MPJE: Multistate Pharmacy Jurisprudence Examination Quiz: Access Control Rules
20 questions · exam conditions
0:00
Access Control RulesQuestion 1 of 20

A state regulation requires all pharmacy employees with unsupervised access to controlled substance storage to pass a criminal background check before being granted that access. A newly hired technician has not yet received background check results when her first shift begins. How should the pharmacy proceed?

Allow access under direct pharmacist supervision with no further restrictions required.
Allow access because the background check requirement does not apply until the technician's 30-day probationary period ends.
Allow access because federal DEA regulations do not require background checks, and federal law preempts the state requirement.
Restrict the technician's unsupervised access to controlled substance storage areas until the background check is completed and reviewed.
← Back to quizzes

MPJE: Multistate Pharmacy Jurisprudence Examination Quiz

MPJE: Multistate Pharmacy Jurisprudence Examination Quiz: Access Control Rules

Practice Access Control Rules in MPJE: Multistate Pharmacy Jurisprudence Examination with focused quiz questions that help you check what you know, review explanations, and build confidence with test-style prompts.

What this quiz covers

This quiz focuses on Access Control Rules, giving you a quick way to practice the rules, question types, and explanations that matter most for MPJE: Multistate Pharmacy Jurisprudence Examination.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

All questions

Question 1

A state regulation requires all pharmacy employees with unsupervised access to controlled substance storage to pass a criminal background check before being granted that access. A newly hired technician has not yet received background check results when her first shift begins. How should the pharmacy proceed?

  1. Allow access under direct pharmacist supervision with no further restrictions required.
  2. Allow access because the background check requirement does not apply until the technician's 30-day probationary period ends.
  3. Allow access because federal DEA regulations do not require background checks, and federal law preempts the state requirement.
  4. Restrict the technician's unsupervised access to controlled substance storage areas until the background check is completed and reviewed. (correct answer)
Explanation: When a state regulation requires a cleared background check before granting unsupervised access to controlled substance storage, the pharmacy must satisfy that prerequisite before such access is granted. D correctly reflects that the state requirement must be met before the specific type of access it governs is permitted; the technician may work in non-controlled areas in the meantime. A is incorrect because allowing access under supervision does not satisfy the background check prerequisite for unsupervised access; supervision may be appropriate for some tasks but does not fulfill the credentialing requirement the regulation addresses. B is incorrect because there is no universal 30-day probationary period exception to background check prerequisites. C is incorrect because state boards may impose requirements exceeding federal minimums, and background check rules are a recognized state regulatory authority that is not preempted by federal law.

Question 2

A state board rule requires that any non-employee who enters the pharmacy's dispensing area must sign a visitor log. A repair technician enters the dispensing area, completes the repair, and leaves without signing the log. The PIC discovers this the next day. Which of the following best describes the pharmacy's compliance status and appropriate response?

  1. The pharmacy is non-compliant with the visitor log requirement; the PIC should document the incident, implement corrective measures, and reinforce the policy with staff. (correct answer)
  2. The pharmacy is compliant because visitor log requirements apply only to DEA inspectors and law enforcement personnel.
  3. The pharmacy is non-compliant, and the PIC must file an incident report with the DEA within 72 hours.
  4. The pharmacy is compliant because the repair technician was escorted, which satisfies the visitor log requirement.
Explanation: A state board visitor log requirement applies to non-employees entering the dispensing area; a repair technician falls within this rule. The missed entry is a compliance gap requiring documentation, corrective action, and staff reinforcement. A correctly identifies the violation and the appropriate response. B is incorrect because visitor log requirements are not limited to DEA inspectors; most state rules apply broadly to any non-employee in the dispensing area. C is incorrect because a missed visitor log entry does not trigger DEA reporting; that obligation arises from controlled substance theft or significant loss. D is incorrect because escort status and visitor log completion are separate requirements -- being escorted does not substitute for the log entry.

Question 3

A state pharmacy regulation requires that any contractor performing work inside the controlled substance storage area must be escorted by the pharmacist-in-charge. A PIC delegates the escort to a senior staff pharmacist. Which of the following best analyzes the PIC's compliance?

