- What You're Actually Preparing For
- Exam Mechanics: Format, Fees, and Testing
- The Nine-Module Map
- Mastering Business Impact Analysis and BCP/DRP Design
- Recovery Strategies and IT Resiliency
- Implementation, Testing, and Maintenance
- Don't Skip Pandemics
- A Domain-Driven Study Sequence
- Where the Credential Fits Professionally
- Frequently Asked Questions
- The exam is 100 multiple-choice questions in about two hours, with a minimum 70% required to pass.
- Mile2's published outline lists nine course modules; it is not an official weighted exam blueprint.
- Training is not required to attempt the exam, though the four-day course earns 32 CEUs.
- The Exam Combo is listed at a US$500 promotional price versus US$795 list, with two attempts included.
What You're Actually Preparing For
The Certified Disaster Recovery Engineer, styled C)DRE, is a Mile2 credential. It tests whether you can take an organization from "we hope nothing breaks" to a documented, tested, maintainable recovery capability. That is a lifecycle skill, not a trivia skill, and it shapes how you should study.
Many candidates make the mistake of treating this as a pure memorization exam. The questions reward people who understand why a step comes where it does in the continuity lifecycle. If you can explain why a Business Impact Analysis must precede strategy selection, you will answer scenario questions faster than someone who memorized definitions in isolation. If you are still deciding whether the credential suits you, our guide to what C)DRE certification is covers the basics, and the ROI analysis helps you weigh the investment.
Exam Mechanics: Format, Fees, and Testing
Format and passing threshold
The exam consists of 100 multiple-choice questions. Mile2's course outline and general FAQ both point to roughly two hours of testing time. You need a minimum of 70% to pass. Mile2 does not disclose how many questions are scored versus unscored, so assume every question matters and do not try to guess which ones "don't count." For a deeper look at scoring, see our breakdown of the C)DRE passing score.
At two hours for 100 questions, you have a little over a minute per question. That is comfortable for knowledge-recall items and tighter for longer scenario stems. Practice reading scenarios quickly and identifying the one detail that decides the answer, such as a stated recovery time requirement or a dependency that was overlooked.
Where and how you test
Testing runs through Mile2's own online account and learning platform, historically called MACS. No external testing company was verified. Most standard Mile2 exams do not require a scheduled live proctor, and C)DRE is not a named exception. However, specific rules around open-book use, calculators, adaptive testing, and accommodations were not verified in public sources. Confirm those details directly with Mile2 before exam day rather than assuming. Our page on C)DRE exam dates and scheduling tracks what is known about timing.
Cost structure
| Item | What the sources show |
|---|---|
| Exam Combo promotional price | US$500 |
| Exam Combo list price | US$795 |
| Attempts included | Two, plus prep resources |
| Member/non-member split | Not part of this listing |
| Checkout price | Not verified; confirm at purchase |
Because the checkout price was not verified, treat the US$500 figure as a listing, not a guarantee. The two included attempts reduce the pressure of a single high-stakes sitting, but plan to pass the first time anyway. Full cost context is in our C)DRE certification cost breakdown.
Eligibility
Mile2 suggests twelve months of experience in Information Systems and twelve months in Information Systems Management. These are suggestions, not mandatory prerequisites, and training is not required to attempt certification. If you lack that background, budget extra time for infrastructure and governance vocabulary. See C)DRE requirements for the full picture.
The Nine-Module Map
Mile2's current course outline is undated and contains nine modules. Importantly, it is a course structure, not a verified weighted exam blueprint. The exam-version year, official domain count, domain percentages, and largest domain are all unverified. That means you cannot reliably prioritize by percentage, so aim for balanced competence with deeper investment in the foundational modules. The nine areas are:
- Introduction
- Business Impact Analysis
- BCP and DRP Design
- IT Recovery Strategies
- IT Resiliency
- Implementation Phase
- Testing and Exercise
- Maintenance and Execution
- Pandemics
Read together, these form a lifecycle: understand the discipline, analyze impact, design the plan, choose recovery approaches, build resiliency, implement, test, maintain, and account for a special-case threat. For a module-by-module treatment, see the C)DRE exam domains guide.
Mastering Business Impact Analysis and BCP/DRP Design
Domain 1: Introduction
Introduction
This module establishes the vocabulary the rest of the exam assumes. Do not rush it.
- Distinguish business continuity planning from disaster recovery planning and know how they relate.
- Understand the lifecycle view of continuity as an ongoing program, not a one-time document.
- Learn the standard terminology so scenario questions do not trip you on wording.
Domain 2: Business Impact Analysis
Business Impact Analysis
The BIA is the analytical engine of the whole discipline. Its outputs justify every recovery investment that follows.
- Identify critical business functions and the processes, systems, and people they depend on.
- Understand recovery time and recovery point objectives and how they derive from impact, not from technology preferences.
- Recognize how downtime costs, regulatory exposure, and reputational harm feed prioritization.
- Practice tracing a dependency chain from a business function down to its supporting infrastructure.
Expect scenario questions that hand you a set of business facts and ask which function to restore first, or which objective is inconsistent with the stated impact. If you can reason from impact to priority, these become straightforward.
Domain 3: BCP and DRP Design
BCP and DRP Design
Design translates BIA findings into a documented plan.
- Know the components of a continuity plan and a disaster recovery plan and who owns each.
