I85PREP
⌘ K
EXIN CDCS study materials
EXIN CDCS study resources

EXIN CDCS practice questions

One question at a time. Build your EXIN CDCS understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1EXIN CDCS

In a data centre, which term describes the maximum acceptable length of time a business process may be unavailable after a disruption before its impact becomes unacceptable?

  1. Recovery point objective (RPO)
  2. Recovery time objective (RTO)
  3. Maximum tolerable period of disruption (MTPD) Correct answer.
  4. Service level agreement (SLA) target

Explanation

The MTPD is a business-level statement of how long a process can be disrupted before the consequences become unacceptable; it is derived from business impact analysis. RTO and RPO are technical recovery targets set inside the MTPD, and an SLA is a contractual service commitment rather than a business tolerance limit.

Question 2EXIN CDCS

Which statement best describes the purpose of a business impact analysis (BIA) within a business continuity management system?

  1. It verifies that backup tapes can be restored within the agreed window.
  2. It defines the technical configuration baseline for production servers.
  3. It ranks processes by the consequences of their disruption and sets recovery priorities. Correct answer.
  4. It identifies the likelihood and velocity of specific threat events.

Explanation

A BIA works from the process side: it determines the operational and financial consequences of disruption over time and uses that to prioritise recovery. Threat likelihood and velocity belong to risk assessment, while restore testing and configuration baselines are technical assurance activities that follow from the BIA outputs.

Question 3EXIN CDCS

An organisation classifies a facility as Tier III under a commonly used data centre topology scheme. What does this classification primarily indicate?

  1. The facility is fully fault tolerant with no single point of failure at any distribution path.
  2. The facility is designed so that any single component failure causes no interruption and concurrent maintainability is guaranteed.
  3. The facility has redundant capacity components and multiple independent distribution paths, but some maintenance requires shutdown of a path. Correct answer.
  4. The facility has a single non-redundant distribution path serving the critical load.

Explanation

In the widely used four-tier topology scheme, Tier III provides redundant capacity components and multiple independent distribution paths, yet it is only concurrently maintainable, not fully fault tolerant. Full fault tolerance including protection against a single failure anywhere in the distribution path is the characteristic of Tier IV, while Tier I is the basic non-redundant design.

Question 4EXIN CDCS

What is the primary function of a UPS system in a data centre power chain?

  1. To replace the need for a generator during extended outages.
  2. To provide conditioned, uninterrupted power to the critical load during short interruptions and transfers. Correct answer.
  3. To convert utility AC to DC for the servers' internal power supplies.
  4. To step down the utility voltage to the level used by rack PDUs.

Explanation

A UPS conditions incoming power and supplies the critical load from stored energy during short interruptions and source transfers, bridging the gap until generators or the utility return. It is not a voltage transformation device, does not feed servers DC directly in typical designs, and its battery autonomy is deliberately short.

Question 5EXIN CDCS

Which cooling approach is best described as bringing cooling capacity close to the heat load by placing the cooling coil within or adjacent to the equipment row?

  1. In-row or in-rack cooling Correct answer.
  2. Room-based computer room air handling with perimeter units
  3. Chilled water plant with raised-floor plenum distribution
  4. Free cooling using outside air economisers

Explanation

In-row and in-rack cooling place the heat exchanger close to the source of heat, shortening the air path and allowing higher return air temperatures. Perimeter CRAC units, raised-floor distribution and economiser modes are alternative arrangements that do not by definition place cooling at the row or rack.

Question 6EXIN CDCS

Which statement correctly distinguishes availability from reliability for a data centre service?

  1. Availability applies only to hardware, while reliability applies only to software.
  2. Availability and reliability are identical measures expressed in nines.
  3. Availability is the fraction of time the service is usable; reliability is the probability of operating without failure over a period. Correct answer.
  4. Availability is the probability of operating without failure for a period; reliability is the fraction of time the service is usable.

Explanation

Availability is a time-based ratio of uptime to total time, often expressed in nines, whereas reliability is a probabilistic statement about failure-free operation over an interval. A service can be highly available through fast recovery while having modest reliability, so the two measures are related but not interchangeable.

Question 7EXIN CDCS

What is the main purpose of a change management process in a data centre operations environment?