  1. The PIC is compliant because any licensed pharmacist may fulfill an escort requirement.
  2. The PIC is compliant because the escort is a ministerial task that may always be delegated.
  3. The PIC is non-compliant because only the PIC may authorize contractor access under all circumstances.
  4. The PIC's compliance depends on whether state regulation allows delegation to another pharmacist. (correct answer)
Explanation: Compliance depends on the specific language of the state regulation. Some regulations require the PIC personally; others require any licensed pharmacist escort. The PIC must review the regulation's exact language to determine whether personal performance is required or whether delegation to another licensed pharmacist is permissible. A is incorrect as an absolute statement because the regulation may specifically name the PIC rather than any pharmacist. B is incorrect because not all regulatory obligations may be delegated; the regulation's terms control whether delegation is permitted. C is incorrect as an absolute statement because not all escort regulations restrict the duty to the PIC alone; the question is what this particular regulation says.

Question 4

A hospital pharmacy rule restricts floor-stock controlled substance cabinets on nursing units to access by licensed nurses and physicians assigned to that unit. A nursing supervisor proposes allowing certified nursing assistants (CNAs) to access the cabinet during peak hours. Which of the following best applies?

  1. The proposal is permitted because CNAs are hospital employees and therefore authorized under DEA access rules.
  2. The proposal is permitted as long as CNAs are supervised by a licensed nurse during each retrieval.
  3. The proposal is non-compliant because access must be restricted to the categories defined by the applicable rule, and CNAs are not included in those categories. (correct answer)
  4. The proposal is permitted during daytime hours only, when licensed nursing staff are present on the unit.
Explanation: The hospital pharmacy rule restricts floor-stock controlled substance access to licensed nurses and physicians. CNAs are not within these defined authorized categories and may not access the cabinet regardless of supervision or time of day. Expanding those categories requires a formal rule change, not a supervisor's operational decision. A is incorrect because hospital employment status does not automatically confer controlled substance access authorization; the specific rule governs. B is incorrect because supervision by a licensed nurse does not expand a CNA's access authorization under the rule; supervision affects scope of practice but does not override the access-control category restriction. D is incorrect because the rule as stated does not contain a daytime exception; that distinction is fabricated.

Question 5

A state requires all non-pharmacist employees to hold a board-issued credential before accessing the dispensing area. A newly transferred technician holds a valid credential from another state but has not yet obtained a local credential; the application is pending. Which of the following best analyzes the pharmacy's options?

  1. The technician may not access the dispensing area until a local credential is obtained. (correct answer)
  2. The technician may access the dispensing area because a valid out-of-state credential satisfies the state requirement through reciprocity.
  3. The technician may access the dispensing area because a pending application constitutes provisional authorization.
  4. The technician may access the dispensing area if the PIC signs a written waiver acknowledging the credential gap.
Explanation: Most state access-control rules require the state-specific credential before dispensing area access is granted. A pending application does not constitute the credential itself, and an out-of-state credential does not automatically satisfy the local requirement unless the state has an explicit reciprocity provision, which this scenario does not indicate. The pharmacy must restrict the technician's access until local compliance is achieved. B is incorrect because reciprocity is not presumed; it must be explicitly established by the receiving state's statutes or rules. C is incorrect because a pending application means the credential has not yet been issued; authorization requires the credential, not merely the submission. D is incorrect because a PIC waiver is not a recognized mechanism for overriding a state board credentialing requirement.

Question 6

A new state regulation requires pharmacies to install an electronic access-logging system for all entries to controlled substance storage areas within 90 days of the regulation's effective date. A pharmacy currently uses a paper sign-in log. Which of the following best describes the pharmacy's obligations?

  1. The pharmacy is exempt because its paper log was compliant under prior law and is grandfathered from the new requirement.
  2. The pharmacy must comply only if the DEA adopts a parallel federal regulation requiring electronic logging.
  3. The pharmacy must install a compliant electronic access-logging system within 90 days of the regulation's effective date, regardless of its prior paper system. (correct answer)
  4. The pharmacy may continue its paper log system while petitioning the state board for a variance with no further obligation.
Explanation: When a new state regulation establishes a compliance deadline, pharmacies must meet that deadline regardless of the status of their prior system. Prior compliance does not grandfather a pharmacy out of a prospective regulatory requirement. A is incorrect because grandfathering does not apply to prospective regulations absent an explicit exemption in the regulation itself. B is incorrect because state regulations do not require federal parallel adoption to be enforceable; state and federal requirements operate independently. D is incorrect because filing a variance petition does not suspend the compliance obligation; the pharmacy must comply by the deadline unless the board formally grants the variance.

