MPJE: Multistate Pharmacy Jurisprudence Examination Quiz: Access Control
20 questions · exam conditions
0:00
Access ControlQuestion 1 of 20

A community pharmacy terminates a staff pharmacist who had an electronic access code and a physical key to the pharmacy. Which of the following actions must the pharmacy take immediately following the termination?

Notify the DEA that the pharmacist's access has been terminated.
Notify the state board of pharmacy that the pharmacist is no longer employed at this location.
Retain the access credentials for 30 days in case the pharmacist needs to retrieve personal items.
Revoke the pharmacist's electronic access code and retrieve or change physical access credentials to prevent unauthorized entry.
← Back to quizzes

MPJE: Multistate Pharmacy Jurisprudence Examination Quiz

MPJE: Multistate Pharmacy Jurisprudence Examination Quiz: Access Control

Practice Access Control in MPJE: Multistate Pharmacy Jurisprudence Examination with focused quiz questions that help you check what you know, review explanations, and build confidence with test-style prompts.

What this quiz covers

This quiz focuses on Access Control, giving you a quick way to practice the rules, question types, and explanations that matter most for MPJE: Multistate Pharmacy Jurisprudence Examination.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

All questions

Question 1

A community pharmacy terminates a staff pharmacist who had an electronic access code and a physical key to the pharmacy. Which of the following actions must the pharmacy take immediately following the termination?

  1. Notify the DEA that the pharmacist's access has been terminated.
  2. Notify the state board of pharmacy that the pharmacist is no longer employed at this location.
  3. Retain the access credentials for 30 days in case the pharmacist needs to retrieve personal items.
  4. Revoke the pharmacist's electronic access code and retrieve or change physical access credentials to prevent unauthorized entry. (correct answer)
Explanation: When an employee with pharmacy access is terminated, the pharmacy must immediately revoke electronic credentials and change physical locks or combinations if keys cannot be retrieved. Failing to do so leaves controlled substances and patient health information at risk of unauthorized access. A is incorrect because DEA notification is not required for routine employment termination; it is triggered only by confirmed theft, loss, or diversion. B is incorrect because ordinary employment separations do not require board notification. C is incorrect because retaining active credentials for a terminated employee is a security violation regardless of the reason for termination.

Question 2

In a state that licenses pharmacy interns and permits them to perform dispensing functions under pharmacist supervision, a licensed intern is working at a community pharmacy. The pharmacist on duty is temporarily in the consultation room with a patient. May the intern access the prescription dispensing area and begin preparing a non-controlled prescription while the pharmacist is in the consultation room?

  1. Yes, because the pharmacist is on the premises and immediately available, which satisfies the supervision requirement for a licensed intern under this state's pharmacy law. (correct answer)
  2. Yes, because a licensed intern has the same independent access rights as a licensed pharmacist.
  3. No, because an intern may never perform any dispensing tasks under any circumstances.
  4. No, because the intern may only access the dispensing area when the pharmacist is physically present in the same area.
Explanation: In a state that grants licensed pharmacy interns authority to perform dispensing tasks under pharmacist supervision, the supervision standard requires the pharmacist to be on the premises and immediately accessible -- not physically co-located. Because the pharmacist is on-site and reachable, the supervision requirement is met. B is incorrect because interns do not have the same independent authority as licensed pharmacists; their work must occur under supervision. C is incorrect because licensed interns in states authorizing this practice are specifically permitted to perform preparatory dispensing functions under pharmacist oversight. D is incorrect because on-premises availability -- not physical presence in the same room -- is the prevailing supervisory standard.

Question 3

A building maintenance worker needs to access the pharmacy's back room to repair a plumbing fixture, and no pharmacist is currently on duty. A pharmacy technician offers to escort the worker inside. Which of the following best describes the appropriate course of action?

