Certified Food Protection Manager (CFPM) Exam Study Guide
- Governing body
- Conference for Food Protection
Every accredited food protection manager exam, whichever provider administers it, is built on the FDA Food Code's numbers, so memorize them until they are reflexive. Cooking: 165°F for poultry and stuffed foods, 155°F for ground meats, 145°F for whole-muscle meats, seafood, and eggs cooked to order. Holding: hot food at 135°F or above, cold food at 41°F or less. Cooling: 135°F to 70°F within 2 hours, then to 41°F within 6 hours total. Reheating for hot holding: 165°F within 2 hours. Receiving: cold TCS food at 41°F or below, hot at 135°F or above, shell eggs at 45°F ambient. Date marking: 7 days at 41°F with prep day as Day 1. Handwashing: 20 seconds. Sanitizers: chlorine per the 50-99 ppm band, iodine 12.5-25 ppm, quats per the manufacturer's label. Because the credential itself is defined by these Food Code provisions rather than by any one vendor, the numbers transfer across ServSafe, NRFSP, Prometric, StateFoodSafety, and 360training exams alike.
Accredited exams are written to the Conference for Food Protection standards, and their content maps onto the same core domains regardless of provider. Expect heavy coverage of time and temperature control: cooking, holding, cooling, reheating, thawing, and thermometer use. Foodborne illness questions test the Big Six reportable pathogens, the difference between bacteria, viruses, and toxins, and which foods are TCS. Contamination and allergens covers separation of raw and ready-to-eat foods, the nine major allergens including sesame, and cross-contact prevention. Personal hygiene and employee health asks when to exclude or restrict a sick worker and what proper handwashing and glove use look like. Receiving and storage tests rejection criteria, FIFO, date marking, and storage order by cook temperature. Cleaning and sanitizing covers warewashing sequences, sanitizer concentrations, and test kits. Finally, management systems questions probe active managerial control, HACCP principles in order, variances, and the person in charge's duties during inspections and emergencies.
CFPM is a credential category, not a single test, so your first decision is which accredited program to test through. ANAB maintains the directory of certification bodies accredited under the CFP standard; the established names include ServSafe (National Restaurant Association), the National Registry of Food Safety Professionals, Prometric, StateFoodSafety, and 360training. Because a certificate from any of them is recognized the same way, choose on logistics: whether you want an online proctored exam or an in-person session, whether a prep course is bundled, what your employer already uses, and price. Before registering, check your local health department's rules. Most jurisdictions accept any ANAB-CFP accredited certificate, but requirements differ on who must hold it, whether a person in charge must be certified on every shift, and how quickly new operators must comply. A few jurisdictions layer their own card or registration fee on top of the accredited exam. Register directly with your chosen provider, and confirm identification requirements and proctoring rules before exam day.
Study the Food Code's logic, not just its numbers. The exam rewards candidates who can apply a rule to a scenario: a cook who vomited, a delivery at 50°F, a cooling batch that missed its checkpoint. For each rule, learn the why: ground beef needs 155°F because grinding mixes surface bacteria through the meat; cooling has two stages because 135°F to 70°F is the fastest growth band; allergen cross-contact survives cooking because proteins are not pathogens. Build a one-page temperature sheet and rewrite it from memory until you can reproduce it cold. Drill the employee-health matrix separately, since exclude-versus-restrict decisions trip up more candidates than any temperature question: vomiting, diarrhea, and jaundice mean exclusion; sore throat with fever means restriction unless a highly susceptible population is served. Then work practice questions in blocks and review every miss against the rule it tests. If your provider bundles a course, take it seriously but supplement with scenario practice, because course slides skew toward recall while accredited exams skew toward application.
Logistics depend on the provider, so re-read your confirmation email the night before: online-proctored exams require a webcam, a stable connection, a cleared workspace, and an approved ID, while in-person sessions set their own arrival and identification rules. Either way, the tactics are the same. Read each scenario for its operative facts: the temperature given, the elapsed time, the type of food, and who is involved. Watch for boundary answers; the Food Code's standards are written as at or above and at or less, so 41°F exactly is compliant cold holding and 135°F exactly is compliant hot holding. When two answers look plausible, pick the one that removes the hazard rather than manages it: exclusion over reassignment, rejection over conditional acceptance, discarding over hoping. Do not let provider-specific question styles rattle you; every accredited exam is testing the same Food Code framework you studied. Flag long calculation-style cooling or date-marking questions and return to them after banking the fast points.