- Understand plan scope, assumptions, activation criteria, and escalation paths.
- Be able to explain how roles, communication procedures, and decision authority are defined before a crisis.
Recovery Strategies and IT Resiliency
Domain 4: IT Recovery Strategies
This module is where technical judgment is tested. You should be able to match a recovery approach to a stated objective and constraint. Study the spectrum of site and infrastructure options, the tradeoff between cost and recovery speed, and how data protection methods align with recovery point requirements. A frequent exam pattern gives you a tight recovery time and a limited budget and asks which strategy fits. The right answer usually respects the BIA-derived objective first and cost second.
Domain 5: IT Resiliency
Resiliency is about reducing the likelihood and impact of failure before a disaster occurs. Review redundancy, fault tolerance, high availability design, and the idea of eliminating single points of failure. Be clear on the difference between resiliency, which prevents or absorbs disruption, and recovery, which restores service after it. Mixing these up is a common source of lost points.
Key Takeaway
Anchor every recovery or resiliency question to the objective stated in the scenario. The correct choice almost always satisfies the required recovery time and recovery point first, then optimizes for cost or simplicity.
Implementation, Testing, and Maintenance
Domain 6: Implementation Phase
Implementation turns the designed plan into operating reality: procuring and configuring recovery capabilities, documenting procedures, assigning and training personnel, and establishing communications. Questions here tend to ask what should happen next in a rollout or what a gap in readiness looks like.
Domain 7: Testing and Exercise
Testing and Exercise
A plan that has never been exercised is an assumption. Expect to distinguish among exercise types by purpose and disruption level.
- Know the progression from document review and walkthrough to simulation and full-scale exercises.
- Understand what each type validates and what risk it introduces to production.
- Recognize that test results must feed back into plan updates.
Domain 8: Maintenance and Execution
Plans decay as systems, staff, and business priorities change. This module covers keeping the plan current through change management, periodic review, and training, as well as how the plan is executed during a real event. Pay attention to triggers that should force a plan update, such as new systems, organizational changes, or lessons learned from an incident or exercise.
Don't Skip Pandemics
It is tempting to treat the final module as an afterthought. Resist that. Pandemic planning is a distinct continuity problem because the threat is to people and workforce availability instead of facilities or systems. Study how workforce absence, remote operation, supply chain disruption, and extended duration change planning assumptions compared with a localized outage. Because the exam draws from all nine modules, a candidate who ignores this one gives away easy points.
A Domain-Driven Study Sequence
Rather than a generic schedule, sequence your preparation so each module builds on the previous one. This mirrors the plan lifecycle and keeps dependencies clear. Adjust the length to your experience; the point is the order.
Introduction and Business Impact Analysis
- Lock down terminology and the BCP versus DRP distinction.
- Work through BIA examples until you can derive objectives from impact.
BCP/DRP Design and IT Recovery Strategies
- Map plan components to owners and activation criteria.
- Practice matching strategies to stated recovery objectives.
IT Resiliency and Implementation
- Separate prevention-oriented resiliency from restoration-oriented recovery.
- Review rollout steps, training, and communication setup.
Testing, Maintenance, Pandemics, and Full Review
- Memorize exercise types and what each validates.
- Cover pandemic planning, then take timed 100-question practice sets.
In the final stretch, simulate the real conditions: 100 questions in about two hours, aiming comfortably above the 70% line. Review every miss by asking which lifecycle stage the question belonged to. That habit exposes whether your weakness is analytical, design-oriented, or operational. Our C)DRE cheat sheet works well for last-day review, and how hard the exam is sets realistic expectations. Pair these with timed sets on our C)DRE practice test platform to build pacing.
Where the Credential Fits Professionally
Disaster recovery and continuity skills are valued wherever downtime carries real cost: IT operations, infrastructure and data center teams, security and risk groups, and consulting or managed-service providers who build and test recovery programs for clients. Roles that benefit include disaster recovery analysts, continuity planners, infrastructure engineers, and IT managers responsible for service availability. Public sources reviewed did not give verified salary figures for this credential, so we avoid quoting numbers; see the C)DRE salary guide and C)DRE jobs for qualitative context.
Keeping the credential current
The certification is valid for three years. The CEU renewal path requires 60 CEUs, commonly earned at 20 per year, plus an ethics and policy acknowledgment and a US regional renewal fee of $200. Examination-based renewal is an alternative. The four-day course carries 32 CEUs, which can give you a head start on those requirements if you take it. For training options, see C)DRE training.
Frequently Asked Questions
The exam has 100 multiple-choice questions to complete in roughly two hours. A minimum of 70% is required to pass. Mile2 does not publicly disclose how many questions are scored versus unscored.
No. Training is not required to attempt certification. Mile2 suggests twelve months each in Information Systems and Information Systems Management, but these are suggestions rather than mandatory prerequisites. The four-day course does award 32 CEUs if you choose to take it.
Start with Introduction and Business Impact Analysis. The BIA produces the objectives and priorities that drive design, recovery strategy, testing, and maintenance, so understanding it makes every later module easier.
Not that could be verified. Mile2 publishes a nine-module course outline, but it is not a weighted exam blueprint. Study all nine areas and avoid trusting claims about exact percentages.
Mile2 does not publicly disclose a candidate pass rate. See our pass rate analysis for what can and cannot be said from available information.