  1. Allow the technician to escort the maintenance worker because the repair is urgent and the technician is a trained pharmacy employee.
  2. Reschedule the maintenance work for a time when a pharmacist can be present to supervise access to the pharmacy area. (correct answer)
  3. Allow unescorted access because maintenance workers are vetted by the building management company.
  4. Contact the pharmacy owner for verbal authorization and proceed with the technician escort once approval is received.
Explanation: Non-pharmacy personnel should not access the pharmacy's dispensing and storage areas unless a pharmacist is present. The pharmacist bears responsibility for access-control security, and this responsibility cannot be delegated to a technician for non-employee access to secured areas. A is incorrect because a technician's employment status does not grant authority to supervise non-employee access to controlled areas; that responsibility belongs to the pharmacist. C is incorrect because building management vetting does not satisfy the pharmacy's independent security obligations under state and federal law. D is incorrect because verbal owner authorization does not substitute for the required on-site pharmacist supervision during non-employee access.

Question 4

A pharmacy manager discovers that the access code for the controlled substance cabinet has been shared informally among all pharmacy staff, including technicians and front-end clerks. Which of the following best describes the compliance concern?

  1. This is acceptable because all staff members have undergone background checks as a condition of employment.
  2. This is acceptable as long as the PIC is aware of and approves the arrangement.
  3. This is a minor procedural issue that does not rise to the level of a regulatory violation.
  4. This is a violation of controlled substance security requirements because access must be restricted to authorized personnel only. (correct answer)
Explanation: DEA regulations (21 CFR 1301.72) require that access to controlled substances be restricted to authorized employees. Sharing the access code with all staff -- including front-end clerks who are not authorized to handle controlled substances -- violates federal physical security requirements. A is incorrect because background checks establish employment eligibility but do not automatically authorize all employees to access controlled substance storage. B is incorrect because PIC awareness of a non-compliant practice does not convert that practice into a compliant one. C is incorrect because unrestricted access to controlled substance storage is a substantive DEA security violation with potential enforcement consequences, not a minor procedural issue.

Question 5

A retail pharmacy uses an electronic dispensing system that automatically generates a record of each controlled substance prescription dispensed, including the prescriber, patient, drug, quantity, and dispensing pharmacist's ID. How long must these electronic dispensing records be retained under DEA regulations?

  1. At least two years, consistent with the DEA minimum retention period for controlled substance records. (correct answer)
  2. At least five years, because electronic records are subject to a longer retention requirement than paper records.
  3. At least one year, because electronic dispensing records are considered operational rather than regulatory records.
  4. There is no federally mandated retention period for electronic controlled substance dispensing records.
Explanation: DEA regulations (21 CFR 1304.04) require controlled substance records -- including dispensing records generated by automated pharmacy systems -- to be maintained for a minimum of two years. Electronic format does not alter the retention requirement. B is incorrect because there is no extended retention period for electronic versus paper records under DEA rules; the two-year standard applies to both. C is incorrect because one year is below the federal minimum. D is incorrect because electronic controlled substance dispensing records are expressly subject to the DEA two-year retention requirement.

Question 6

A PIC wants to establish a compliant access-control policy for the controlled substance vault at a pharmacy employing two pharmacists, four technicians, and one licensed pharmacy intern. Which of the following policies best satisfies federal security requirements?

  1. Issue access credentials to all licensed pharmacy employees, including the intern, because all hold state-issued credentials.
  2. Issue access credentials only to pharmacists and technicians with documented need, logging all entries. (correct answer)
  3. Issue access credentials to all employees who complete the pharmacy's internal controlled substance training program.
  4. Allow technicians vault access during staffed hours and restrict access to pharmacists only during after-hours entry.
Explanation: DEA security regulations require that controlled substance storage be accessible only to authorized employees -- those whose job functions require access and who are designated as authorized under the pharmacy's policies and applicable law. This performance-based standard does not limit vault access to pharmacists alone; technicians and other personnel may be authorized based on role, scope, and the pharmacy's documented access-control policy. All access must be logged with identifying information to create an auditable trail. A is incorrect because state credentials alone do not determine access authorization; job function and documented need also apply. C is incorrect because internal training completion is not a substitute for proper regulatory authorization. D is incorrect because imposing a pharmacist-only restriction for after-hours access is not required by DEA regulations, which focus on authorized personnel rather than licensure category.

Question 7

A newly hired PIC discovers that the previous PIC had issued a key to the controlled substance vault to a senior technician as recognition for years of service. The current PIC believes this arrangement violates access-control requirements. Which of the following actions should the current PIC take?