Passing candidates receive a certificate from their provider, and that document is what health inspectors ask to see. Keep a copy at the establishment and know your jurisdiction's posting rules. Certificates issued under the accredited programs are commonly valid for five years from issuance, a convention many jurisdictions, Florida among them, write directly into their rules, so calendar a renewal reminder well before expiration; renewing means passing an accredited exam again, and provider choice is once more yours. If you did not pass, providers set their own retake policies and waiting periods, so check yours and target your weakest domain before rescheduling. Once certified, the credential is the floor rather than the ceiling: the Food Code expects the person in charge to run active managerial control daily, train staff on the employee health policy, and keep monitoring records inspectors can review. Many managers roll their momentum into allergen or HACCP training next, and multi-state operators should remember that a new jurisdiction may recognize the same certificate but apply different person-in-charge staffing rules.
CFPM flashcards
34 cards on the highest-yield terms and rules. Grading uses spaced repetition and saves in this browser.
Browse all 34 cards
Minimum cook temperature: poultry, stuffed meats, stuffed pasta
165°F (74°C), instantaneous. Applies to all poultry, stuffed fish/meat/pasta/poultry, stuffing containing meat, and wild game.
Minimum cook temperature: ground beef, ground pork, ratites, flaked fish
155°F (68°C) for 17 seconds. Covers all comminuted (ground, chopped, flaked) meats and fish, plus eggs pooled for later service.
Minimum cook temperature: whole-muscle meat, fish, eggs for immediate service
145°F (63°C) for 15 seconds. Covers intact steaks and chops, seafood fillets, and eggs broken to order for immediate service.
Whole meat roast alternative cook
Roasts may use time-temperature combinations from the Food Code chart, e.g., 145°F held 4 minutes; roasts may also be hot-held at 130°F or above instead of 135°F.
Cook temperature: plant foods for hot holding
135°F (57°C), no time component. Vegetables, grains, and legumes cooked to be hot-held only need to reach the holding temperature.
Microwave cooking of raw animal foods
Heat to 165°F in all parts, rotate or stir midway, keep covered, then let stand covered 2 minutes for temperature equilibrium.
Hot holding temperature
135°F (57°C) or above. Exception: properly cooked roasts may be held at 130°F or above.
Cold holding temperature
41°F (5°C) or less for all refrigerated TCS food.
Temperature danger zone
41°F to 135°F. Food safety rules exist to keep TCS food out of this range or strictly limit its time inside it.
Two-stage cooling clock
Stage 1: 135°F down to 70°F within 2 hours. Stage 2: down to 41°F or less within 6 hours total from the start. Miss stage 1? Reheat to 165°F and start over.
Cooling foods made from room-temperature ingredients (e.g., canned tuna salad)
Chill to 41°F or less within 4 hours of preparation. The 2-hour/6-hour curve applies only to food cooling down from cooking.
Approved cooling methods
Shallow pans; smaller/thinner portions; rapid-cooling (blast chiller) equipment; ice-water bath with stirring; containers that transfer heat well; ice as an ingredient. Never a deep, covered pot in the walk-in.
Reheating for hot holding
165°F in all parts, and the food may not spend more than 2 hours between 41°F and the target. Commercially processed, packaged RTE food needs only 135°F.
Reheating for immediate service
Food that was properly cooked and cooled may be reheated to any temperature if it is served immediately in response to an individual order.
Receiving temperatures
Cold TCS food: 41°F or below. Hot TCS food: 135°F or above. Raw shell eggs: ambient air 45°F or less. Frozen food: received frozen, no thaw-refreeze evidence (large ice crystals, frozen pooled liquid).
Milk received at 45°F under governing law
Acceptable when the law governing distribution allows it, but the establishment must cool it to 41°F or less within 4 hours.
Date marking rule
Refrigerated RTE TCS food held over 24 hours: mark and use or discard within 7 days at 41°F or less. Day of preparation (or day a commercial container is opened) counts as Day 1.
