because contamination is widespread and not localizable, so operations stop rather than being cleaned around.
Leak-proof and pest-proof containers address the two ways waste creates a problem: what escapes from it and what is attracted to it.
Cleanable surfaces and coving remove the places soil collects where cleaning cannot reach, which is a construction decision rather than a cleaning one.
Drains handle the water that cleaning produces, and mats lifted off the floor allow the floor beneath them to be cleaned at all.
Light levels are tiered by what happens in each area, because you cannot clean what you cannot see and prep surfaces demand the most.
A broken lamp over exposed food is a physical hazard that cannot be recovered from, so the protection is required wherever that exposure exists.
Ventilation removes grease and condensate that would otherwise deposit on surfaces, and unclean filters are simultaneously a fire risk and a sanitation one.
Personal items carry contamination from outside, so designating a place for them keeps that separate from food and equipment.
Separation prevents domestic activity, pets and personal storage reaching the food operation, which is why it is structural rather than procedural.
Animals are excluded as a contamination source, and each exception is narrow and defined rather than a matter of how well behaved an animal is.
Monitoring finds evidence before an infestation is visible, and reading the signs tells you what species and which entry point — which is what makes treatment effective.
N. Chapter 7 — poisonous or toxic materials
An unlabeled container is indistinguishable from any other liquid, which is how a chemical reaches food. The common name is required because a code means nothing to the person holding it.
Storing below food means a spill or leak cannot fall into it, which is the one failure mode separation alone does not prevent.
Limiting what is present limits what can be misused or mistaken, so the rule reduces the number of ways the other rules can fail.
Because they are registered pesticides, off-label use is a legal violation independently of whether it works — the label is the approved use.
Restriction to certified applicators reflects the hazard of the product, so application by staff is not a matter of following the instructions carefully.
Dilution, contact time and where it may be used are binding instructions, so deviating is both unsafe and unlawful even when the intent is to be more thorough.
Lubricant on a food-contact surface will reach food, so the only relevant question is whether the lubricant is intended to be eaten.
Personal medicines are chemicals brought in by staff, so they are stored where they cannot contaminate food — the same principle as any other chemical.
Combining common cleaning chemicals produces toxic gas quickly and in an enclosed space, which is why it is one of the most frequent serious kitchen injuries.
The response is to discard rather than to assess, because contamination cannot be judged by appearance and the dose is unknown.
The sheet states hazards, handling and first aid, so its value depends on staff being able to find the relevant section quickly rather than on it being on file.
O. Chapter 8 — compliance, enforcement & crisis response
The permit is the authorization to operate and carries conditions, so losing it stops the business — which is what gives the conditions force.
Reviewing plans before construction catches design problems while they are still cheap, because a non-cleanable layout cannot be fixed by procedure afterwards.
Right of entry and access to records is what makes inspection possible at all, so refusal is itself a violation rather than a delay.
Frequency follows risk, so the operations doing the most hazardous processes are seen most often. It allocates a limited inspection resource by consequence.
Deadlines follow the violation tier, so the same finding can require correction on the spot or on a schedule depending on how directly it relates to illness.
Each trigger removes a control the operation depends on — water, waste removal, refrigeration — so the hazard is the loss of a system rather than a specific contamination.
Stopping and notifying comes first, and reopening depends on verification rather than on the problem appearing resolved.
Recording details and preserving product keeps evidence available, and not interviewing alone protects both the investigation and the interviewer.
An epidemiological investigation needs information only the establishment holds, and cooperation shortens the period during which the source is unknown.
Segregating and labeling prevents the recalled product being used while the recall is processed, which is the step most often done last and needed first.
A written procedure is required because the organism is highly infectious, spreads through aerosol, and ordinary cleaning does not inactivate it.
Records are what makes managerial control visible to someone who was not there, so the documentation is the evidence rather than the activity.
P. HACCP, preventive controls & food defense
Basic practices must already be in place, because a plan that had to control every ordinary hazard would have a critical point at every step.
The filter is hazards reasonably likely to occur, which keeps the plan focused. Listing every conceivable hazard produces a document nobody can operate.
A critical point is the LAST step where control is still possible, which is why there are few of them and why identifying one wrongly leaves a hazard uncontrolled downstream.
A limit must be measurable during operation, so a criterion that can only be checked in a laboratory cannot serve as one however scientifically sound.
Specifying what, how, how often and who is what turns an intention into a check that actually happens. An unassigned check is nobody's.
Two things need correcting: the affected product and the process that produced it. Addressing only the product guarantees the deviation recurs.
One asks whether the plan is capable of controlling the hazard and the other whether it is being followed. A valid plan poorly executed fails the second.
Records are made at the time because their value is evidence that the check occurred. Filled in afterwards they record an intention, not an observation.
Confirming the diagram on the floor catches the steps that happen in practice and not on paper, which is where uncontrolled hazards usually live.
Retail groups menu items by their cook-and-hold pattern rather than analyzing each recipe, because the number of items makes the processing approach impractical.
It is a related framework with its own vocabulary and scope, so mapping one onto the other term for term produces confusion rather than clarity.
Where a hazard is controlled before the food arrives, verification of the supplier replaces a step you could perform yourself.
Knowing one step back and one step forward is what makes a recall narrow and fast; without it the only safe recall is the widest one.
Intentional adulteration is a different threat model from accidental contamination, because an adversary chooses the point of greatest effect rather than the most likely failure.
It spans labeling, storage, tools, cleaning and communication, because a break at any one of them reaches the guest. It is a system rather than a precaution.
Cross-contact transfers protein, which heat does not destroy, so cooking is not a remedy. That is the fundamental difference from microbial cross-contamination.
Repeating the request and verifying ingredients closes the loop, and guessing is the failure mode — because the consequence falls entirely on the guest.
Keentune is not affiliated with or endorsed by the organizations whose documentation informs these maps.
All exam, test, and product names and trademarks are the property of their respective owners and are used here for identification and reference only. Keentune is independent study practice — not affiliated with, authorized, or endorsed by any of these organizations.