  1. Retrieve the key from the technician immediately, update the access-control policy, and conduct an inventory to confirm no discrepancies. (correct answer)
  2. Allow the arrangement to continue because the previous PIC made the decision and it is not appropriate to override a prior management choice.
  3. Report the previous PIC to the DEA for having authorized the arrangement as the first corrective step.
  4. Consult the pharmacy owner before taking action because the PIC does not have authority to change key assignments unilaterally.
Explanation: The current PIC has the authority and obligation to correct access-control irregularities. The concern here is not that a technician can never hold vault credentials -- DEA regulations do not categorically prohibit authorized technician access -- but that this key was issued informally as recognition rather than through a proper authorization process tied to the technician's job function and the pharmacy's access-control policy. The correct response is to retrieve the key, establish a proper authorization framework, and conduct an inventory to verify CS integrity. B is incorrect because prior management decisions do not insulate ongoing access-control irregularities from correction. C is incorrect because DEA reporting is not the appropriate first step; internal correction through proper authorization procedures takes priority. D is incorrect because the PIC holds direct accountability for pharmacy compliance and has the authority to take corrective action without first deferring to the owner.

Question 8

A health system operates a central pharmacy that remotely verifies medication orders for a satellite pharmacy under a shared-services arrangement. Which of the following access-control considerations is most important for this arrangement?

  1. The satellite pharmacy must have a pharmacist physically present at all times because remote verification is not permitted under federal law.
  2. The central pharmacy pharmacist must hold a separate DEA registration for the satellite location in order to access its dispensing records remotely.
  3. The arrangement must include controls ensuring that only authorized personnel access medication records and that all remote access is logged and auditable. (correct answer)
  4. Remote access to the satellite pharmacy's dispensing system constitutes unauthorized access unless the DEA approves the arrangement in writing.
Explanation: Shared-services pharmacy arrangements are recognized under most state pharmacy laws but must include robust access controls. The arrangement must ensure that only authorized users can access records, that all access is logged, and that the audit trail satisfies both DEA recordkeeping requirements and state board compliance standards. A is incorrect because remote pharmacist verification from a central pharmacy is an accepted model under many state shared-services statutes. B is incorrect because DEA registration is tied to physical locations where controlled substances are stored and dispensed, not to remote software access for order verification. D is incorrect because DEA written approval is not required for shared-services arrangements; these are governed by state pharmacy law and the DEA registration requirements for each physical location.

Question 9

During a DEA inspection, an inspector finds that the pharmacy's Schedule II controlled substance records show approximately 400 dosage units reflected in DEA Form 222 purchase records that cannot be reconciled with dispensing records or current inventory counts. The PIC states he was unaware of any discrepancy. Which of the following best characterizes this situation?

  1. This indicates a significant unresolved discrepancy, requiring DEA Form 106 filing and potential investigation due to PIC's supervisory failure. (correct answer)
  2. This is a recordkeeping deficiency only, and no further regulatory action is warranted unless the missing units are physically located.
  3. The PIC bears no personal responsibility because the discrepancy resulted from a dispensing system error.
  4. The discrepancy must be reported to the state board of pharmacy within 72 hours using the board's incident reporting form.
Explanation: An unresolved discrepancy between DEA Form 222 purchase records and dispensing records or inventory for Schedule II controlled substances represents a serious compliance failure with potential diversion implications. The PIC's supervisory responsibilities include ensuring that CS records are accurate and that discrepancies are identified and investigated promptly. If the investigation confirms theft or significant loss, DEA Form 106 must be filed. A correctly identifies both the compliance failure and the likely regulatory consequence. B is incorrect because a significant unreconciled shortage is a potential controlled substance loss requiring notification, not merely a recordkeeping deficiency. C is incorrect because the PIC's supervisory obligations include ensuring recordkeeping accuracy; ignorance of the failure does not eliminate accountability. D is incorrect because the DEA -- not the state board -- is the primary authority for controlled substance diversion concerns, and no universal 72-hour state board reporting requirement of this type exists under federal law.

Question 10

In a state that permits pharmacy technicians to count and prepare controlled substance prescriptions under pharmacist supervision, a pharmacist steps away from the dispensing bench to assist a patient in the waiting area. While the pharmacist is in the waiting area, a technician begins counting a Schedule III controlled substance at the dispensing bench. Which of the following best describes this situation?