Question 7

A state board audit finds that a pharmacy has used the same access code for its controlled substance vault for four years without any changes. The board flags this as a potential violation. Which of the following best analyzes whether a violation has occurred?

  1. No violation has occurred because DEA regulations do not specify how frequently access codes must be changed.
  2. Whether a violation has occurred depends on whether the state board has a specific regulation requiring periodic credential rotation or changes upon defined triggering events. (correct answer)
  3. A violation has occurred because industry best practice requires access code changes at least annually.
  4. No violation has occurred because the same access code may be used indefinitely as long as only authorized employees know it.
Explanation: The existence of a violation depends on the specific regulatory requirements of the state board. Some states mandate periodic rotation of access credentials or changes upon specific triggering events. If such a regulation exists and was not followed, a violation occurred. If no such regulation exists and no triggering events (such as employee departures) occurred, a violation may not have occurred. A is incorrect because the analysis cannot stop with DEA silence; state requirements must also be evaluated. C is incorrect because industry best practices are not enforceable legal obligations; only regulations are. D is incorrect because while authorized-employee knowledge is a core standard, state regulations may impose additional requirements such as credential rotation that would make an indefinitely unchanged code non-compliant.

Question 8

A pharmacist reviewing the state's access-control regulation finds it requires controlled substance storage areas to be secured against unauthorized access at all times. She is uncertain whether this rule requires her to lock the vault during business hours when she is actively working nearby. Which of the following best applies?

  1. The vault must be locked at all times without exception, even when the pharmacist is working immediately adjacent to it.
  2. The vault may remain unlocked during business hours because the pharmacist's presence eliminates the unauthorized access risk.
  3. The vault should be locked whenever the pharmacist is not actively retrieving or returning controlled substances, even during business hours; the at-all-times standard does not suspend during working hours. (correct answer)
  4. The regulation is ambiguous, and the pharmacist should file a formal variance request before making an operational decision.
Explanation: An at-all-times security standard means the obligation is continuous; it does not pause simply because business is being conducted. While brief unlocking during active retrieval or restocking is a practical necessity, the vault should be locked whenever the pharmacist is not directly engaged in accessing it. C correctly reflects the continuous nature of the obligation while acknowledging operational practicality. A overreads the rule -- brief access during retrieval is an unavoidable necessity and does not violate the standard. B is incorrect because the pharmacist's general proximity does not satisfy a locking requirement; the standard requires the vault itself to be secured. D is incorrect because the plain meaning of at-all-times is sufficiently clear and does not require a variance petition for routine operational guidance.

Question 9

A state board inspection finds that a pharmacy has no written access-control policy for its controlled substance areas. The pharmacy argues that staff follow unwritten customs that achieve the same practical result as a written policy. Which of the following best analyzes the pharmacy's position?

  1. The pharmacy's position is correct because the regulatory objective is effective access control, and unwritten customs that achieve this result satisfy the requirement.
  2. The pharmacy's position is incorrect; when a regulation requires a written policy, oral or customary practices do not satisfy that requirement. (correct answer)
  3. The pharmacy's position is correct as long as the PIC can testify to the unwritten customs during the inspection.
  4. The pharmacy's position is correct because the DEA does not require written access-control policies, and federal law governs this matter.
Explanation: When a regulation requires a written policy, oral traditions and unwritten customs do not satisfy the requirement. Written policies are required precisely because they create enforceable, auditable standards that can be reviewed during inspections and serve as documentation of intent. A is incorrect because regulatory compliance is not measured solely by practical outcomes; procedural requirements such as written documentation must be independently satisfied. C is incorrect because PIC testimony about unwritten customs is not the legal equivalent of a written policy and cannot substitute for it. D is incorrect because state board rules -- not only DEA regulations -- govern pharmacy practice, and state requirements for written policies are independently enforceable regardless of federal silence on the subject.

Question 10

A state board rule requires pharmacies to change controlled substance storage access codes within 24 hours of any employee termination. No DEA regulation specifies a timeline for this change. A pharmacy changes the code within 48 hours following a termination. Which of the following best describes the pharmacy's compliance?

  1. The pharmacy is compliant because the DEA standard does not specify a timeline and the pharmacy acted within a reasonable time.
  2. The pharmacy is compliant because 48 hours reflects industry standard and therefore satisfies regulatory intent.
  3. The pharmacy is compliant because DEA regulations govern this subject and state requirements are preempted.
  4. The pharmacy is non-compliant with the state rule because the 24-hour requirement was not met, regardless of the DEA's silence on the timeline. (correct answer)
Explanation: The state rule is enforceable independently of whether the DEA addresses the same subject. The 24-hour requirement means exactly that -- the code must be changed within 24 hours of termination. Waiting 48 hours violates the state rule. A is incorrect because a reasonable time standard does not apply when the state rule specifies 24 hours; the explicit timeline governs. B is incorrect because industry practice does not override an explicit regulatory deadline. C is incorrect because DEA regulations establish a floor; state rules may impose stricter requirements on this subject without being preempted, as long as the state requirement does not contradict federal law.

Question 11

During a declared public health emergency, a state governor issues an executive order waiving certain pharmacy access-control documentation requirements to expedite drug distribution. A pharmacist must determine whether this waiver also applies to DEA recordkeeping and security obligations. Which of the following best analyzes this situation?

  1. The governor's order may waive state documentation requirements but cannot waive federal DEA recordkeeping and security obligations, which remain in effect unless waived directly by the DEA. (correct answer)
  2. The governor's order automatically waives both state and federal requirements because emergency powers supersede all regulatory obligations.
  3. The pharmacist may disregard all access-control requirements during a declared emergency because patient care takes precedence over documentation.
  4. The governor's order applies to DEA obligations because state emergency powers govern all activities within the state's borders.
Explanation: State governors have authority over state law and regulations but cannot waive or override federal DEA regulations. During a public health emergency, the DEA may issue its own waivers or guidance, but absent explicit DEA action, federal controlled substance security and recordkeeping requirements remain in force. A correctly identifies the boundary between state and federal authority. B is incorrect because state emergency powers do not override federal law; only the federal government can waive federal regulatory requirements. C is incorrect because patient care priority does not legally suspend documentation obligations; emergency waivers must come from the applicable regulatory authority. D is incorrect because federal regulations are not subject to state executive orders; under the Supremacy Clause, federal law governs where it applies.

Question 12

A retail pharmacy temporarily closes for three days due to an unexpected building repair. Controlled substances remain in the pharmacy's vault during the closure. Which access-control rule most directly governs this situation?

  1. The pharmacy must transfer all controlled substances to a DEA-registered reverse distributor before closing.
  2. The controlled substances must remain secured in their approved storage area during the closure, and access must continue to be limited to authorized personnel only. (correct answer)
  3. The pharmacy must notify the DEA at least 48 hours before the closure.
  4. The state board of pharmacy must approve any closure lasting more than 24 hours before controlled substances may remain on the premises.
Explanation: During a temporary closure, controlled substances must remain in their approved, secured storage areas and all access restrictions remain fully in effect. A temporary closure does not suspend the pharmacy's security obligations or create new transfer requirements. A is incorrect because a temporary closure does not require transfer to a reverse distributor; on-site secured storage is appropriate. C is incorrect because DEA advance notification is not required for routine temporary closures; it is triggered when a pharmacy intends to surrender its DEA registration. D is incorrect because state board pre-approval is not a standard requirement for temporary closures; the pharmacy must simply maintain security throughout the closure.

Question 13

A state board defines any area where controlled substances are stored or dispensed as a restricted area. Which of the following signage requirements most commonly applies to restricted areas under state pharmacy access-control rules?

  1. A sign listing the names of all employees currently authorized to enter the area.
  2. A clearly visible notice stating that access is restricted to authorized personnel only. (correct answer)
  3. A posted copy of the pharmacy's DEA registration certificate.
  4. A sign indicating the schedule numbers of all controlled substances stored in the area.
Explanation: Most state pharmacy access-control rules require restricted areas to be posted with a clearly visible notice that access is limited to authorized personnel. This serves as both a deterrent and legal notice. A is incorrect because listing individual employee names on a posted sign is not a standard regulatory requirement and would create a burdensome obligation to update with every personnel change. C is incorrect because DEA registration certificates are required to be posted at the registered location generally, not specifically on controlled substance storage area doors. D is incorrect because posting schedule numbers is not a standard access-control signage requirement under state pharmacy rules.