  1. To prevent the operations team from modifying any configuration item.
  2. To replace the incident management process during maintenance windows.
  3. To guarantee that no change ever causes an outage.
  4. To ensure all changes are approved, assessed for risk and recorded before implementation. Correct answer.

Explanation

Change management controls the lifecycle of changes by assessing risk, obtaining authorisation and maintaining records so that impact is understood and reversible. It cannot guarantee that no outage occurs, and it complements rather than replaces incident management and configuration control.

Question 8EXIN CDCS

Which document typically records the agreed service targets, responsibilities and reporting between a data centre provider and its customer?

  1. Non-disclosure agreement
  2. Statement of work
  3. Service level agreement Correct answer.
  4. Master service agreement

Explanation

A service level agreement (SLA) specifies measurable service targets such as availability, response times and reporting obligations between provider and customer. A statement of work defines project scope, an NDA covers confidentiality, and a master service agreement sets overarching contract terms rather than service targets.

Question 9EXIN CDCS

A data centre reports an annual availability of 99.671 percent, corresponding to roughly 28.8 hours of downtime in a year. Which class does this most closely match?

  1. Class 1
  2. Class 3
  3. Class 4
  4. Class 2 Correct answer.

Explanation

In the widely used four-class availability scheme, Class 2 corresponds to 99.671 percent annual availability, about 28.8 hours of downtime. Class 1 is the lowest at 99.671 percent or less, Class 3 reaches 99.982 percent and Class 4 targets 99.995 percent, so the reported figure aligns with Class 2.

Question 10EXIN CDCS

A service has an MTPD of 12 hours and an RTO of 4 hours. A proposed recovery plan would restore the service in 6 hours. How should this be assessed?

  1. The plan is acceptable because the MTPD, not the RTO, is the binding requirement.
  2. The plan is acceptable because 6 hours is shorter than the MTPD.
  3. The plan is unacceptable because the RTO of 4 hours is exceeded, even though the MTPD is not. Correct answer.
  4. The plan is unacceptable because recovery must always complete within half the MTPD.

Explanation

The RTO is the internal target that must be met, and it is deliberately set inside the MTPD to leave margin. A six-hour recovery misses the four-hour RTO, so the plan fails the recovery requirement even though it stays within the outer business tolerance. There is no general rule that recovery must take half the MTPD.

Question 11EXIN CDCS

A BIA shows that a payment process incurs negligible impact for the first two hours, then severe impact after five hours. Which MTPD is most defensible?

  1. Five hours, because that is when severe impact is reached.
  2. A value between two and five hours chosen with business owners to leave recovery margin. Correct answer.
  3. Twelve hours, to allow a comfortable recovery window.
  4. Two hours, because impact begins to grow after that point.

Explanation

The MTPD sits at the point where impact becomes unacceptable, which lies in the interval between the onset of impact and the severe threshold. Choosing a point inside that range with the process owner leaves room to set an RTO below it. Selecting the onset or the severe point directly removes the margin needed for recovery planning.

Question 12EXIN CDCS

A data centre uses N+1 redundancy for its UPS modules. One module fails and the remaining capacity still supports the critical load. What is the resulting state?

  1. The system is in a fault-tolerant state with no single point of failure.
  2. The system is now 2N because the failed module is bypassed.
  3. The system remains N+1 because redundancy is defined by design, not current state.
  4. The system is now N, so a further single failure would cause loss of load. Correct answer.

Explanation

N+1 means one module beyond the capacity needed to carry the load; when that spare fails, the remaining capacity is exactly N. A further failure would therefore overload the system, which is why failed modules must be restored promptly. Redundancy describes the current capability, not a permanent design label.

Question 13EXIN CDCS

Which practice most directly reduces the risk of a hot spot in a high-density rack row?

  1. Lowering the chilled water supply temperature to the minimum possible.
  2. Separating cold and hot aisles and aligning rack airflow with the containment arrangement. Correct answer.
  3. Raising the room set point to reduce chiller loading.
  4. Increasing the total number of perforated floor tiles across the room.

Explanation

Hot spots arise mainly from mixing of hot exhaust and cold supply air, so aisle separation and airflow aligned with containment directly address the cause. Lowering supply temperature or adding tiles treats symptoms and can waste energy, while raising the set point without fixing airflow may worsen local conditions.