  1. The technician's action is prohibited because controlled substances may never be handled by a technician under any circumstances.
  2. The technician may perform this task as long as the pharmacist remains on the premises and is immediately accessible. (correct answer)
  3. The technician may complete the entire dispensing process, including final verification, without the pharmacist returning.
  4. The pharmacist must return to the dispensing area before the technician may touch the controlled substance.
Explanation: In states that authorize technicians to handle controlled substances, this activity is permitted under pharmacist supervision, which requires the pharmacist to be on the premises and immediately available -- not physically present at the same workstation. A is incorrect because technicians are permitted to handle controlled substances under appropriate supervision in states that authorize this practice. C is incorrect because technicians may not perform final verification of a prescription; that responsibility belongs to the pharmacist. D is incorrect because physical co-location is not required; on-premises availability is the standard in states that permit technician preparation of controlled substances.

Question 11

A pharmacy in a state that requires students to hold a state intern license before performing active dispensing activities accepts a second-year pharmacy student for an introductory pharmacy practice experience (IPPE). The student has not yet obtained a state intern license. Which of the following best describes the student's permitted access to the prescription dispensing area?

  1. The student may access the dispensing area without restrictions because educational supervision eliminates standard access-control requirements.
  2. The student may access all areas of the pharmacy because the preceptor pharmacist assumes full legal responsibility for the student's conduct.
  3. The student may not enter the dispensing area under any circumstances until a state intern license is obtained.
  4. The student's access should be limited to observation unless this state's pharmacy law specifically authorizes hands-on participation by unlicensed students under direct preceptor supervision. (correct answer)
Explanation: In a state requiring intern licensure before active dispensing participation, a pharmacy student who has not obtained a license does not have the legal authority to perform active dispensing activities. Access should be restricted to observation, with hands-on participation awaiting licensure unless state law explicitly permits limited activities for unlicensed students under direct preceptor supervision. A is incorrect because educational supervision does not override state licensure and access-control requirements. B is incorrect because preceptor assumption of responsibility does not expand an unlicensed student's legal scope of practice or access rights. C is incorrect as an absolute statement -- observation access may be permitted even without a license; it is active participation that requires licensure.

Question 12

A pharmacy's security alarm is triggered at 11 p.m. Police respond and find no signs of forced entry but discover that a rear door was left unlocked. The PIC is notified. What is the PIC's primary obligation at this point?

  1. File an incident report with the DEA within 24 hours describing the alarm activation.
  2. Notify the state board of pharmacy about the security event by the next business day.
  3. Conduct an immediate controlled substance inventory, secure the premises, and document the incident. (correct answer)
  4. Wait for the official police report before taking any action to avoid interfering with the investigation.
Explanation: A security event -- even without confirmed unauthorized entry -- requires the PIC to immediately verify controlled substance inventory integrity, secure the pharmacy, and document the circumstances. If inventory reveals a shortage, DEA Form 106 notification would then be required. A is incorrect because DEA notification is triggered by confirmed theft or significant loss, not by an alarm event alone. B is incorrect because board notification is not automatically required for an unsecured door absent confirmed theft or diversion. D is incorrect because waiting for a police report before conducting an inventory delays detection of any shortage, increasing the pharmacy's legal exposure.

Question 13

A delivery driver from a licensed wholesale distributor arrives to drop off a scheduled drug order and no pharmacist is currently on duty. A pharmacy technician offers to accept the delivery and sign the invoice. What is the appropriate action?

  1. Allow the technician to accept the delivery because the distributor is licensed and the order was pre-authorized.
  2. Have the delivery driver leave the order at the front counter with a note for the pharmacist.
  3. Delay acceptance of the delivery until a pharmacist is present to receive and verify the controlled substance order. (correct answer)
  4. Contact the PIC by phone and proceed with delivery acceptance based on verbal approval.
Explanation: Controlled substance deliveries require receipt by an individual who can ensure proper chain-of-custody documentation. With no pharmacist on duty, the appropriate action is to delay acceptance. Most state pharmacy laws and sound controlled substance security practice require pharmacist-level oversight when receiving controlled substance orders, and without a pharmacist present, accepting the delivery creates chain-of-custody and documentation risks. A is incorrect because distributor licensing does not transfer the pharmacy's responsibility for proper receipt procedures. B is incorrect because leaving controlled substances unattended at a counter creates security and documentation risks. D is incorrect because verbal phone authorization is not a recognized mechanism for delegating controlled substance receipt under most state laws or DEA practice standards.

