The EDRP (exam 312-76) is a four-hour, 150-question, proctored exam with a 70% passing score, and its current scope is defined by EC-Council's Exam Blueprint v3 across seven domains. Preparation pays off most in Data Backup Strategies (17%) and Data Recovery Strategies (37%), which together dominate the blueprint. Study the domain map below, practice chaining recovery targets to strategy choices, and verify logistics and coverage against EC-Council's own pages before registering.
What the EDRP credential covers
EDRP certifies the ability to plan, document, and test the recovery of technology infrastructure, positioned by EC-Council as the IT-focused subset of business continuity.
EC-Council's certification page defines disaster recovery as the processes and procedures for recovering or continuing technology infrastructure after a natural or human-induced disaster. It places disaster recovery inside business continuity: continuity keeps the whole business functioning through disruption, while recovery focuses on the technology systems that support it.
The credential expects working knowledge across the organization, current recovery planning techniques and technologies, and the methods used for risk analyses and business impact analyses. It also expects project management ability, skill in directing tests of emergency response and recovery procedures, and strong communication with managers, staff, and vendors.
Exam format, length, and passing score
The EDRP exam (prefix 312-76) runs 4 hours, contains 150 questions, and requires a 70% score, delivered at the ECC Exam Center under proctoring.
These are the verified facts from EC-Council's certification page: 150 questions, a 4-hour duration, and a 70% passing score. The exam is available at the ECC Exam Center, and EC-Council states it can revoke certification for candidates who breach its examination policies.
Every EC-Council exam is proctored. The proctor is a trained representative authorized by EC-Council who must be able to see you and the exam throughout the session; if not, the result is invalid and the test must be rescheduled. You need a valid, active exam voucher to register, and the registration guide arrives with the voucher.
The retrieved sources do not publish exam fees or any eligibility prerequisites for adult candidates beyond the minor policy described below, so confirm those with EC-Council directly rather than relying on third-party summaries.
- Questions: 150
- Duration: 4 hours
- Passing score: 70%
- Exam prefix: 312-76, delivered at the ECC Exam Center
- Proctoring is mandatory for all EC-Council exams
Sources: EC-Council Certified Disaster Recovery Professional (certification page) — cert.eccouncil.org, EDRP program page; EC-Council FAQ — Exam Preparation and proctoring sections
Who the certification targets
EC-Council names network and system administrators, firewall administrators, security testers, and risk assessment professionals as the EDRP audience.
If you administer servers or networks, test security, or work in risk assessment, the role expectations map to tasks you already understand: analyzing risk, quantifying business impact, designing recovery strategies, and directing recovery tests. The stated skill list also emphasizes interpersonal and vendor-facing communication, since recovery planning depends on coordinating with managers, storage-facility vendors, and disaster recovery service providers.
Treat this as scope guidance, not an entry requirement. The retrieved page states no adult eligibility prerequisites, so verify anything you hear about required experience directly with EC-Council.
Business continuity and disaster recovery: the boundary
Business continuity keeps business processes running through disruption; disaster recovery is its technology-restoration subset, and the exam assesses both plus the planning and testing that connect them.
EC-Council draws this boundary explicitly: continuity planning covers keeping all aspects of a business functioning during disruptive events, while disaster recovery concentrates on the IT and technology systems that support those functions. Blueprint v3 reflects the relationship by testing business continuity management, business impact analysis, and the business continuity plan alongside the recovery-specific domains.
In preparation terms, this means you should be comfortable classifying material: a question about manual workarounds that keep orders moving belongs to continuity, while a question about restoring servers and data belongs to recovery. Many blueprint items sit at the seam, such as the business impact analysis that produces requirements for both disciplines.
Sources: EC-Council Certified Disaster Recovery Professional (certification page) — cert.eccouncil.org, EDRP program page; EDRP Exam Blueprint v3 (PDF) — Domain and weightage table, pages 1-2
Blueprint v3 domains and how to weight your study
Blueprint v3 defines seven domains; Data Recovery Strategies (37%) and Data Backup Strategies (17%) together account for more than half, so prioritize them.
The current blueprint is EC-Council's Exam Blueprint v3, which lists the domains and weights below. Two structural facts should shape your plan. First, the recovery-technology domains dominate: backup strategies and recovery strategies alone cover 54% of the blueprint, so infrastructure topics such as RAID, SAN and NAS storage, backup types, cloud-based disaster recovery, and virtualization-based recovery deserve the largest share of your time. Second, the planning domains are smaller but distinct: the risk assessment and business impact analysis domains together form the requirements side, while the planning-process and testing domains cover how plans are written, exercised, and maintained.