Question 14EXIN CDCS

An operations team wants to reduce the risk that a firmware update to storage controllers causes an outage. Which control is most appropriate?

  1. Skip the change record because firmware updates are routine maintenance.
  2. Apply the update to all controllers simultaneously to shorten the exposure window.
  3. Test the update in a non-production environment, schedule it in a change window and keep a rollback plan. Correct answer.
  4. Delegate approval to the vendor's support engineer to speed up the process.

Explanation

The standard control is to validate the change outside production, schedule it with a defined window and retain a tested rollback path. Simultaneous application maximises the blast radius, delegating approval removes internal accountability, and routine maintenance still requires recording and risk assessment.

Question 15EXIN CDCS

A customer requires that no single maintenance activity may interrupt service. Which topology property must the facility provide?

  1. Redundant capacity components only, with a single distribution path
  2. Fault-tolerant capacity with no maintenance requirement
  3. Concurrently maintainable capacity components and distribution paths Correct answer.
  4. Non-redundant capacity with a single distribution path

Explanation

Concurrent maintainability requires both redundant capacity components and multiple independent distribution paths so that any one path or component can be serviced while the load runs. Redundant components alone with a single path still force a shutdown for path maintenance, and non-redundant designs offer no protection at all.

Question 16EXIN CDCS

A service is designed with automatic failover that completes in under one minute. Which statement about its availability and reliability is most accurate?

  1. High availability can be achieved even if individual components have modest reliability. Correct answer.
  2. Availability cannot exceed the reliability of the least reliable component.
  3. Failover improves reliability but has no effect on availability.
  4. Automatic failover removes the need for monitoring.

Explanation

Availability depends on both failure frequency and recovery speed, so rapid automated failover can deliver high availability from components of ordinary reliability. Failover affects availability directly, and monitoring remains essential to detect failed-over states and silent failures.

Question 17EXIN CDCS

A data centre operator wants to demonstrate that recovery arrangements actually work. Which activity provides the strongest evidence?

  1. Running a live or partial failover exercise with recorded results and corrective actions. Correct answer.
  2. Collecting signed acknowledgements that staff have read the plan.
  3. Reviewing the continuity plan document annually with senior management.
  4. Updating the contact list for the crisis team each quarter.

Explanation

Exercising the arrangements, whether a full failover or a partial simulation, tests the plan against reality and produces evidence of actual capability. Document reviews, acknowledgements and contact list updates are useful administrative controls but do not demonstrate that recovery can be achieved.

Question 18EXIN CDCS

A facility's UPS provides 10 minutes of battery autonomy and the generator takes 90 seconds to accept load. What is the principal risk if the generator fails to start?

  1. No risk, because the UPS autonomy exceeds the generator start time.
  2. Loss of load after approximately 10 minutes when the batteries are exhausted. Correct answer.
  3. Gradual degradation of power quality without loss of load.
  4. Immediate loss of load because the UPS cannot bridge any gap.

Explanation

The UPS bridges the 90-second generator start, so a normal start causes no interruption; if the generator fails, the batteries carry the load until they are exhausted at about 10 minutes. The risk is therefore delayed but certain loss of load unless the generator is repaired or load is shed. Power quality is maintained until the batteries deplete.

Question 19EXIN CDCS

Which metric best expresses the energy efficiency of the whole facility rather than of the IT equipment alone?

  1. Power usage effectiveness (PUE) Correct answer.
  2. Rack power density in kilowatts per rack
  3. Data centre infrastructure efficiency (DCiE)
  4. Server utilisation percentage

Explanation

PUE is total facility energy divided by IT equipment energy, so it captures overheads such as cooling and losses across the whole facility. DCiE is its reciprocal and expresses the same ratio as a percentage, while utilisation and rack density describe workload and capacity rather than efficiency.

Question 20EXIN CDCS

An organisation holds ISO/IEC 27001 certification. What does this certification primarily confirm?

  1. That specific technical controls have been independently penetration tested.
  2. That the organisation has achieved a defined availability class for its data centre.
  3. That all data is stored within a particular jurisdiction.
  4. That an information security management system has been established, implemented and audited against the standard. Correct answer.