Question 14

A pharmacist decides to enter her closed retail pharmacy at 2 a.m. in response to an urgent patient need for a medication. Which of the following steps is most critical from an access-control compliance standpoint?

  1. Obtain verbal approval from the pharmacy owner before entering the building.
  2. Notify the DEA before accessing the controlled substance storage area.
  3. Document the after-hours entry, the reason for access, and any medications accessed or dispensed. (correct answer)
  4. Have a second licensed pharmacist present during the entire after-hours visit.
Explanation: Documentation is the most appropriate action among these choices when a pharmacist enters the pharmacy after hours for a legitimate purpose. Maintaining a record of the date and time of entry, the reason for access, and any medications accessed or dispensed supports the pharmacy's access-control audit trail and satisfies most pharmacy security policies and applicable state board requirements. A is incorrect because owner approval, while advisable, is not a universally mandated legal prerequisite for after-hours access by a licensed pharmacist responding to an emergency. B is incorrect because DEA notification before after-hours entry is not required under these circumstances. D is incorrect because a second pharmacist witness is not generally required for after-hours access; documentation obligations must still be satisfied.

Question 15

A technician who knew the combination to the pharmacy's controlled substance safe resigns unexpectedly. The PIC is aware of the resignation but does not change the combination for two weeks. No controlled substance discrepancies are identified during that period. Which of the following best describes the PIC's compliance status?

  1. The PIC is compliant because no controlled substances were diverted during the two-week period.
  2. The PIC is compliant because the technician was not independently authorized to open the safe, making knowledge of the combination inconsequential.
  3. The PIC is compliant because two weeks is a reasonable transition period for updating access credentials.
  4. The PIC is non-compliant because access credentials must be changed upon an employee's departure to prevent potential unauthorized access. (correct answer)
Explanation: Access credentials -- including safe combinations -- must be changed when an employee with that knowledge departs. Waiting two weeks to change the combination is a security violation regardless of whether any diversion occurred during that time. A is incorrect because compliance is determined by adherence to required security procedures, not by outcomes; the absence of detected diversion does not retroactively validate non-compliant conduct. B is incorrect because knowledge of the combination constitutes a genuine security risk even if the technician was not independently authorized to access the safe. C is incorrect because there is no recognized reasonable transition period exception to the requirement to revoke access credentials upon an employee's departure.

Question 16

A pharmacy owner instructs the PIC to give a sales representative from a wholesale drug company an access code to enter the pharmacy after hours to restock OTC shelves without any staff present. The PIC objects to this arrangement. Which of the following best supports the PIC's concern?

  1. Granting a non-employee unsupervised after-hours access to the pharmacy creates security risks for controlled substances and patient health information and conflicts with the pharmacy's access-control obligations. (correct answer)
  2. Sales representatives are never permitted inside a pharmacy under any circumstances.
  3. The pharmacy owner has no authority to make access decisions because that authority belongs exclusively to the PIC.
  4. After-hours restocking is prohibited by DEA regulations regardless of who performs it.
Explanation: Allowing a non-employee unsupervised after-hours access to a pharmacy creates serious security risks, including the potential for controlled substance diversion and unauthorized access to patient health information. The PIC bears legal responsibility for access-control compliance and is correct to object to an arrangement that violates those obligations. B is incorrect because vendor and sales representative access is not categorically prohibited -- it must be supervised and appropriately controlled. C is incorrect because access decisions are a shared governance responsibility; the PIC does not have exclusive authority, though the PIC does bear compliance accountability. D is incorrect because DEA regulations do not prohibit after-hours restocking of non-controlled OTC products.

Question 17

A pharmacy's electronic access log shows that a badge belonging to a recently terminated technician was used to enter the controlled substance storage area three days after her last day of employment. What should the PIC do first?

