EXAM PRACTICE QUESTIONS AND ANSWERS: THE MOST
RECENT AND COMPREHENSIVE VERSION WITH VERIFIED
ANSWERS; GUARANTEED PASS WITH INSTANT PDF
DOWNLOAD.
Exam Overview
This 150-question multiple-choice examination is designed to comprehensively assess competence in
Disaster Recovery and Business Continuity Management (BCM) consistent with the professional
practices of the Disaster Recovery Institute International (DRI).
The exam reflects real-world practice, professional standards, governance frameworks, ethical
obligations, and applied decision-making required of certified professionals.
This examination covers:
Business Continuity Management (BCM) lifecycle
Risk Assessment and Risk Management
Business Impact Analysis (BIA)
Continuity Strategies
Incident Management & Crisis Management
Emergency Response & Life Safety
Plan Development and Documentation
Training, Testing, and Exercising
Crisis Communications
Third-Party & Supply Chain Resilience
IT Disaster Recovery
Cyber Incident Response Integration
Governance, Compliance & Regulatory Requirements
Ethics and Professional Conduct
Program Management & Continuous Improvement
Auditing and Maturity Assessment
Global Standards Alignment (ISO-aligned practices, regulatory integration)
1. The primary objective of a Business Continuity Management (BCM) program is
to:
A. Eliminate all organizational risks
B. Guarantee uninterrupted operations under all conditions
C. Reduce insurance premiums
,D. Ensure the organization can continue critical operations during and after a
disruption
Rationale: BCM focuses on maintaining critical functions at acceptable levels
following disruptions, not eliminating all risks or guaranteeing zero interruption.
2. A Business Impact Analysis (BIA) primarily identifies:
A. Threat likelihood
B. Vulnerability ratings
C. Operational and financial impacts of disruptions
D. Insurance coverage limits
Rationale: The BIA assesses consequences of interruption including financial,
operational, legal, and reputational impacts.
3. Maximum Tolerable Downtime (MTD) refers to:
A. The shortest recovery time achievable
B. The time to rebuild infrastructure
C. The maximum duration a process can be unavailable before unacceptable
impact occurs
D. The average system outage duration
Rationale: MTD defines the outer boundary of survivability for a business
function.
,4. A Risk Assessment differs from a BIA because it:
A. Measures financial losses only
B. Evaluates threats, vulnerabilities, and likelihood of occurrence
C. Focuses solely on IT systems
D. Determines training requirements
Rationale: Risk Assessment analyzes probability and exposure; BIA evaluates
impact.
5. During a regional flood, a company activates alternate site operations within
four hours. This timeframe most closely reflects:
A. MTD
B. Recovery Time Objective (RTO)
C. Recovery Point Objective (RPO)
D. Service Level Agreement (SLA)
Rationale: RTO defines targeted restoration time.
6. Recovery Point Objective (RPO) defines:
A. System uptime requirement
B. Maximum outage duration
C. Maximum acceptable data loss measured in time
D. Backup media lifespan
Rationale: RPO measures acceptable data loss interval.
, 7. Which stakeholder has ultimate accountability for BCM governance?
A. IT Director
B. Risk Manager
C. Executive Leadership/Board
D. HR Manager
Rationale: Governance accountability resides with executive leadership.
8. A pandemic affecting workforce availability primarily impacts:
A. Physical infrastructure
B. IT redundancy
C. Human resource continuity planning
D. Insurance compliance
Rationale: Pandemic planning addresses workforce continuity.
9. The first action during life-threatening emergencies should be:
A. Activate recovery team
B. Contact insurance provider
C. Assess financial exposure
D. Ensure life safety and emergency response activation
Rationale: Life safety is always the top priority.