Explanation

ISO/IEC 27001 certifies the management system for information security, covering risk assessment, controls and continual improvement, following an audit by a certification body. It does not certify particular technical test results, data residency or a data centre availability class, which are governed by other standards and contracts.

Question 21EXIN CDCS

A data centre must support a rack drawing 25 kW. Which combination of design measures is most appropriate?

  1. Relying on room-level free cooling only
  2. Perimeter CRAC units with a raised-floor plenum and open aisles
  3. Reducing the number of perforated tiles in front of the rack
  4. Row-based or in-rack cooling with hot-aisle containment and rear-door heat exchangers Correct answer.

Explanation

At 25 kW per rack, room-level mixing cannot deliver enough cool air, so close-coupled cooling combined with containment or rear-door heat exchangers is needed. Perimeter units with open aisles, fewer tiles or free cooling alone cannot overcome the airflow and temperature gradient at that density.

Question 22EXIN CDCS

A continuity plan meets its RTO in testing, but the RPO is missed because replication lag reaches 30 minutes against a 5-minute target. Which conclusion is most defensible?

  1. The plan is fully compliant because the RTO, the more important target, is met.
  2. The RPO should be relaxed to 30 minutes to match the observed lag.
  3. The RPO is irrelevant once the RTO is achieved.
  4. The plan fails the data-loss requirement, so replication design or capacity must be corrected. Correct answer.

Explanation

RTO and RPO are independent requirements; meeting one does not compensate for missing the other. A 30-minute lag against a 5-minute target means up to 30 minutes of data could be lost, so the replication design, bandwidth or capacity must be fixed rather than the target relaxed.

Question 23EXIN CDCS

A provider promises 99.99 percent availability but its SLA credits are capped at one month's fee and exclude consequential loss. What is the main limitation of this arrangement for the customer?

  1. Financial remedies are unlikely to reflect the business impact of an outage. Correct answer.
  2. Credits automatically extend the contract term.
  3. The SLA cannot be measured without a defined RTO.
  4. The availability target is unenforceable without credits.

Explanation

Service credits are a contractual remedy, not compensation for business loss, so a cap at one month's fee plus an exclusion of consequential loss leaves the customer bearing most of the real impact. The target remains measurable through reporting, and RTO is a recovery objective rather than a measurement basis for availability.

Question 24EXIN CDCS

A data centre operator claims Tier IV certification. Which claim is consistent with that classification?

  1. The facility is concurrently maintainable but has one distribution path.
  2. The facility achieves the highest availability purely through operational procedures.
  3. The facility has redundant components but no fault-tolerant path.
  4. The facility tolerates any single failure anywhere in the distribution path without interrupting the critical load. Correct answer.

Explanation

Tier IV requires fault tolerance, meaning the critical load survives any single failure anywhere in the distribution path, in addition to concurrent maintainability. A single path or mere component redundancy describes lower tiers, and operational procedures alone cannot confer a topology classification.

Question 25EXIN CDCS

An organisation's BIA shows that two processes share the same recovery team and both have a four-hour RTO. What is the most significant planning issue?

  1. Recovery resource contention may prevent both RTOs from being met, so sequencing or additional resources must be planned. Correct answer.
  2. The BIA is invalid because two processes cannot share a recovery team.
  3. The RTOs must be extended because shared teams cannot recover two processes.
  4. The MTPD must be reduced to two hours for each process.

Explanation

Independent RTOs can be technically achievable yet jointly unachievable when the same people and systems are needed, which is a classic resource contention problem. The remedy is to plan sequencing, cross-train staff or add resources, not to assume the BIA is invalid or to change the MTPD arbitrarily.

Question 26EXIN CDCS

In a data centre, which term describes the maximum tolerable duration that a business process can be unavailable before its survival is threatened?

  1. Recovery Time Objective
  2. Service Level Agreement
  3. Recovery Point Objective
  4. Maximum Tolerable Period of Disruption Correct answer.

Explanation

The Maximum Tolerable Period of Disruption (MTPD) is set by the business and expresses how long a process can be unavailable before unacceptable harm occurs. RTO and RPO are derived planning targets that must sit inside the MTPD, and an SLA is a contractual document rather than a business impact limit.

Question 27EXIN CDCS

Which document defines the recovery priorities, team roles and step-by-step actions for restoring IT services after a disruptive incident?