Handwashing: duration and steps
At least 20 seconds total: rinse under clean warm running water, apply soap, scrub vigorously 10-15 seconds (nails, between fingers), rinse, dry with approved method. Only at a designated handwashing sink.
Bare-hand contact rule
No bare-hand contact with exposed ready-to-eat food. Use deli tissue, spatulas, tongs, single-use gloves, or dispensing equipment. Washing produce is the main exception.
The Big Six reportable pathogens
Norovirus, hepatitis A virus, Shigella spp., Shiga toxin-producing E. coli (STEC), Salmonella Typhi (typhoid fever), nontyphoidal Salmonella. Diagnosis must be reported to the person in charge.
Exclude vs. restrict: key triggers
Exclude: vomiting, diarrhea, jaundice onset within 7 days, diagnosed hepatitis A or Salmonella Typhi. Restrict (general population): sore throat with fever. HSP establishments escalate restrictions to exclusions.
Return after vomiting/diarrhea (undiagnosed)
Symptom-free for at least 24 hours before returning to work. Diagnosed Big Six cases follow pathogen-specific criteria, often requiring regulatory authority approval.
The nine major food allergens
Milk, egg, fish, crustacean shellfish, tree nuts, wheat, peanuts, soybeans, sesame. Allergen proteins survive cooking; prevention is separation and clean equipment, not heat.
Raw protein storage order (top to bottom)
RTE food on top, then 145°F items (whole fish, whole cuts), then 155°F items (ground meats), then 165°F items (poultry) on the bottom. Order follows required cook temperature.
Approved thawing methods
1) Refrigeration at 41°F or less. 2) Submerged under running water at 70°F or below. 3) In a microwave, followed immediately by conventional cooking. 4) As part of the cooking process. Never on a counter.
TPHC time caps
4 hours: food starts at 41°F or below (or 135°F or above); serve or discard by the marked time. 6 hours: cold start at 41°F or below and food may never exceed 70°F. Written procedures and time marks required.
Chlorine sanitizer chart
50-99 ppm at water ≥75°F (pH 8 or less) or ≥100°F (pH 10 or less); 100 ppm at ≥55°F; 25-49 ppm only at ≥120°F. Verify with a chlorine test kit.
Quat and iodine sanitizer rules
Quat: concentration per the manufacturer's EPA-registered label (commonly ~200 ppm), water ≥75°F, hardness limits apply. Iodine: 12.5-25 ppm, water ≥68°F, pH 5.0 or less. Always verify with the matching test kit.
Manual warewashing: order and temperatures
Wash (detergent, ≥110°F) → rinse (clean water) → sanitize (chemical, or hot-water immersion at ≥171°F) → air dry. Never towel dry sanitized items.
Dish machine hot-water sanitizing rinse
180°F final rinse at the manifold for most machines; 165°F for stationary rack, single-temperature machines; do not exceed about 194°F or water vaporizes before contact.
Food-contact surface cleaning frequency
In continuous use with TCS food: clean and sanitize at least every 4 hours. Also between raw species requiring different cook temps, and always between raw and RTE tasks.
Thermometer quick facts
Calibrate by ice-point method to 32°F in an ice-water slush. Fahrenheit-only food thermometers must be accurate to ±2°F (±1°C for Celsius/dual). Probe the thickest part; use thin probes for thin foods.
Shellstock tags and storage basics
Keep shellfish tags 90 days from the date the last shellfish from that container was served. Store all food at least 6 inches off the floor, away from stairwells, mechanical rooms, and unshielded sewer lines.
HACCP: the seven principles in order
1) Hazard analysis 2) Identify CCPs 3) Set critical limits 4) Monitoring 5) Corrective actions 6) Verification 7) Records. Mnemonic: Hungry Cooks Cook Meals Consistently Very Rapidly.
CFPM glossary
26 terms the CFPM tests, defined in plain English.
- Active Managerial Control
- The deliberate, preventive approach in which management builds procedures, training, monitoring, and corrective systems around the known foodborne illness risk factors instead of reacting to inspections or complaints. It is the operational philosophy the CFPM credential exists to certify.