  1. File a DEA Form 106 immediately to report the suspected theft of controlled substances.
  2. Conduct an immediate inventory of the controlled substance storage area to determine if any drugs are missing. (correct answer)
  3. Contact the former technician to request an explanation before taking any further action.
  4. Notify the pharmacy's liability insurance carrier before taking any other action.
Explanation: When unauthorized access to a controlled substance area is detected, the PIC's first obligation is to conduct an immediate inventory to determine whether any controlled substances are missing. This establishes the scope of any potential diversion and determines whether DEA Form 106 reporting is required. A is incorrect because DEA Form 106 is required for confirmed theft or significant loss -- the inventory must come first to make that determination. C is incorrect because contacting the former employee is not the first priority; securing the area and verifying inventory integrity must occur before any personnel inquiry. D is incorrect because insurance notification is a secondary concern and should not delay the controlled substance security response.

Question 18

A pharmacist-in-charge (PIC) is notified that a staff pharmacist entered the pharmacy after hours using her key to retrieve personal belongings but did not document the entry. What is the PIC's most appropriate response under the pharmacy's access-control policy?

  1. File a report with the DEA because after-hours access by a staff pharmacist is prohibited without prior approval.
  2. Ensure the after-hours entry is documented and review whether existing access policies were followed. (correct answer)
  3. Immediately revoke the staff pharmacist's access credentials and report her to the state board of pharmacy.
  4. Take no action because a licensed pharmacist is always authorized to access the pharmacy at any time.
Explanation: After-hours access by an authorized pharmacist is generally permissible but should be documented per pharmacy security policy. The PIC's appropriate response is to ensure the access event is recorded and that applicable policies were followed. The requirement to document access is typically grounded in state board rules and pharmacy policy rather than an express, universally mandated DEA regulation. A is incorrect because after-hours access by a licensed pharmacist is not categorically prohibited; the issue is the undocumented entry. C is incorrect because revoking credentials and reporting to the board are disproportionate responses to an undocumented entry absent evidence of misconduct. D is incorrect because sound access-control practice and most state board requirements call for documentation of all access events regardless of the employee's licensure status.

Question 19

A state board of pharmacy inspector requests the pharmacy's Schedule III through V controlled substance purchase invoices for the past two years. The pharmacy's records cover only the past 90 days because older invoices were discarded. Which of the following best describes the pharmacy's compliance status?

  1. The pharmacy is non-compliant because controlled substance purchase records must be retained for a minimum of two years under DEA regulations. (correct answer)
  2. The pharmacy is compliant because 90 days of records is sufficient for most routine board inspections.
  3. The pharmacy is non-compliant only if the inspector can demonstrate that an actual diversion occurred during the missing period.
  4. The pharmacy is compliant because purchase invoices are operational records not subject to the DEA minimum retention requirement.
Explanation: DEA regulations (21 CFR 1304.04) require controlled substance records -- including purchase invoices for Schedule III through V drugs -- to be maintained for a minimum of two years. Retaining only 90 days of records constitutes a clear recordkeeping violation. B is incorrect because sufficiency is defined by the legal minimum, not by inspection convenience. C is incorrect because a recordkeeping violation exists independently of whether diversion is proven. D is incorrect because purchase invoices for controlled substances are expressly required DEA records and are subject to the two-year retention minimum.

Question 20

A state board of pharmacy inspector informs a PIC that a newly enacted state regulation requires installation of a security camera covering the controlled substance dispensing area within 30 days. The PIC notes that no federal DEA regulation specifically requires cameras. Which of the following best describes the applicable legal standard?

  1. The DEA requirement preempts the state regulation because DEA has exclusive authority over controlled substance security standards.
  2. The state regulation applies and the pharmacy must comply because state boards of pharmacy may impose security requirements that exceed federal minimums. (correct answer)
  3. The pharmacy may choose which standard to follow because the state and federal requirements conflict.
  4. The state requirement is unenforceable because security camera installation falls outside the scope of board of pharmacy authority.
Explanation: State pharmacy boards may impose security requirements that go beyond federal DEA minimums, and pharmacies must comply with the stricter standard. Federal law establishes a floor, not a ceiling; state requirements may be more stringent. A is incorrect because DEA regulations establish minimum standards and do not preempt more protective state requirements. C is incorrect because there is no conflict -- the pharmacy must comply with both the federal minimum and any more stringent state requirement simultaneously. D is incorrect because state boards of pharmacy have broad authority to establish operational and security requirements for licensed pharmacies, including camera systems.