- The Exam at a Glance
- Domain Weights on One Screen
- The 12% Domains: Where the Points Live
- Business Continuity vs Disaster Recovery: Keep Them Straight
- Data Backup and System Recovery Essentials
- Activation and Exercises: The Last 16%
- Fees, Vouchers and Eligibility Cheat Lines
- Remote Proctoring Rules You Must Not Miss
- Renewal Math
- A Domain-Ordered Review Sequence
- Where the Credential Gets Used
- Quick-Answer FAQ
- The EDRP v4 exam (312-76) has 150 multiple-choice questions, a 4-hour limit, and a 70% passing score.
- Risk Assessment, Business Impact Analysis and Disaster Recovery Planning each carry 12%, or 18 questions apiece.
- Official EC-Council training is a qualifying route; self-study needs 2 years of security experience plus a USD 100 application.
- The RPS exam voucher is USD 450; the approved retake voucher is USD 249.
The Exam at a Glance
This page is a compressed review of the EC-Council Disaster Recovery Professional (EDRP) credential, built around the Version 4 exam, code 312-76. Everything here is specific to that exam and its current blueprint. If you are still deciding whether the credential suits you, start with What Is EDRP Certification?, then come back for the facts worth memorizing.
| Item | EDRP v4 Fact |
|---|---|
| Issuer | EC-Council |
| Exam code | 312-76 (EDRP Version 4) |
| Questions | 150 multiple-choice |
| Time allowed | 4 hours |
| Passing score | 70% |
| Delivery | ECC Exam Center / ECC Exam Portal, remote proctoring by the RPS team |
| Domains | 10 official content areas |
A 70% cut score on 150 questions means roughly 105 correct answers, but treat that as a planning figure rather than a guarantee, since the issuer's scoring details are what govern. For a deeper look at how the threshold works, see EDRP Passing Score 2026: Exactly What You Need to Pass.
Domain Weights on One Screen
The official blueprint lists ten domains. Memorize the weights, because they tell you how to allocate review time.
| Domain | Name | Weight |
|---|---|---|
| 1 | Foundations of Business Continuity and Disaster Recovery | 8% |
| 2 | Business Continuity Management | 10% |
| 3 | Risk Assessment | 12% |
| 4 | Business Impact Analysis | 12% |
| 5 | Business Continuity Plan | 10% |
| 6 | Disaster Recovery Planning | 12% |
| 7 | Data Backup and System Recovery | 10% |
| 8 | Disaster Recovery Plan Development | 10% |
| 9 | Business Continuity and Disaster Recovery Plan Activation | 8% |
| 10 | Business Continuity and Disaster Recovery Plan Activation Test, Training, and Exercise | 8% |
The weights sum to 100%. Three domains at 12% each (18 questions apiece) account for 36% of the exam, so roughly a third of your score comes from risk, impact analysis and recovery planning. The full breakdown of what each area expects is in EDRP Exam Domains 2026: Complete Guide to All 10 Content Areas.
The 12% Domains: Where the Points Live
Domain 3: Risk Assessment
Expect scenario questions that ask you to identify, analyze and prioritize threats to an organization's critical functions.
- Distinguish threats, vulnerabilities, assets and impact in a scenario.
- Know qualitative versus quantitative approaches and when each fits.
- Understand how risk treatment decisions (accept, mitigate, transfer, avoid) feed continuity planning.
Domain 4: Business Impact Analysis
The BIA is the bridge between risk and recovery strategy. Questions tend to test whether you know what the analysis produces and who consumes it.
- Know the recovery objectives a BIA establishes: recovery time objective (RTO), recovery point objective (RPO) and maximum tolerable downtime.
- Understand how critical business functions are identified and ranked by impact over time.
- Recognize dependencies: people, facilities, applications, data and suppliers.
Domain 6: Disaster Recovery Planning
This domain turns BIA outputs into recovery strategy decisions.
- Match recovery strategies to RTO and RPO targets rather than to cost alone.
- Know alternate-site concepts (hot, warm and cold) and the trade-offs between readiness and expense.
- Understand how cloud and hybrid recovery options fit into planning under the v4 scope.