Question 14

Under the Controlled Substances Act, a DEA investigator arrives at a retail pharmacy during business hours and presents proper credentials. Which of the following most accurately describes the legal framework governing the pharmacy's response?

  1. The pharmacy must immediately permit full access because presentation of DEA credentials constitutes mandatory authorization for entry and inspection.
  2. The pharmacy may refuse all access unless the DEA presents a criminal search warrant signed by a federal judge.
  3. The pharmacy may consent to inspection or require a warrant, after which cooperation is mandatory. (correct answer)
  4. The pharmacy must contact legal counsel before any inspection may begin, as no inspection may proceed without legal representation present.
Explanation: Under 21 USC 880, DEA administrative inspections of registered pharmacies require either the consent of the registrant or an administrative inspection warrant. Presentation of credentials alone does not compel the pharmacy to permit entry; the pharmacy may consent -- which is the typical outcome -- or may decline, in which case the DEA must obtain an administrative inspection warrant. Once a lawful inspection is properly authorized by consent or warrant, the pharmacy must cooperate fully and may not obstruct it. A is incorrect because credentials alone do not compel entry; consent or a warrant is required. B is incorrect because a criminal search warrant is not required; an administrative inspection warrant, which has a lower threshold, is the applicable mechanism. D is incorrect because contacting legal counsel is a personal right but does not authorize blocking or delaying a lawful inspection once the consent-or-warrant requirement is satisfied.

Question 15

A DEA-registered wholesale distributor is audited and found to be storing large quantities of Schedule II controlled substances in a standard locked cabinet that does not meet the enhanced safe or vault specifications required by DEA regulations for that quantity. Which DEA regulation is most directly implicated?

  1. 21 CFR 1304.04, which requires two-year retention of controlled substance records.
  2. 21 CFR 1301.74, which governs reporting of theft and significant loss.
  3. 21 CFR 1301.76, which addresses employee screening requirements.
  4. 21 CFR 1301.72, which mandates safe or vault storage for Schedule II quantities. (correct answer)
Explanation: 21 CFR 1301.72 establishes physical security requirements for non-practitioner registrants, including wholesale distributors. For Schedule I and II controlled substances, the regulation requires safe or vault storage meeting specified characteristics when quantities exceed applicable thresholds. A DEA-registered distributor storing large quantities of Schedule II substances below those specifications directly implicates this provision. Note that 21 CFR 1301.75 -- not 21 CFR 1301.72 -- governs physical security requirements for practitioner registrants such as pharmacies, which are subject to a distinct standard. A is incorrect because 21 CFR 1304.04 governs recordkeeping retention periods, not physical storage security. B is incorrect because 21 CFR 1301.74 governs reporting of theft and significant loss. C is incorrect because 21 CFR 1301.76 addresses employee screening and is a distinct provision.

Question 16

A DEA investigator arrives at a retail pharmacy during business hours, presents credentials, and requests to inspect controlled substance records and inventory. Only a pharmacy technician is present; the pharmacist is on a break off-site. What must the technician do under applicable rules?

  1. Provide access to the requested records and premises, as DEA authority extends to on-site pharmacy personnel during inspections. (correct answer)
  2. Refuse entry until the pharmacist returns because only a licensed pharmacist may authorize a DEA inspection.
  3. Contact the pharmacist immediately, ask the investigator to wait briefly, and ensure the pharmacist returns promptly to facilitate the inspection.
  4. Allow the investigator access to the dispensing area but not the controlled substance vault until the pharmacist arrives.
Explanation: Under 21 USC 880, DEA inspection authority extends to the registrant and any agent acting on the registrant's behalf at the inspection site. The pharmacist's temporary absence does not suspend the pharmacy's obligation to cooperate with a lawful inspection; the on-site technician, as an agent of the registrant, should cooperate and provide the investigator access to the premises and records requested. A correctly reflects this obligation. B is incorrect because restricting access until the pharmacist returns is inconsistent with the pharmacy's legal duty to cooperate; inspection authority runs through the registrant's agents, not exclusively through licensed pharmacists. C is incorrect because asking the investigator to wait for the pharmacist is not the required response when the registrant has an obligation to cooperate through its on-site agents. D is incorrect because selectively restricting vault access while admitting the investigator to other areas is not the correct legal standard for a lawful DEA inspection.