- Air Gap
- The unobstructed vertical space between a water supply outlet and the flood rim of a fixture or receptacle, required to be at least twice the supply inlet diameter and never less than 1 inch. It is the most reliable form of backflow prevention because nothing mechanical can fail.
- ANAB-CFP Accreditation
- The accreditation scheme under which the ANSI National Accreditation Board evaluates food protection manager certification programs against the Conference for Food Protection standards. A certificate from any accredited provider, such as ServSafe, NRFSP, Prometric, StateFoodSafety, or 360training, carries the same recognition.
- Approved Source
- A food supplier or origin that operates under applicable regulatory oversight and inspection. Food establishments may only use food from approved sources, which is why unlabeled products, home-prepared items, and unverifiable sellers must be refused at receiving.
- Big Six Pathogens
- The six highly infectious organisms whose diagnosis a food employee must report to the person in charge: norovirus, hepatitis A virus, Shigella spp., Shiga toxin-producing E. coli, Salmonella Typhi, and nontyphoidal Salmonella. Each triggers exclusion or restriction decisions.
- Certified Food Protection Manager (CFPM)
- A person who has demonstrated food safety proficiency by passing an examination that is part of a certification program accredited under the Conference for Food Protection standards. The FDA Food Code directs that the person in charge be a certified food protection manager, and most jurisdictions adopt some version of that requirement.
- Conference for Food Protection (CFP)
- A nonprofit body of regulators, industry, academia, and consumer representatives that develops the standards for accrediting food protection manager certification programs and channels recommendations into revisions of the FDA Food Code through its biennial meetings.
- Critical Control Point (CCP)
- A step in a food process where control can be applied and is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level, such as the cooking step for raw poultry or the cooling step for a cook-chill soup operation.
- Critical Limit
- The measurable boundary that separates acceptable from unacceptable at a critical control point, for example poultry reaching 165°F or cooked food dropping from 135°F to 70°F within 2 hours. Limits must be observable or measurable so monitoring can verify them.
- Cross-Contact
- The transfer of an allergenic protein from one food to another, for example through shared fryer oil, utensils, or prep surfaces. Unlike bacterial contamination, allergen residue is not destroyed by cooking, so prevention relies on separation, dedicated equipment, and full cleaning.
- Cross-Contamination
- The transfer of pathogens from a contaminated source, most often raw animal foods, soiled hands, or dirty equipment, to food that will not receive further pathogen-killing treatment. Controlled through separation, storage order, handwashing, and cleaning and sanitizing between tasks.
- Date Marking
- The required labeling of refrigerated ready-to-eat TCS food held more than 24 hours with the date by which it must be consumed, sold, or discarded: a maximum of 7 days at 41°F or less, counting the day of preparation or the day a commercial package is opened as Day 1.
- Exclusion
- The employee-health action that bars a food employee from the food establishment entirely, required for symptoms such as vomiting or diarrhea, for recent-onset jaundice, and for certain diagnosed infections. Reinstatement follows recovery criteria and, for some pathogens, regulatory approval.
- FAT TOM
- A memory aid for the six conditions bacteria need to grow: food, acidity, time, temperature, oxygen, and moisture. In day-to-day operations, time and temperature are the two factors a food manager can most practically control, which is why they anchor so many Food Code rules.
- FDA Food Code
- The model code published by the U.S. Food and Drug Administration for safeguarding public health in retail food service. It is not itself law; state, local, tribal, and territorial jurisdictions adopt it, sometimes with amendments, and the 2022 edition is the tenth. CFPM exam content tracks its provisions.
- FIFO (First In, First Out)
- The stock rotation method in which older product is shelved in front of newer deliveries so it is used first. FIFO keeps ingredients from aging past their use-by or discard dates unnoticed and is the standard rotation system for both dry storage and refrigeration.
- HACCP
- Hazard Analysis and Critical Control Point, a preventive food safety system built on seven ordered principles: hazard analysis, critical control points, critical limits, monitoring, corrective actions, verification, and record keeping. Required for certain variances and specialized processes.
- Highly Susceptible Population (HSP)
- People more likely than others to experience severe foodborne illness, such as preschool children, older adults, and immunocompromised individuals in care settings like hospitals and nursing homes. Establishments serving HSPs face stricter employee-health and menu rules.
- Major Food Allergen
- One of the nine foods federal law and the Food Code recognize as major allergens: milk, egg, fish, crustacean shellfish, tree nuts, wheat, peanuts, soybeans, and sesame. Staff must be able to answer ingredient questions accurately and prevent cross-contact for these foods.
- Person in Charge (PIC)
- The individual present at a food establishment who is responsible for the operation at the time of inspection, must demonstrate food safety knowledge, ensure employee health reporting and monitoring duties are performed, and under the Food Code must be a certified food protection manager.
- Ready-to-Eat (RTE) Food
- Food that is edible without additional washing or cooking to remove pathogens, such as deli meats, salads, baked goods, cooked items awaiting service, and washed produce. RTE food may not be touched with bare hands and must be protected from raw animal foods in storage.
- Restriction
- The lesser employee-health action that keeps a food employee at work but away from exposed food, clean equipment, utensils, and single-service articles. Applied, for example, to a worker with sore throat and fever in an establishment serving the general population.
- TCS Food
- Time/temperature control for safety food: a food requiring temperature control because it supports pathogen growth or toxin formation, such as meats, poultry, dairy, eggs, cooked rice and vegetables, cut melons, cut tomatoes, cut leafy greens, sprouts, and garlic-in-oil mixtures.
- Temperature Danger Zone
- The temperature range between 41°F and 135°F in which bacteria on TCS food multiply most rapidly. Cold holding at 41°F or below and hot holding at 135°F or above keep food outside this range, and cooling and reheating rules limit the time food spends passing through it.
- Time as a Public Health Control (TPHC)
- A written-procedure option that lets an operation hold TCS food without temperature control for a marked period: up to 4 hours starting from 41°F or below or 135°F or above, or up to 6 hours starting cold if the food never exceeds 70°F, with mandatory discard at the deadline.
- Variance
- A written document from the regulatory authority allowing a food establishment to deviate from a Food Code requirement, typically for specialized processes such as curing, smoking for preservation, reduced oxygen packaging, or sprouting seeds, usually alongside an approved HACCP plan.
Sources
- 1.FDA Food Code 2022 — Section 2-102.12 Certified Food Protection Manager — U.S. Food and Drug Administration (accessed Aug 14, 2026)
- 2.Conference for Food Protection — Manager Certification — Conference for Food Protection (accessed Aug 14, 2026)
- 3.Food Manager Certification — Florida Department of Health — Florida Department of Health (accessed Aug 14, 2026)
- 4.Food Manager Certification Examination and Training Program Providers — Porter County Health Department (Indiana, in.gov) (accessed Aug 14, 2026)
- 5.Food Code 2022 | FDA — U.S. Food and Drug Administration (accessed Aug 14, 2026)
Official sources
Every exam fact on this page traces to a primary document published by the body that administers the exam.
- FDA Food Code 2022 — Sections 3-501.14 Cooling and 3-501.16 Hot and Cold HoldingU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Sections 2-301.12 Handwashing and 3-202.11 Receiving TemperaturesU.S. Food and Drug Administrationfda.gov
- Conference for Food Protection — Manager CertificationConference for Food Protectionfoodprotect.org
- FDA Food Code 2022 — Allergen Definition, Bare-Hand Contact, and Cleaning FrequencyU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Sections 2-201.11 and 2-201.12 Employee HealthU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 4-501.114 Chemical SanitizationU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 3-403.11 Reheating for Hot HoldingU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 3-401.11 Raw Animal Foods (cooking temperatures)U.S. Food and Drug Administrationfda.gov
- Food Manager Certification — Florida Department of HealthFlorida Department of Healthfloridahealth.gov
- Food Code 2022 | FDAU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 3-501.19 Time as a Public Health ControlU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 3-501.17 Ready-to-Eat TCS Food, Date MarkingU.S. Food and Drug Administrationfda.gov
- FDA Food Code 2022 — Section 2-102.12 Certified Food Protection ManagerU.S. Food and Drug Administrationfda.gov
- Food Manager Certification Examination and Training Program ProvidersPorter County Health Department (Indiana, in.gov)in.gov
Last verified against the official exam content outline: