DRI Study Guide 2026
Everything you need to pass the DRI exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 DRI Exam Format at a Glance
📚 DRI Topics to Study (78)
✍️ Sample DRI Questions & Answers
1. What is the 'stage 1 audit' in the ISO 22301 certification process and what does it assess?
The Stage 1 audit is a documentation review and readiness assessment conducted by the certification body to evaluate whether the BCMS is sufficiently developed and implemented to proceed to the Stage 2 on-site certification audit.
2. Which NIMS component establishes standardized resource management practices such as typing, credentialing, and inventorying?
NIMS Resource Management establishes standard mechanisms to identify, acquire, allocate, and track resources during incidents.
3. An organization experiences a data breach affecting customer records. Under GDPR, what is the maximum timeframe for notifying the supervisory authority?
GDPR Article 33 requires that a personal data breach be reported to the relevant supervisory authority within 72 hours of the organization becoming aware of it.
4. Which element of a crisis communication plan defines who is authorized to speak to the media on behalf of the organization?
A spokesperson policy designates authorized individuals and alternates, ensuring that only trained, approved personnel communicate with media during a crisis.
5. Which of the following regulations is critical in disaster recovery?
The General Data Protection Regulation (GDPR) is critical in disaster recovery because it imposes strict requirements for protecting personal data. Organizations must ensure that their data recovery plans comply with GDPR principles, such as data integrity, confidentiality, and the lawful processing of personal information, even after a disruptive event. Non-compliance can lead to significant fines and reputational damage.
6. A company decides to split operations between two active data centers so each can absorb the other's load if one fails. This strategy is called:
An active-active configuration means both sites run production workloads simultaneously and can absorb each other's traffic if one fails, with near-zero downtime.