Question 17

A pharmacy chain operates locations in three states, each with its own DEA registration. Corporate issues a uniform access-control policy that is less stringent than the rules in one of the states. The PIC at that location is asked to implement the corporate policy. Which of the following best describes the PIC's obligation?

  1. Implement the corporate policy because a uniform chain policy supersedes individual state board requirements.
  2. Implement the corporate policy and simultaneously submit a variance request to the state board.
  3. Implement whichever policy is easier to administer, since both address the same subject matter.
  4. Implement the stricter state law, as the PIC is responsible for compliance with state regulations. (correct answer)
Explanation: Each DEA registration is location-specific and each location must comply with the applicable state pharmacy law regardless of corporate policy. When corporate policy is less stringent than state law, the PIC must follow state law. The PIC bears personal legal accountability for the pharmacy's compliance and cannot use a corporate directive to justify a regulatory violation. A is incorrect because corporate policies do not supersede state law; pharmacies must comply with the stricter of the two. B is incorrect because implementing a non-compliant policy while seeking a variance exposes the PIC to enforcement action in the interim. C is incorrect because administrability does not determine which standard governs; the applicable law controls.

Question 18

An automated dispensing cabinet (ADC) is installed on a hospital nursing unit to dispense controlled substances to patients. Which of the following access-control rules most directly governs who may obtain controlled substances from the ADC?

  1. Only pharmacists may access ADC drawers under any circumstances.
  2. Any nurse with a hospital ID badge may access any drawer in the ADC at any time.
  3. ADCs are secure point-of-care devices that fall outside the pharmacy's access-control obligations.
  4. Access is restricted to authorized healthcare personnel with audit logs maintained for all transactions. (correct answer)
Explanation: ADCs are subject to controlled substance security requirements, including restricting access to authorized users and maintaining complete transaction audit logs. DEA regulations and hospital pharmacy standards require that ADC access be credential-controlled and that all removal events be documented. A is incorrect because authorized nurses and other licensed healthcare personnel may access ADCs; the restriction is to authorized users, not pharmacists exclusively. B is incorrect because access must be limited to individually credentialed authorized personnel; unrestricted badge access does not satisfy the security requirement. C is incorrect because ADCs are fully subject to pharmacy access-control and controlled substance regulations regardless of their location within a facility.

Question 19

A pharmacy's written access-control policy, as required by the state board of pharmacy, must address which of the following at minimum?

  1. The names and license numbers of all employees currently authorized to access controlled substance storage.
  2. Procedures for granting, modifying, and revoking access credentials, including requirements for updating credentials when employment status changes. (correct answer)
  3. A schedule for weekly review of access logs by the pharmacist-in-charge.
  4. The specific brand and model number of the locking mechanism used on all controlled substance storage areas.
Explanation: A compliant written access-control policy must address the lifecycle of credentials: how they are granted to new employees, modified when roles change, and revoked when employment ends. This procedural framework is the legally critical element. A is incorrect because while a policy may include authorization lists, a static roster does not satisfy the requirement for a procedural framework that addresses ongoing credential management. C is incorrect because weekly log review is a sound practice but is not a universally required minimum element of a written policy. D is incorrect because specifying hardware brand and model is not a required policy element; the policy must address procedures, not equipment specifications.

Question 20

Under USP Chapter 800, which of the following access-control rules applies to a pharmacy's hazardous drug compounding area?

  1. Only pharmacists may enter the hazardous drug compounding area at any time.
  2. Access to the hazardous drug compounding area must be restricted to trained and authorized personnel, and the area must maintain negative pressure relative to adjacent spaces. (correct answer)
  3. The hazardous drug area must be locked at all times and may only be entered using a dual-key system.
  4. Any employee who has completed a general safety orientation may access the hazardous drug compounding area.
Explanation: USP Chapter 800 requires hazardous drug compounding areas to be restricted to personnel who have received specific training in hazardous drug handling. The standard also requires negative pressure in the primary engineering control area relative to adjacent spaces to prevent contamination spread. B correctly captures both the personnel restriction and the engineering control requirement. A is incorrect because trained technicians and other authorized personnel may access these areas; restriction to pharmacists only exceeds what USP 800 requires. C is incorrect because USP 800 does not mandate a dual-key system; the access restriction is personnel-based and training-based. D is incorrect because general safety orientation does not satisfy the specific hazardous drug training requirement under USP 800.