Key Takeaway
Treat Domains 3, 4 and 6 as one chain: risk assessment finds what can go wrong, BIA measures what it costs, and DR planning chooses how fast and how completely to recover. Exam scenarios often hand you a fact from one link and ask for a decision in the next.
Business Continuity vs Disaster Recovery: Keep Them Straight
The exam title pairs the two disciplines, and many questions hinge on knowing which one a scenario describes. A reliable mental split:
- Business continuity keeps critical business functions operating, or restores them quickly, through any disruption. It is organization-wide and process-focused (Domains 2 and 5).
- Disaster recovery restores IT systems, applications and data after an incident. It is technology-focused (Domains 6, 7 and 8).
- Governance sits above both: management commitment, policy, roles and the program lifecycle (Domains 1 and 2).
If the foundational vocabulary still feels shaky, What Is EDRP? covers the baseline, and the Domain 1 and 2 material in the exam is largely definitional and program-management oriented.
Data Backup and System Recovery Essentials
Domain 7 carries 10% and is the most technical area of the blueprint. Be ready for questions that test whether a backup design satisfies a stated recovery objective.
Domain 7: Data Backup and System Recovery
Know how backup methods, storage locations and restoration processes combine to meet RPO and RTO.
- Compare full, incremental and differential backups by speed, storage use and restore complexity.
- Know why offsite and offline copies matter, and how replication differs from backup.
- Understand restoration testing: a backup that has never been restored is an assumption, not a control.
- Connect backup frequency to RPO and restore speed to RTO.
A quick calculation habit helps: if a scenario states a one-hour RPO, a nightly backup fails the requirement regardless of how reliable it is. Questions often hide the decisive number in the middle of the scenario text.
Plan Development and the Document Itself
Domain 8 (10%) focuses on building the disaster recovery plan as a document and a process. Expect emphasis on plan scope, roles and responsibilities, contact and escalation information, recovery procedures, and maintenance and version control. Domain 5 covers the same ground from the business continuity side, so study the two plan types together and note where their contents differ.
Activation and Exercises: The Last 16%
Domains 9 and 10 together carry 16% of the exam, and they are easy to under-study because they feel procedural. Do not skip them.
Domain 9: Plan Activation
Know what triggers a plan, who has authority to declare an event, and how communication and escalation work once activation begins.
- Distinguish an incident from a disaster declaration and the criteria behind each.
- Understand activation phases and the handoff from response to recovery to return to normal operations.
Domain 10: Testing, Training and Exercises
Know the range of exercise types and what each proves.
- Compare walkthroughs, tabletop exercises, simulations and full-interruption tests by realism, cost and operational risk.
- Understand why plans must be tested, how lessons learned feed plan updates, and how staff training supports readiness.
These two domains reward candidates who think like program managers: every test should have objectives, a defined scope, documented results and corrective actions.
Fees, Vouchers and Eligibility Cheat Lines
| Item | Fact |
|---|---|
| RPS exam voucher | USD 450; nontransferable; valid one year from release |
| Retake voucher (RPS) | USD 249; subject to EC-Council retake approval and policy |
| Self-study eligibility application | USD 100, nonrefundable; included in official training fees |
| Self-study experience requirement | 2 years of information-security experience |
| Verifier | A boss, supervisor or department lead |
| Voucher purchase window after approval | Within 3 months |
| E-courseware (separate listing) | USD 650; study material, not the exam fee |
The most common point of confusion is the e-courseware price. It is learning material, not a substitute for or an addition to the exam voucher in the way the fee table might suggest, so read product pages carefully before budgeting. For the full pricing picture, including how training bundles change the math, see EDRP Certification Cost 2026: Complete Pricing Breakdown.
Two Routes to Qualify
- Official training route: Completing official EC-Council training or an official courseware bundle qualifies you. The preparation program is a 5-day live course, and that duration is separate from the 4-hour exam.
- Self-study route: Submit the eligibility application with the USD 100 fee, name a verifier, document 2 years of information-security experience, and wait for EC-Council approval. Then buy your voucher within 3 months.
Full prerequisite details are in EDRP Requirements 2026: Eligibility, Prerequisites & How to Qualify, and the issuer's own wording lives in the Application Process Eligibility section on the EC-Council site.
Remote Proctoring Rules You Must Not Miss
The exam is delivered with remote proctoring by the RPS team through the ECC Exam Portal. The conditions in the ECC Exam Center and Remote Proctoring Services user guide are strict, and a violation can end the attempt.
- The exam is closed book.
- Calculators, reference notes, and assistance websites or software are prohibited.
- A webcam and one monitor are required.
- You may use one pen or pencil and two scratch sheets; the sheets are destroyed after the exam.
For scheduling windows and deadlines, check EDRP Exam Dates 2026: Testing Windows, Deadlines & Scheduling, and remember that your voucher's one-year validity clock starts at release, not at your first study session.
Renewal Math
Earning the credential is not the end of the fee schedule. EC-Council's continuing education policy works as follows:
- 120 CPE credits within a 3-year cycle (legacy wording calls these ECE credits).
- USD 80 annual CE fees.
- Paying the annual fee extends the certificate expiry year by year, but completing the credit requirement remains necessary for the next cycle.
Over a full 3-year cycle the annual fees add up to USD 240, on top of the effort of logging 120 credits. Disaster recovery work tends to generate credit-eligible activity naturally, such as running exercises, attending conferences and delivering training, so keep records as you go rather than reconstructing them at the end.
A Domain-Ordered Review Sequence
You do not need a long generic plan, just an order that follows the logic of the blueprint. Each step builds on the one before.
Foundations and Governance (Domains 1, 2)
- Lock down terminology and program structure first; every later domain assumes it.
Risk and Impact (Domains 3, 4)
- Spend extra time here: 24% of the exam, and the outputs feed everything after.
Plans and Strategy (Domains 5, 6, 8)
- Study the BCP and DRP side by side to keep their scopes distinct.
Technical Recovery and Execution (Domains 7, 9, 10)
- Finish with backup design, activation and exercises, then take timed practice sets across all ten domains.
For a fuller preparation approach, including resources and how to pace review around your own schedule, read EDRP Study Guide 2026: How to Pass on Your First Attempt. To calibrate how demanding the material is before committing, see How Hard Is the EDRP Exam? Complete Difficulty Guide 2026. When you are ready to test recall under realistic conditions, the EDRP practice tests let you drill scenario questions by domain.
Where the Credential Gets Used
The EDRP maps to roles where continuity and recovery are part of the job description. Typical settings include IT operations and infrastructure teams responsible for restoring systems, information security and risk functions that run assessments and BIAs, business continuity and resilience offices, compliance and audit groups reviewing plan adequacy, and consultancies that build recovery programs for clients. Organizations in regulated sectors tend to care most, since regulators expect documented, tested recovery capability.
Hiring demand and pay vary by region, employer and seniority, so rely on current job postings rather than any single figure. For role listings and typical titles, see EDRP Jobs, and for compensation context see EDRP Salary Guide 2026: Complete Earnings Analysis. If you are weighing the investment, Is the EDRP Certification Worth It? Complete ROI Analysis 2026 lays out the trade-offs.
Quick-Answer FAQ
The 312-76 exam has 150 multiple-choice questions with a 4-hour time limit. The passing score is 70%.
Risk Assessment, Business Impact Analysis and Disaster Recovery Planning each carry 12%, which is 18 questions apiece. Together they make up 36% of the exam.
The RPS voucher is USD 450, nontransferable and valid for one year from release. An approved RPS retake voucher is USD 249, subject to EC-Council retake approval and policy.
Yes, through the self-study route. You need 2 years of information-security experience, a supervisor or department-lead verifier, a USD 100 nonrefundable application, and EC-Council approval. Approved applicants must buy their voucher within 3 months.
The exam is closed book. Calculators, reference notes and assistance sites or software are prohibited. You need a webcam and one monitor, and you may use one pen or pencil and two scratch sheets, which are destroyed afterward.
Earn 120 CPE credits within each 3-year cycle and pay the USD 80 annual CE fee. Paying the fee extends expiry annually, but the credit requirement still has to be completed for the next cycle.