- How the Nine Content Areas Are Organized
- Exam Format That Shapes How You Study
- Domains 1-3: Foundations and Planning
- Domains 4-5: Recovery Strategies and Resiliency
- Domains 6-8: Implementation, Testing, and Maintenance
- Domain 9: Pandemics
- Sequencing the Domains Over Several Weeks
- Where the Skills Apply and Who Values Them
- Frequently Asked Questions
- C)DRE preparation follows nine published Mile2 course modules, from Introduction through Pandemics.
- Mile2 has not published official domain weights, so no domain should be treated as "the big one."
- The exam is 100 multiple-choice questions in about two hours, with a 70% minimum to pass.
- Business Impact Analysis feeds nearly every later domain, so master it before moving to design and strategy.
How the Nine Content Areas Are Organized
The Certified Disaster Recovery Engineer credential from Mile2 is built around a nine-module course outline. Those modules are the closest thing to a public map of what you need to know: Introduction, Business Impact Analysis, BCP and DRP Design, IT Recovery Strategies, IT Resiliency, Implementation Phase, Testing and Exercise, Maintenance and Execution, and Pandemics.
One point needs to be clear before you plan anything. The outline is a course structure, not a weighted exam blueprint. Mile2 has not publicly stated how many questions come from each module, which module is largest, or even whether the exam is formally divided into nine scored domains. Any site claiming "Domain 4 is 22% of the exam" is inventing a figure. This guide treats the nine modules as unweighted preparation topics and tells you where the material builds on itself, so you can allocate time sensibly without relying on made-up percentages.
If you are still orienting yourself on the credential itself, the explainer on what C)DRE certification is covers the basics, and the C)DRE requirements guide walks through eligibility.
Exam Format That Shapes How You Study
The format facts that Mile2 publishes are limited, but they are enough to plan around.
| Item | What Is Published |
|---|---|
| Question count | 100 multiple-choice questions |
| Time allowed | Approximately 2 hours (course outline and general FAQ both indicate this) |
| Passing score | Minimum 70% |
| Delivery | Through Mile2's own online account/LMS, historically called MACS |
| Proctoring | Most standard Mile2 exams do not require a scheduled live proctor; C)DRE is not a named exception |
| Exam combo listing | Promotional US$500 versus US$795 list; includes two attempts and prep resources |
| Prerequisites | Twelve months each in Information Systems and Information Systems Management are suggested, not mandatory |
| Training | Four-day course awards 32 CEUs; not required to attempt certification |
A few details are not publicly verified: the split between scored and unscored questions, open-book or calculator rules, whether the exam is adaptive, and accommodation procedures. Check your Mile2 account for current rules before test day rather than relying on forum posts. For the scoring threshold in more depth, see the C)DRE passing score breakdown, and for money questions, the C)DRE certification cost guide.
Domains 1-3: Foundations and Planning
The first three modules establish vocabulary and the analytical groundwork that everything else depends on. Candidates who rush through these tend to struggle later, because later modules assume you already think in terms of impact, priority, and plan structure.
Domain 1: Introduction
Introduction
This module frames disaster recovery and business continuity as distinct but related disciplines and sets the vocabulary used throughout the course.
- Distinguish disaster recovery from business continuity and know which one focuses on technology restoration
- Understand why organizations plan for disruption and what a disaster actually means in planning terms
- Learn the terminology you will see repeatedly in later modules, since exam wording often depends on precise definitions
- Recognize the general lifecycle of a continuity and recovery program
Do not treat this as a throwaway section. Many wrong answers on later questions come from confusing two similar terms that were defined here.
Domain 2: Business Impact Analysis
Business Impact Analysis
The BIA is the analytical engine of recovery planning. It identifies what the organization does, what depends on what, and what happens when each function stops.
- Identify critical business functions and the processes, systems, and people that support them
- Understand how downtime translates into operational, financial, legal, and reputational impact
- Know how recovery time and recovery point objectives are derived from impact, not chosen arbitrarily
- Map dependencies so that a recovery order can be justified
- Understand risk assessment as a companion activity and how it differs from impact analysis
This is arguably the most connective module in the course. The recovery objectives you derive here drive the strategy choices in Domain 4, the architecture decisions in Domain 5, and the test criteria in Domain 7. When a question asks why a particular recovery approach was selected, the answer usually traces back to BIA output.
Domain 3: BCP and DRP Design
BCP and DRP Design
With impact understood, this module covers how to structure the plans themselves.
- Know the components of a business continuity plan versus a disaster recovery plan, and how they relate
- Understand plan scope, assumptions, roles, and responsibilities
- Recognize the role of management commitment, governance, and defined teams in plan design
- Understand how communication and escalation are built into the plan before an event occurs
- Know how plans are documented so they are usable under stress
Expect scenario questions that describe a gap in a plan and ask what is missing. Studying plan components as a checklist, then asking "what breaks if this element is absent," is a more effective approach than rereading definitions.
Domains 4-5: Recovery Strategies and Resiliency
These two modules are the most technical in the sequence. They turn the objectives from the BIA into actual technology choices.
Domain 4: IT Recovery Strategies
IT Recovery Strategies
This module covers the range of options for restoring systems, data, and infrastructure, and how to match an option to a recovery objective.
- Compare recovery site models and their tradeoffs in cost versus recovery speed
- Understand backup approaches, data replication concepts, and how data protection choices affect the recovery point
- Match strategies to tiers of system criticality rather than applying one approach everywhere
- Consider network, application, and end-user recovery as part of the whole, not just servers
- Understand vendor, outsourcing, and cloud considerations in a recovery context
The central skill is matching: a tight recovery time objective rules out slower, cheaper options, and a loose one makes expensive options hard to justify. If you can explain the cost-versus-speed logic out loud, you are in good shape for this domain.
Domain 5: IT Resiliency
IT Resiliency
Where recovery strategies assume something has failed, resiliency is about designing systems so failure has less effect to begin with.
- Distinguish resilience (absorbing failure) from recovery (restoring after failure)
- Understand redundancy, fault tolerance, and high availability concepts at a design level
- Recognize single points of failure and how to identify them
- Understand how resiliency investments connect back to the criticality ratings from the BIA
Key Takeaway
Domains 4 and 5 are easy to blur together. Keep one rule in mind: strategies describe how you get back after an outage, while resiliency describes how you avoid or shorten the outage. Practice sorting scenarios into one bucket or the other.
Domains 6-8: Implementation, Testing, and Maintenance
The back half of the outline moves from planning into the operational life of a program. These modules are where many experienced IT professionals feel at home, and where candidates without hands-on program experience should slow down.
Domain 6: Implementation Phase
Implementation Phase
Turning approved plans into working capability.
- Understand the steps involved in moving from a designed plan to an operational one
- Know the importance of training and awareness so that people know their roles before an event
- Recognize the dependencies between procurement, configuration, documentation, and staffing
- Understand how implementation is tracked and validated against the plan
Domain 7: Testing and Exercise
Testing and Exercise
A plan that has never been tested is an assumption. This module covers how organizations validate their plans.
- Know the progression of exercise types, from simple walkthroughs to more realistic simulations
- Understand test objectives, scope, and success criteria, and how they connect to recovery objectives
- Know what to do with results: documenting findings and feeding corrections back into the plan
- Understand the risks of testing in a live environment and how they are managed
Questions here often ask which type of exercise is appropriate for a stated goal or maturity level. Learn the exercise types as a ladder, noting what each adds in realism and risk.
Domain 8: Maintenance and Execution
Maintenance and Execution
Plans decay as systems, staff, and business priorities change. This module covers keeping plans current and carrying them out when an event occurs.
- Understand change management triggers that should prompt plan updates
- Know the cadence and ownership of plan reviews
- Understand the phases of executing a plan during an actual event, including declaration, activation, and return to normal operations
- Recognize the role of post-incident review in improving the program
Domain 9: Pandemics
The final module is the most unusual. Most continuity material focuses on facility loss, system failure, or natural disaster. A pandemic is a different shape of disruption: instead of a location or system going down, the organization loses availability of people, often for an extended and uncertain period.
Pandemics
Planning for prolonged, people-centered disruption.
- Understand how a pandemic differs from a localized disaster in duration, scope, and effect on staffing
- Consider remote work, workforce dependency, and cross-training as continuity measures
- Understand how critical functions are prioritized when staffing is constrained
- Recognize the communication and supplier-dependency issues that arise in a widespread event
Because this module deals with a distinct scenario type, give it its own review block rather than assuming general continuity knowledge will carry you. A recovery site does little good when the constraint is that staff cannot travel or work on-site.
Sequencing the Domains Over Several Weeks
Since Mile2 publishes no weighting, a sensible schedule follows the dependencies between modules rather than guessed importance. Here is one way to pace roughly six weeks; adjust for your own experience.
Introduction and Business Impact Analysis
- Lock down terminology so later modules read cleanly
- Work through how impact leads to recovery objectives
BCP and DRP Design
- Build a checklist of plan components and what fails without each
IT Recovery Strategies and IT Resiliency
- Practice matching strategies to objectives and sorting recovery from resiliency scenarios
Implementation, Testing and Exercise, Maintenance and Execution
- Study these as one lifecycle loop
Pandemics and cross-domain review
- Review the people-centered scenario type, then revisit weak earlier modules
Timed practice
- Simulate the 100-question, roughly two-hour format and review misses by module
For a fuller plan, including resources and pacing, read the C)DRE study guide. If you want a compact refresher near exam day, the C)DRE cheat sheet condenses the must-know facts. Timed drills are available on the C)DRE practice test site, where you can check your recall against exam-style multiple-choice questions.
Where the Skills Apply and Who Values Them
The nine modules map to work that appears in several kinds of roles: IT operations and infrastructure teams responsible for restoring services, risk and compliance functions that document and audit continuity programs, and consultants or program managers who build and maintain disaster recovery and business continuity plans. Organizations in regulated or availability-sensitive sectors tend to care most about demonstrable recovery planning skills, though specific hiring patterns vary by employer.
The suggested background, twelve months each in Information Systems and Information Systems Management, hints at the intended audience: people who already work with systems and have some exposure to managing them. If you are weighing career impact, the C)DRE ROI analysis and the overview of C)DRE jobs go deeper than this domain-focused guide. Salary specifics are covered separately in the C)DRE salary guide.
It is also worth knowing the credential is valid for three years. Renewal can happen through a CEU path requiring 60 CEUs, commonly spread as 20 per year, along with an ethics/policy acknowledgment and a US regional renewal fee of $200, or through examination-based renewal as an alternative. The four-day course itself awards 32 CEUs, which gives a head start on that total.
Frequently Asked Questions
Mile2's course outline contains nine modules, and preparation follows those nine. However, Mile2 has not publicly verified an official exam-domain count or weighting, so treat the nine as unweighted preparation topics rather than a formal scoring blueprint.
That is not publicly disclosed. Percentages circulating online are not from a verified Mile2 source. A safer approach is to prepare all nine modules, giving extra attention to Business Impact Analysis because its outputs shape several later modules.
The exam is 100 multiple-choice questions over approximately two hours, with a minimum of 70% required to pass. The split between scored and unscored questions is not disclosed.
No. Training is not required to attempt certification. The four-day course is available and awards 32 CEUs, and the exam combo listing includes two attempts and prep resources, but the course itself is optional.
Difficulty depends heavily on your background in recovery planning. The C)DRE difficulty guide discusses this, and the pass rate article explains why no official candidate pass rate is available.