  1. The configuration baseline
  2. The asset register
  3. The disaster recovery plan Correct answer.
  4. The capacity management plan

Explanation

A disaster recovery plan sets out how IT services are restored, including priority order, responsibilities and procedural steps. The other documents support operations but do not prescribe recovery actions for an incident.

Question 28EXIN CDCS

Which statement best describes the role of a service level agreement in data centre service management?

  1. It replaces the need for operational monitoring because targets are contractual.
  2. It records the formal commitments between provider and customer, including targets and reporting. Correct answer.
  3. It lists the individual hardware serial numbers covered by maintenance contracts.
  4. It documents the technical design of the cooling and power distribution systems.

Explanation

An SLA formalises what the provider commits to deliver, the measurable targets, responsibilities and how performance is reported. It does not substitute for monitoring, because performance must be measured to demonstrate that the commitments are met.

Question 29EXIN CDCS

What does a Tier III classification primarily indicate about a data centre?

  1. The facility has no redundant capacity components at all.
  2. The facility tolerates any single fault without any operational impact.
  3. The facility can be maintained concurrently without shutting down IT load. Correct answer.
  4. The facility relies on a single power distribution path for all racks.

Explanation

Tier III is defined by concurrent maintainability, meaning components can be maintained while the IT load continues to be served. It does not require full fault tolerance, which is the characteristic of Tier IV.

Question 30EXIN CDCS

Which practice is the most direct control for preventing unauthorised physical access to a data hall?

  1. Using layered access control with badge, PIN and escort rules Correct answer.
  2. Keeping the door locked only outside business hours
  3. Relying on staff to challenge unfamiliar visitors
  4. Publishing the floor plan on the intranet

Explanation

Layered access control combining badge readers, PIN or biometric checks, mantrap entries and escort rules provides verifiable, auditable restriction of entry. Informal or time-limited measures leave gaps that cannot be evidenced.

Question 31EXIN CDCS

Which statement correctly describes the purpose of an RPO of 15 minutes?

  1. The service must be restored within 15 minutes of an outage.
  2. Backups must be verified every 15 minutes.
  3. The incident must be escalated within 15 minutes.
  4. No more than 15 minutes of data may be lost if a failure occurs. Correct answer.

Explanation

The Recovery Point Objective defines the acceptable amount of data loss expressed as time, so an RPO of 15 minutes means recovery must reach a point no older than 15 minutes before the failure. It is a data-loss measure, not a restoration or escalation target.

Question 32EXIN CDCS

What is the principal purpose of conducting a business impact analysis before designing recovery arrangements?

  1. To identify time-critical processes and the impact of their disruption Correct answer.
  2. To assign maintenance windows to the operations team
  3. To select the hardware vendor for the new data hall
  4. To calculate the power usage effectiveness of the facility

Explanation

A BIA identifies which processes matter most, how impact grows over time and therefore which recovery targets are justified. The resulting priorities then drive investment in recovery capability.

Question 33EXIN CDCS

Which statement about data centre availability is correct?

  1. Availability is the proportion of agreed time a service is capable of being used. Correct answer.
  2. Availability is the same measure as mean time between failures.
  3. Availability is measured solely by the number of incidents logged.
  4. Availability is increased only by adding more servers.

Explanation

Availability expresses the fraction of agreed service time during which the service is usable, usually calculated from uptime against agreed hours. MTBF is a reliability measure, and incident counts alone do not quantify availability.

Question 34EXIN CDCS

A data centre must demonstrate that its emergency power system will carry the critical load during a utility failure. Which test provides the strongest evidence?

  1. An interview with the facilities manager about past events
  2. A walkthrough of the generator room without load
  3. A documented load-bank or live transfer test with recorded results Correct answer.
  4. A review of the generator maintenance invoices

Explanation

A load-bank or live transfer test exercises the generator and transfer path under real load and produces recorded evidence that the system performs as designed. Documentation reviews, interviews and visual walkthroughs do not demonstrate performance under load.

Question 35EXIN CDCS

A rack draws 18 kW and the existing row is designed for 6 kW per rack. Which combination of measures is most appropriate to support the load safely?

  1. Deploy containment with in-row or rear-door cooling and verify power distribution capacity Correct answer.
  2. Reduce the number of racks by consolidating and leave the cooling unchanged
  3. Add more perforated floor tiles across the whole room
  4. Lower the chilled water temperature without other changes

Explanation

High-density racks need airflow containment and close-coupled cooling such as in-row or rear-door units, together with a check that power distribution and UPS capacity can supply the load. General room-level changes do not deliver the required local cooling capacity.

Question 36EXIN CDCS

A provider offers 99.9 percent availability and the customer's business process has an MTPD of 30 minutes. Which conclusion is most sound?

  1. The SLA is adequate because MTPD applies only to data loss.
  2. The SLA is adequate only if the provider holds ISO/IEC 27001 certification.
  3. The SLA is inadequate because its permitted downtime far exceeds the MTPD. Correct answer.
  4. The SLA is adequate because 99.9 percent is a high figure.

Explanation

At 99.9 percent availability the permitted unavailability is roughly 43 minutes per month, which already exceeds the 30-minute MTPD before any recovery time is considered. Business continuity requirements must therefore be met through additional resilience or recovery arrangements.

Question 37EXIN CDCS

An operations team wants to reduce the risk that a single failed component causes a service outage. Which design principle applies most directly?

  1. Eliminating single points of failure through redundancy Correct answer.
  2. Removing redundancy to simplify the design
  3. Reducing the number of monitoring alerts
  4. Increasing the mean time to repair

Explanation

Eliminating single points of failure by providing redundant components and paths means no single failure can interrupt the service. MTTR affects how quickly recovery occurs but does not prevent the outage itself.

Question 38EXIN CDCS

A data centre operator must show that restoration procedures work within the agreed RTO. Which activity provides the most credible evidence?

  1. A list of backup tapes held off site
  2. A periodic recovery exercise that measures actual restoration time Correct answer.
  3. A copy of the vendor's support contract
  4. A signed statement from the operations director

Explanation

Only an exercised recovery that measures real elapsed time demonstrates whether the RTO can be achieved. Assertions, contracts and inventory records show intent or capability but not measured performance.

Question 39EXIN CDCS

What does ISO/IEC 27001 certification confirm about an organisation?

  1. That its data centre meets a specific tier of physical resilience
  2. That its products have been penetration tested by the certifier
  3. That it has never suffered a security incident
  4. That it operates a certified information security management system Correct answer.

Explanation

ISO/IEC 27001 certification confirms that an information security management system has been implemented, maintained and independently audited against the standard. It does not certify facility tier level, incident history or specific product testing.

Question 40EXIN CDCS

Which metric measures the ratio of total facility energy consumption to the energy delivered to IT equipment?

  1. Data centre infrastructure efficiency
  2. Carbon usage effectiveness
  3. Water usage effectiveness
  4. Power usage effectiveness Correct answer.

Explanation

Power usage effectiveness divides total facility energy by IT equipment energy and is the standard whole-facility efficiency indicator. Its reciprocal is data centre infrastructure efficiency, which expresses the same relationship as a percentage.

Question 41EXIN CDCS

A change to a core network switch is planned for a production data centre. Which control most reduces the risk of an unplanned outage?

  1. Skipping documentation to reduce preparation time
  2. Testing the change in a non-production environment and defining a rollback plan Correct answer.
  3. Approving the change verbally during a team meeting
  4. Applying the change during peak business hours to observe impact

Explanation

Pre-implementation testing in a representative non-production environment plus a tested rollback plan limits the blast radius if the change fails. Formal approval and documentation ensure the change is reviewed and can be reversed.

Question 42EXIN CDCS

A customer requires that routine maintenance of any single component never interrupts IT load. Which facility attribute satisfies this requirement?

  1. Concurrent maintainability Correct answer.
  2. Mean time to repair
  3. Power usage effectiveness
  4. Mean time between failures

Explanation

Concurrent maintainability allows any component to be maintained while the IT load continues to be served, which is exactly the stated requirement. The other terms are reliability or efficiency measures and do not describe maintenance capability.

Question 43EXIN CDCS

A backup strategy achieves an RPO of 5 minutes but full restoration takes 8 hours while the RTO is 2 hours. What is the most appropriate conclusion?

