Question 1
Which statement BEST distinguishes a policy from a procedure?
Correct Answer:
A policy states management intent and expectations; a procedure gives detailed steps for carrying them out
Explanation:
Policies communicate management direction and mandatory expectations. Procedures translate those expectations into repeatable operational steps.
Question 2
Which example is a technical control?
Correct Answer:
Multi-factor authentication enforced by an identity platform
Explanation:
Technical controls are implemented through hardware, software, or firmware mechanisms. Multi-factor authentication enforced by a platform is a technical safeguard.
Question 3
What is the MAIN difference between vulnerability scanning and penetration testing?
Correct Answer:
Scanning identifies potential weaknesses broadly; penetration testing actively attempts exploitation to demonstrate impact
Explanation:
Vulnerability scanning is generally used to identify known weaknesses or misconfigurations, while penetration testing goes further by attempting controlled exploitation to validate attack paths and impact.
Question 4
A control is partly implemented by a central identity service and partly by an application team. What type of control is this?
Correct Answer:
Hybrid control
Explanation:
A hybrid control has both common and system-specific portions. Documentation must clearly allocate responsibility for each portion so gaps are not created.
Question 5
A privacy review identifies unresolved concerns about a new data use. What should occur before a final system compliance decision?
Correct Answer:
Include the privacy risk and required privacy documentation in the decision package and obtain appropriate review
Explanation:
Current CGRC scope integrates security and privacy. Relevant privacy risks, assessments, and documentation should be part of the evidence presented to the appropriate decision-makers.
Question 1
Exam overview

About this Exam

The Collaborative Institutional Training Initiative (CITI Program) is the gold standard for research ethics and compliance training worldwide. The CITI Research Methods coursework is designed for researchers, students, faculty, and administrative staff involved in planning, conducting, or overseeing research involving human subjects, animals, or sensitive data. It ensures that all personnel are well-versed in appropriate methodologies, ethical principles, and regulatory frameworks required to protect research participants and maintain data integrity. For many academic and medical institutions, obtaining a CITI completion certificate is a mandatory prerequisite for publishing research, applying for grants, or gaining Institutional Review Board (IRB) approval.

More details

Additional Information

What the Course Entails and Exam Details

The CITI Research Methods curriculum provides a foundational knowledge base tailored to the specific context of your field, such as Social-Behavioral or Biomedical research. You will explore a wide array of core topics through multiple instructional modules. These often include the historical context of research ethics, highlighted by landmarks like the Belmont Report. You will gain critical skills in developing robust research protocols, defining variable measurement, and ensuring appropriate methods for data privacy and confidentiality. A significant portion of the course is dedicated to ethical considerations, such as the informed consent process, recruiting vulnerable populations ethically, and assessing the balance between risks and benefits for participants. It also addresses standard operating procedures for complying with regulatory guidelines, including the Revised Common Rule.

 

 

 What to Expect in the Final Exam

When preparing for the final "exam," it is crucial to understand that CITI uses a modular assessment structure. Rather than one massive final test at the end of the entire course, you will take a specific quiz immediately following each mandatory module. The format for these quizzes is universally multiple-choice, focusing on the key concepts presented in that single section. You must pass every individual module quiz to obtain your overall certificate. Most institutions establish a minimum passing composite score, which is commonly around 80%. A notable advantage of this digital format is that there are rarely strict time limits for completing the individual quizzes, allowing you to review the module material carefully before submitting your answers. Furthermore, if you do not achieve a passing score on a module quiz on your first attempt, you are typically permitted to retake it immediately to master the content and improve your grade.

 

 

How to Study and Exam Centers

Your primary and most effective study method is active engagement with the official CITI module content itself. You should take detailed notes on definitions, ethical frameworks, regulatory dates, and historical case studies, as the quizzes are directly reflective of this written material. Utilizing reputable practice tests and sample questions is highly recommended to familiarize yourself with the phrasing of the multiple-choice items and to identify your areas of weakness. Because the CITI Program is a self-paced, online platform, there are no physical testing centers or Pearson VUE locations for standard CITI training. You will complete all coursework and assessments directly through the secure CITI Program online portal. You can access the portal 24/7 from any computer with an internet connection, usually by logging in through your affiliated institution’s single sign-on (SSO) system.

 

 

Job Opportunities from the Course

A CITI Research Methods completion certificate is a powerful asset that demonstrates your commitment to ethical and compliant research practices. This credential unlocks numerous career paths in academic, medical, private industry, and government sectors. For students and recent graduates, it is often a fundamental requirement for roles such as Graduate Research Assistant or Research Associate across many fields. Within research administration and regulatory affairs, this training is essential for positions like IRB (Institutional Review Board) Coordinator, Human Subjects Protection Analyst, and Research Compliance Officer. Furthermore, it is a mandatory skill set for professionals in healthcare pursuing careers as Clinical Research Coordinators, Study Managers, or Medical Writers who must adhere to strict methodological and ethical guidelines in their daily operations.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions