HACCP questions on the ServSafe Manager exam sit mainly in Management of Food Safety Practices, which carries 8 of the 80 scored questions, and the same logic turns up inside cooking, holding, hygiene and receiving scenarios. They rarely ask you to recite the acronym. They describe a kitchen moment and ask what the manager does next: name the hazard, find the step that controls it, check the limit, and pick the corrective action that leaves proof behind.
Before reading on, try the free Management of Food Safety Practices question set to see how many of these judgment calls you already get right.
How much of the ServSafe Manager exam is HACCP?
Eight scored questions carry the content area that owns HACCP, and five other content areas borrow its logic. That makes HACCP smaller than its reputation as a named topic and larger than it looks as a way of reading questions.
The ServSafe Manager exam is 90 multiple-choice questions in two hours, but only 80 of them count. The other 10 are unscored pilot items the National Restaurant Association uses for research, and nothing on screen tells you which is which. You pass at 56 of the 80 scored questions — 70%, not the 75% most prep sites publish.
Our full-length ServSafe Manager practice tests copy that structure exactly: 90 questions, 10 unmarked pilot items, a two-hour countdown that submits at zero, and a result worked out of 80 against the same pass line. The seven content areas carry the real exam’s weights rather than an even split — Preparation and Cooking 15, Receipt and Storage 13, Hygiene and Health 12, Cleanliness and Sanitation 12, Facilities and Equipment 12, Management 8, Service and Display 8.
ServSafe does not publish a count of HACCP questions, so treat any page that gives one with suspicion. What the blueprint does show is where the reasoning lives.
| Content area | Scored questions | What a HACCP-style question looks like there |
|---|---|---|
| Management of Food Safety Practices | 8 | The principles, active managerial control, corrective action and records |
| Safe Preparation and Cooking of Food | 15 | Cooking, cooling and reheating as critical control points with numeric limits |
| Safe Receipt, Storage, Transportation and Disposal of Food | 13 | Rejecting a delivery, shelf order as a control |
| Hygiene and Health | 12 | Excluding a sick worker as control at the source |
| Cleanliness and Sanitation | 12 | Proving a sanitizing step worked before trusting it |
| Safe Service and Display of Food | 8 | Hot and cold holding checks and what a missed reading triggers |
Regulators expect the same knowledge. The Food Code’s demonstration-of-knowledge list for a person in charge, as adopted by the Oregon Department of Agriculture, covers critical control points and HACCP in items 14 and 15. The 2026 FDA Food Code also rewrote the opening of section 2-103.11 so that the person in charge is responsible for maintaining active managerial control. The exam is testing a duty the code already assigns you.
What are the seven HACCP principles, in FDA’s wording?
The seven principles come from the National Advisory Committee on Microbiological Criteria for Foods, adopted 14 August 1997 and published by FDA as the HACCP Principles and Application Guidelines. Every textbook version, ServSafe’s included, follows this order.
| # | Principle (FDA order) | How it shows up in a Manager question |
|---|---|---|
| 1 | Conduct a hazard analysis | “Which hazard is the main concern?” Biological, chemical or physical |
| 2 | Determine the critical control points | “At which step can the manager still prevent it?” |
| 3 | Establish critical limits | A temperature, a time, a pH, a supplier status |
| 4 | Establish monitoring procedures | Who probes, with what, how often |
| 5 | Establish corrective actions | Reheat, discard, reject, exclude, re-clean |
| 6 | Establish verification procedures | Calibrating the thermometer, reviewing the log |
| 7 | Establish record-keeping and documentation procedures | The log entry that proves the fix happened |
FDA’s guidelines also list five preliminary tasks that come before principle 1: assemble the HACCP team, describe the food and its distribution, describe its intended use and consumers, draw a flow diagram, and check that diagram against the real process. A question about who belongs on the HACCP team, or why the flow diagram comes before the hazard analysis, draws on this list.
One sentence in the FDA text is worth remembering for the exam: “Preventing problems from occurring is the paramount goal underlying any HACCP system.” When two answers both fix a problem, the one that would have stopped it earlier usually wins.
Why do older study guides skip the seven principles?
Because ServSafe took them out for one edition and then put them back. If your book or notes came from the 7th Edition era, they may treat HACCP as a single paragraph.
| Edition | What happened to HACCP | Source |
|---|---|---|
| 7th Edition (2017, written to the 2013 Food Code) | Active managerial control expanded; the seven HACCP principles and specialized processing methods removed from ServSafe Manager | ServSafe’s “What’s New in the 7th Edition” instructor guide, 2017 |
| 7th Edition Revised (released 2 October 2023, 2022 Food Code) | Updated to the 2022 Food Code | ServSafe 2022 Food Code hub |
| 9th Edition (current for 2026) | Expanded coverage of food safety management systems, active managerial control and the seven HACCP principles | ServSafe 9th Edition update sheet and ES9 product page |
So the principles are named content again. A candidate who studied from a 7th Edition Revised book can still pass, but should learn the seven in order and the vocabulary in the next section, because the current book teaches it. The full edition story is in our comparison of the 7th and 9th Edition Manager books.
What is the difference between a control point and a critical control point?
FDA defines a control point as any step where biological, chemical or physical factors can be controlled. A critical control point is a step where control can be applied and is essential to prevent or eliminate a hazard, or reduce it to an acceptable level. Every CCP is a control point; many control points are not CCPs.
The exam tests this distinction indirectly. A question that asks for “the most important step to prevent illness from raw chicken” wants cooking, because no later step can undo an undercooked breast. Cold storage and separate cutting boards matter too, but FDA files them under prerequisite programs, which the guidelines say “are established and managed separately from the HACCP plan.”
| Term | FDA meaning, paraphrased | Common wrong answer |
|---|---|---|
| Hazard analysis | Collecting and judging hazard information to decide which ones are significant enough for the plan | Listing every possible hazard as equally important |
| Critical limit | A maximum and/or minimum value a parameter must stay within at a CCP | A vague standard such as “keep food hot” |
| Monitoring | Planned observations or measurements that show whether a CCP is under control and produce a record | Checking only when something looks wrong |
| Corrective action | What you do when a deviation occurs | Writing the failure down and serving the food |
| Verification | Activities, other than monitoring, that show the plan is valid and being followed | Treating a second temperature reading as verification |
| Prerequisite programs | Basic operating conditions, such as sanitation and supplier control, that HACCP is built on | Calling handwashing a CCP |
FDA’s own example of a critical limit is a beef patty cooked to 155°F for 16 seconds. That is an illustration of how limits are written. The retail figure your inspector uses comes from your adopted code; the Rhode Island Department of Health’s minimum-temperature chart, for example, lists hamburgers at 155°F for 17 seconds. Read the scenario’s numbers and apply them instead of the example.
FDA also says its CCP decision tree is a tool and “not a mandatory element of HACCP.” If an answer choice says a plan is invalid because no decision tree was used, it is wrong. The beginner-level walk through these terms is in HACCP basics for food service.
When does a restaurant legally need a HACCP plan?
Only for specialized processes. FDA’s 2006 regulator manual notes that many establishments have no formal HACCP plan, and that with a few exceptions, formal records at retail are not required. The exceptions are the processes in Food Code sections 3-502.11 and 3-502.12 and a few juice and egg situations, and each one needs a variance, a HACCP plan, or both.
This is the part of HACCP that study pages handle worst. One ranking guide says plans are needed “primarily” for smoking, curing, vacuum packing and juice, which leaves out sprouting, shellfish tanks, acidified rice, fermentation and custom processing, and it never separates the processes that need a variance from those that need only a plan. Health departments sort them more carefully. The LaSalle County Health Department in Illinois publishes the clearest three-way split, and the Rhode Island and Wisconsin lists add section numbers and detail.
| Process | LaSalle County, IL | Rhode Island DOH (2022 Food Code ref.) | Wisconsin DATCP (9/2024) |
|---|---|---|---|
| Smoking food to preserve it (not just for flavor) | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed, 3-502.11(A) |
| Curing (ham, sausage, corned beef, bacon) | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed, 3-502.11(B) |
| Additives or acid to preserve food or make it non-TCS (vinegar in sushi rice) | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed, 3-502.11(C) |
| Fermenting (kombucha, yogurt, kimchi, sauerkraut) | Not named | Named as preservation by fermentation | Listed, 3-502.11(G) |
| Sprouting seeds or beans | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed, 3-502.11(H); microgreens excluded |
| Molluscan shellfish display or life-support tank | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed, 3-502.11(E) |
| Custom processing animals for personal use | Variance and HACCP plan | Not named | Listed, 3-502.11(F) |
| Reduced oxygen packaging with only one barrier (refrigeration) | Variance and HACCP plan | Pre-approval, 3-502.11 | Listed when 3-502.12 is not met |
| Cook-chill or sous vide | Variance and HACCP plan | Pre-approval, 3-502.12 | Listed, 3-502.12(D) |
| Reduced oxygen packaging with more than one barrier | HACCP plan, no variance | No variance if fully compliant with 3-502.12 | Listed, 3-502.12 |
| Juice packaged on site | HACCP plan, no variance | Listed under 3-404.11 | Not named |
| Pooled eggs where a highly susceptible population is served | HACCP plan, no variance | Not named | Not named |
Two numbers make the ROP rows concrete. Rhode Island lets two-barrier vacuum packaging run without a variance when food is held at 41°F or below and also meets one of these: water activity of 0.91 or less, pH of 4.6 or less, meat or poultry cured at a USDA plant, or raw meat, raw poultry or raw vegetables. Wisconsin’s fact sheet gives raw meat or raw vegetables “held for no more than 30 days” as its two-barrier example.
The application side varies too. The Rhode Island Department of Health wants the HACCP plan plus an operational plan with sample logs, keeps logs for at least 180 days, and says approval or denial comes within one month. Rhode Island says both the plan and the variance must be approved before the process begins. Wisconsin has the inspector sign the variance and review the plan. Rules like these are set by each state or county, so the table shows examples rather than a national rule; your regulator’s list is the one that applies to you.
What goes into a HACCP plan when one is required?
A short list, and the health departments agree on it. LaSalle County and Wisconsin both ask for the foods covered, a flow diagram for each food or category with its ingredients, equipment and recipe, the CCPs with their critical limits, how and how often each limit is monitored and by whom, how the person in charge verifies it, the corrective action for each missed limit, and the records kept.
That list is the seven principles turned into paperwork. When a Manager question asks which document an inspector would expect for a vacuum-packed product, the answer is the plan, and when it asks what the plan must say happens after a missed limit, the answer is a named corrective action with a record behind it.
How does FDA’s process approach turn a menu into HACCP?
FDA’s regulator manual, Managing Food Safety (April 2006), sorts every menu item into one of three processes by how many times it passes through the temperature danger zone of 41°F to 135°F. Kitchens use it because writing a separate plan for 60 dishes is unworkable, and exam scenarios follow the same three shapes.
| Process | FDA’s flow | Trips through 41°F to 135°F | Our example | Where the exam puts the failure |
|---|---|---|---|---|
| 1. No cook step | Receive, store, prepare, hold, serve | No cook step to kill pathogens | Tuna salad, sliced fruit, oysters on the half shell | Receiving, cold holding, bare-hand contact |
| 2. Same-day service | Receive, store, prepare, cook, hold, serve | One | Grilled chicken, hamburgers | Final cooking temperature, hot holding |
| 3. Complex | Receive, store, prepare, cook, cool, reheat, hot hold, serve | Two or more | Chili, soups, refried beans made ahead | Cooling and reheating |
If you can name the process in the first line of a scenario, you can usually predict the step the question is about. Process 3 items have the most critical control points, so they give a scenario the most places to hide a failure.
What does a worked Process 3 scenario look like?
Take a pot of chili made Monday for Tuesday lunch and run it through the principles with figures from regulator documents. These are the numbers a scenario question will hand you or expect you to know.
| Step | Hazard | Critical limit (source) | Monitoring | If the limit is missed |
|---|---|---|---|---|
| Cook | Pathogens in ground beef survive | 155°F for 17 seconds, the figure for hamburgers and sausage on the Rhode Island DOH chart (May 2021) | Probe the center of the pot | Keep cooking until the limit is met |
| Cool, stage 1 | Spore-formers grow as the pot cools | 135°F to 70°F within 2 hours (FDA cooling handout, July 2024) | Probe and log at set intervals | Follow your code’s rule for a missed stage; the Marin County, CA form allows one reheat to 165°F and a restart, Northern Nevada’s sample SOP discards |
| Cool, stage 2 | Same | 70°F to 41°F or lower within the next 4 hours (FDA) | Probe and log | Discard if the window is missed |
| Reheat for hot holding | Survivors multiply | 165°F for 15 seconds within 2 hours (Minnesota Department of Health) | Probe before it goes into the well | Keep reheating on the stove until it reaches the limit, then move it to the well |
| Hot hold | Growth in the well | 135°F or above (Minnesota Department of Health) | Probe on the interval in your procedure | See the decision rule below |
The hot-holding row is where Manager questions get subtle. A reading of 128°F at 1 p.m. tells you nothing by itself. Northern Nevada Public Health’s sample holding procedure reheats food to 165°F for 15 seconds only if the last reading within 2 hours was 135°F or higher, and discards it when nobody knows how long it has been low. That rule explains why the exam keeps rewarding the answer that pairs the fix with the log: the log is what lets you choose between reheating and discarding. The cooling and holding numbers are covered in depth in Manager time and temperature questions.
Which other scenarios are HACCP questions in disguise?
Any question that asks what a manager should do about food already in the building is running principle 5 on a different subject. Four patterns come up again and again.
A food handler reports vomiting that started this morning. The hazard is contamination at the source, and the control is exclusion. Georgia’s Department of Public Health decision guide, based on the 2013 Food Code, excludes a worker with vomiting or diarrhea until 24 hours after symptoms end. Moving the worker to dish duty or handing out gloves leaves the source in the kitchen.
A delivery of fish arrives from a supplier nobody has approved, and it looks and smells fine. Appearance tells you nothing about the source or the temperature history. Receiving is the last point where the hazard can be kept out entirely, so the corrective action is rejection.
Raw ground pork sits above potato salad in the walk-in, both covered. Pima County, Arizona’s storage chart, based on the 2013 Food Code, puts ready-to-eat food on top, then unwashed produce, then whole cuts cooked to 145°F, then ground and tenderized meats cooked to 155°F, then poultry cooked to 165°F at the bottom. A lid does not change the order.
Utensils come out of the dish machine with food still on them after a full cycle. A completed cycle proves the machine ran. Verification asks whether it worked, so the manager stops using it, fixes the cleaning failure and confirms performance before trusting it again.
How do you choose between two answers that both sound responsible?
Pick the one that controls the hazard earliest and leaves evidence. In a well-built HACCP question, every option is something a careful person might do, and only one matches the link in the chain that failed.
- Name the hazard first: biological, chemical or physical.
- Find the last step where it can still be stopped. Earlier beats later.
- Check the scenario’s numbers against the limit; ignore numbers you remember from elsewhere if the question gives you its own.
- Prefer reject, discard, exclude or reheat-to-limit over “monitor more closely” when a limit has already been crossed.
- Between two fixes, choose the one with a record attached.
“Retrain staff” on its own is the weaker answer next to “correct the food, fix the cause, retrain, and log it.” CDC’s EHS-Net research found that every certified kitchen manager in its outbreak study was familiar with HACCP, compared with 20% of other managers. The exam is checking for that familiarity in the form of choices.
How should you review a missed HACCP question?
Sort the miss by which principle you skipped. Rereading the chapter feels productive, but the error type tells you what to fix in a fraction of the time.
| What went wrong | Principle you skipped | Fix before the next practice set |
|---|---|---|
| You fixed the wrong problem (appearance instead of temperature history) | 1, hazard analysis | Name the hazard in three words before reading the options |
| You acted at a later step than you could have | 2, CCPs | Ask where the hazard could still have been stopped |
| You remembered a different number from the one in the question | 3, critical limits | Underline the scenario’s numbers and use only those |
| You chose “keep watching” | 5, corrective action | If the limit is already crossed, the answer changes the food |
| You treated a second reading as proof the system works | 6, verification | Verification checks the tool or the system, such as calibration or log review |
| You picked a verbal reminder | 7, records | Look for the option that leaves a record |
Write three lines per miss: the hazard, the step that should have controlled it, and why your answer lost. Ten misses logged that way teach more than a second pass through the book.
When the pattern feels automatic, test it across all seven content areas on the ServSafe Manager practice test hub. Before exam day, sit the 90-question full-length Manager rehearsal, which scores you out of 80 against the same 56-question pass line and breaks the result down by content area, so you can see whether management scenarios are the ones costing you. Every question is original, written to the published course objectives. No live exam content is reproduced here.
Frequently asked questions about ServSafe Manager HACCP questions
How many ServSafe Manager questions cover HACCP?
ServSafe publishes no HACCP count. Management of Food Safety Practices, the content area that holds the principles and active managerial control, carries 8 of the 80 scored questions. HACCP reasoning also appears inside questions from cooking, receiving, hygiene, sanitation and service, so the topic touches more of the exam than its own area suggests.
Does the ServSafe Manager exam ask you to list the seven HACCP principles?
ServSafe does not release its items, so nobody outside can say how often a straight list question appears. The 9th Edition Manager Book expanded its coverage of the seven principles, so knowing them by name and in FDA’s order (hazard analysis, CCPs, critical limits, monitoring, corrective action, verification, records) helps you decode scenario questions quickly.
Why did the ServSafe 7th Edition leave out the seven HACCP principles?
ServSafe’s 2017 instructor guide for the 7th Edition says the seven principles and specialized processing methods were removed from ServSafe Manager while active managerial control was expanded. The 9th Edition, current for 2026, brought expanded coverage of the principles back. Study notes built on the 7th Edition era can be thin on HACCP vocabulary.
Is FDA’s 155°F for 16 seconds a cooking rule I should memorize?
No. It is the example FDA’s HACCP guidelines use to show how a critical limit is written for a beef patty. Retail cooking limits come from the code your jurisdiction adopted; Rhode Island’s chart, for instance, lists hamburgers at 155°F for 17 seconds. On the exam, use the figures the scenario gives you.
Is a HACCP decision tree required?
FDA’s guidelines call the CCP decision tree a tool and say it is not a mandatory element of HACCP or a substitute for expert knowledge. A plan can identify its critical control points without one. An exam option claiming a plan is invalid because it skipped the decision tree misreads the guidance.
What is the difference between a variance and a HACCP plan?
A variance is written permission from the regulatory authority to do something the code would otherwise not allow, such as curing meat. A HACCP plan is the operator’s documented control system for that process. Health departments often require both together; LaSalle County, Illinois lists cases that need a plan without a variance, such as juice packaged on site.
Does a restaurant need approval before vacuum packing or cooking sous vide?
Usually yes. Cook-chill and sous vide fall under Food Code section 3-502.12, and LaSalle County requires a variance and a HACCP plan for them, while Rhode Island requires pre-approval. Rhode Island waives the variance only for two-barrier packaging that fully meets 3-502.12, such as raw meat held at 41°F or below.
Does making sushi rice with vinegar need a HACCP plan?
In the jurisdictions checked, yes. Acidifying rice so it can sit out without temperature control is a use of additives under Food Code section 3-502.11. LaSalle County requires a variance and a HACCP plan, Rhode Island requires pre-approval, and Wisconsin lists it as a special process. Check your own health department’s list before starting.
Does a restaurant need a HACCP plan to brew kombucha or make kimchi?
Wisconsin DATCP lists fermenting foods such as kombucha, yogurt and kimchi as a special process under its Food Code section 3-502.11(G), needing a variance, a HACCP plan or both. Rhode Island names fermentation in kimchi or sauerkraut as a preservation process that needs pre-approval. Other jurisdictions word it differently, so ask your regulator first.
Which processes need a HACCP plan but no variance?
LaSalle County, Illinois names four: pooling eggs where a highly susceptible population is served, such as a hospital or day care; packaging juice on site; preparing unpackaged juice for a highly susceptible population; and reduced oxygen packaging with more than one barrier against C. botulinum. The plan is still submitted to the health department.
How long does a health department take to approve a HACCP plan?
Timelines are set locally. The Rhode Island Department of Health says approval or denial of a specialized-process application comes within one month, with written notice. Wisconsin and LaSalle County publish no timeline. Rhode Island requires approval before the process begins, and Wisconsin has the inspector review the plan.
How long should specialized-process logs be kept?
Rhode Island asks applicants to retain logs for a minimum of 180 days as part of the operational plan submitted with a specialized-process application. That figure is Rhode Island’s; other health departments set their own retention period in the approval, so the number in your approved plan is the one that binds you.
What are FDA’s three food preparation processes?
FDA’s 2006 regulator manual sorts food by trips through 41°F to 135°F. Process 1 has no cook step, such as tuna salad. Process 2 is cooked for same-day service with one trip, such as a grilled burger. Process 3 is complex: cooked, cooled, reheated and held, with two or more trips, such as chili.
What does verification mean on the Manager exam?
FDA defines verification as activities other than monitoring that show the plan is valid and being followed. On the exam that means calibrating a thermometer, reviewing temperature logs or watching staff carry out a procedure. Taking another temperature reading of the same food is still monitoring, which is the trap in several answer choices.
Is the person in charge responsible for HACCP-style control even without a written plan?
Yes. FDA’s 2026 Food Code states in section 2-103.11 that the person in charge maintains active managerial control. FDA’s 2006 manual says every establishment needs active managerial control of risk factors even without a HACCP system. The Manager exam treats that daily control as the manager’s job.
Reviewed 10 November 2026 against FDA’s HACCP Principles and Application Guidelines (NACMCF, 1997), FDA’s Managing Food Safety manual (April 2006), the Rhode Island Department of Health, Wisconsin DATCP and LaSalle County Health Department specialized-process guidance, the 2026 FDA Food Code summary of changes, and ServSafe’s published Manager exam blueprint and 9th Edition materials.