  1. The strategy fails the RPO and therefore the RTO is irrelevant.
  2. The strategy meets the RPO but fails the RTO, so recovery capability must be improved. Correct answer.
  3. The strategy meets both objectives because the RPO is satisfied.
  4. The strategy is acceptable if backups are encrypted.

Explanation

RPO and RTO are independent objectives, and both must be met. Satisfying the data-loss target does not compensate for restoration that takes four times longer than the RTO allows.

Question 44EXIN CDCS

Which statement best explains why an SLA credit cap of one month's fee may be insufficient protection for a customer?

  1. Credits remove the provider's obligation to report performance.
  2. Credits automatically extend the contract term.
  3. Credits may not cover consequential business losses that exceed the cap. Correct answer.
  4. Credits are usually paid in cash rather than deducted from invoices.

Explanation

Service credits are typically the sole financial remedy and are capped, often at a fraction of the monthly fee. They rarely reflect downstream losses such as lost revenue or regulatory penalties, so the customer bears that residual risk.

Question 45EXIN CDCS

An organisation wants to reduce the risk that a fire in the data hall causes loss of IT services. Which combination of measures addresses both detection and suppression?

  1. Very early smoke detection combined with a clean-agent suppression system Correct answer.
  2. Higher server rack density
  3. Portable water extinguishers only
  4. Increased CCTV coverage in the corridor

Explanation

Very early smoke detection provides early warning, and a clean-agent suppression system extinguishes fire without damaging IT equipment. Together they address both detection and suppression of a data hall fire.

Question 46EXIN CDCS

A data centre holds a Tier IV design certification. Which claim is consistent with that classification?

  1. The facility has no redundant components but is well maintained.
  2. The facility is fault tolerant and supports concurrent maintainability. Correct answer.
  3. The facility can tolerate a single fault only if maintenance is deferred.
  4. The facility provides concurrent maintainability but not fault tolerance.

Explanation

Tier IV combines fault tolerance with concurrent maintainability, so a single fault does not interrupt the IT load and components can be maintained without downtime. A claim offering only one of these properties describes a lower tier.

Question 47EXIN CDCS

A data centre reports PUE of 1.2 while its IT load is 800 kW. Approximately how much total facility power is being consumed?

  1. 667 kW
  2. 800 kW
  3. 960 kW Correct answer.
  4. 1,200 kW

Explanation

PUE equals total facility power divided by IT power, so total power is 800 kW multiplied by 1.2, giving 960 kW. The overhead of 160 kW represents cooling, losses and other infrastructure consumption.

Question 48EXIN CDCS

A provider claims 99.99 percent availability but the SLA excludes planned maintenance, caps credits and excludes consequential loss. Which assessment is most accurate?

  1. The headline figure fully protects the customer because it is contractually binding.
  2. The exclusions and caps materially weaken the protection the headline figure suggests. Correct answer.
  3. The exclusions are irrelevant because availability is measured continuously.
  4. The cap on credits guarantees full compensation for business losses.

Explanation

A headline availability figure must be read alongside the measurement rules, exclusions and remedies in the SLA. Excluding planned maintenance and capping credits shifts significant risk to the customer regardless of the stated percentage.

Question 49EXIN CDCS

A data centre's UPS provides 12 minutes of autonomy and the generator reaches stable load acceptance in 8 minutes, but the transfer switch has never been tested under load. What is the most significant residual risk?

  1. The UPS autonomy is too long for the generator to be needed.
  2. The generator will always start faster than the UPS can support.
  3. The untested transfer path may fail to transfer load within the available autonomy. Correct answer.
  4. The generator fuel supply is irrelevant to short outages.

Explanation

The autonomy window is sufficient only if the transfer switch successfully moves the load to the generator within 12 minutes. An untested transfer path is a credible single point of failure that could exhaust the battery before the generator carries load.

Question 50EXIN CDCS

A colocation customer requires evidence that physical access to their cages is controlled and auditable. Which control set best satisfies this requirement?

  1. Visitor sign-in sheets kept at reception only
  2. Cage doors with badge readers, logged entry events and periodic access reviews Correct answer.
  3. CCTV cameras installed without recording or retention
  4. A signed policy stating that only authorised staff enter the data hall

Explanation

Badge-controlled cage entry generates an auditable event log, and periodic access reviews confirm that only authorised individuals retain entry rights. Together these provide both preventive control and verifiable evidence.