Use the weights as study priorities, not as a guarantee of how many questions any single sitting contains. EC-Council notes that exams can receive minor updates without announcement, and that a new blueprint is released when objectives change significantly, so check the current blueprint before you register.
| Blueprint v3 domain | Weight |
|---|---|
| Introduction to Disaster Recovery and Business Continuity | 9% |
| Risk Assessment | 7% |
| Business Impact Analysis and Business Continuity Plan | 12% |
| Data Backup Strategies | 17% |
| Data Recovery Strategies | 37% |
| Disaster Recovery Planning Process | 10% |
| BCP Testing, Maintenance, and Training | 8% |
Sources: EDRP Exam Blueprint v3 (PDF) — Domain and weightage table, pages 1-2; EC-Council FAQ — Exam Preparation and proctoring sections
Recovery targets: the concepts behind the analysis domains
Recovery time and recovery point describe different requirements: the time available for recovery and the point in time to which data must be restored.
NIST describes business impact analysis as examining operational functions and the effects of disruption. Its contingency-planning terminology distinguishes the recovery time objective, the recovery period before adverse mission or business impact, from the recovery point objective, the point in time to which data must be recovered after an outage.
When reviewing the EDRP analysis and recovery domains, keep these two questions separate. How long can recovery take under the stated requirement? How recent must the restored data be? A quick restoration and a recent recovery point are separate conditions in the example below.
Sources: EDRP Exam Blueprint v3 (PDF) — Domain and weightage table, pages 1-2; Recovery Time Objective - Glossary | CSRC — Definitions:; Recovery Point Objective - Glossary | CSRC — Definitions:; business impact analysis (BIA) - Glossary | CSRC — Definitions:
Matching strategies to recovery targets: worked practice question
Compare both stated requirements against each option before deciding which options satisfy this example.
The following paper exercise supplies complete recovery times and data-loss assumptions. They describe these three hypothetical designs, not guaranteed performance of every cold site, cloud service or warm site.
Practice question
A retail service requires complete recovery within 4 hours and a recovery point no more than 15 minutes before the outage. For this exercise, all recovery times include activation, restoration and verification of service dependencies. Design A takes 24 hours and loses up to 24 hours of data. Design B takes 1 hour and loses up to 5 minutes. Design C takes 6 hours and loses up to 1 hour. Which design meets both requirements?
Show answer
Only strategy B.
B meets both limits: 1 hour is within 4 hours, and 5 minutes is within 15 minutes. A and C exceed both limits. This comparison answers the stated timing question; it does not evaluate cost, legal obligations, security, reliability or other requirements for a real design.
Sources: EDRP Exam Blueprint v3 (PDF) — Domain and weightage table, pages 1-2; Recovery Time Objective - Glossary | CSRC — Definitions:; Recovery Point Objective - Glossary | CSRC — Definitions:
Plan documentation, sequencing, and the testing domain
Blueprint v3 tests the planning process, the plan's documentation, and how testing, maintenance, and training keep it current, so practice writing and sequencing plans, not just describing them.
Blueprint v3 includes the disaster recovery planning methodology, documentation, testing, maintenance and training. Make these separate entries in your coverage notes so practical infrastructure study does not displace planning and coordination.
For each plan or exercise you study in your course, identify its purpose, participants, procedure and expected evidence. Check what the exercise actually demonstrates and what it leaves untested. Use the course explanation for the chosen test type; the blueprint itself is a coverage list, not a universal ordering of tests or system recovery steps.
Sources: EDRP Exam Blueprint v3 (PDF) — Domain and weightage table, pages 1-2
Courseware, coverage, and next steps
Official courseware is recommended but not mandatory, the exam can include content outside it, and the blueprint is the reliable coverage check before you register.
EC-Council's FAQ is direct on this point: exams are developed independently of courseware because they assess skills and knowledge, not the effectiveness of any training product. The exam material can include content not covered in official training, official courseware is recommended but not mandatory, and completing it does not guarantee a pass. EC-Council does not review third-party study materials, so check any third-party guide against the blueprint yourself.
Your practical sequence: download the current blueprint from EC-Council and map your study plan to its seven domains, concentrating on the backup and recovery strategy domains. Purchase a valid exam voucher, since registration requires one and the registration guide is sent with it. Plan for a proctored session at the ECC Exam Center, and if you are a minor, note the policy requiring a written consent and indemnity letter signed by a parent or legal guardian plus a supporting letter from a nationally accredited institution, with legal age defined by your country of residence. Finally, confirm fees and any prerequisites with EC-Council, because the retrieved sources do not publish them.
- Map your study plan to the seven Blueprint v3 domains before registering
- Prioritize Data Backup Strategies (17%) and Data Recovery Strategies (37%)
- Secure a valid exam voucher; registration requires one
- Prepare for a proctored session at the ECC Exam Center
- Verify fees and adult eligibility directly with EC-Council
Sources: EC-Council FAQ — Exam Preparation and proctoring sections; EC-Council Certified Disaster Recovery Professional (certification page) — cert.eccouncil.org, EDRP program page
Sources
Facts checked: