Free Exin CDFOM Practice Exam with Questions & Answers | Set: 2

When operators receive excessivenon-alarm notifications, this indicates that:

Thresholds are not well-configured

Events are misclassified

Alarm definitions are incorrect

Monitoring profiles require tuning

EPI’s monitoring best practices state that the correct response is to:

Review alarm information and adjust definitions, thresholds, and filtering.

This ensures that:

Only relevant alarms reach operators

Noise is minimized

Operators maintain focus on true issues

SLA-related metrics are accurately monitored

Why other options are incorrect:

A: Training is secondary and will not fix incorrect alarm settings.

C: Ignoring notifications is dangerous and violates operational control.

D: Upgrading software may not resolve the underlying configuration problem.

Thus,Bis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Monitoring systems must generate actionable alarms, not noise.

Alarm thresholds and event filters must be reviewed and optimized regularly.

Predictive maintenance is defined as:

“Maintenance executed based on real-time or trend-based performance monitoring to intervene just before failure occurs.”

Predictive maintenance uses:

Condition monitoring

Vibration analysis

Sensor data

Temperature, load, and performance metrics

Trend analysis

Analytics predicting impending failure

This allows maintenance to be performedjust-in-time, preventing unplanned downtime.

Why other options are incorrect:

Adescribes preventive maintenance (routine/time-based).

Cdescribes reliability-centered or historical pattern scheduling.

Dis close but refers more to condition-based maintenance, which is a subset; predictive maintenance specifically uses monitoring to forecast failure, not just detect issues.

Thus,Bis the most correct definition.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Predictive maintenance relies on monitoring equipment conditions and performance trends.

It reduces downtime and optimizes maintenance schedules.

Security incident management is a core function in maintaining physical security integrity within the data center environment. The main purpose of this process is torespond to, manage, and eliminate security breaches and vulnerabilitiesthat could compromise facility protection, customer assets, or sensitive operational areas. According to EPI’s security governance principles, a security incident may include unauthorized access attempts, misuse of credentials, badge anomalies, tailgating, tampering, suspicious activities, or procedural violations.

The security incident management process ensures that such events are logged, assessed, investigated, escalated, and resolved in a timely and structured manner. It also identifies root causes and potential systemic weaknesses that must be corrected to prevent recurrence. This includes reviewing procedures, improving physical controls, reinforcing training, and implementing corrective or preventive measures.

Option A is unrelated; guard assignment is part of staffing, not incident management. Option C refers to testing emergency plans, which is part of preparedness and exercises. Option D refers to compliance activities, but compliance is not theobjectiveof incident management—it is aresult.

Therefore, the correct answer isB – addressing breaches and weaknesses.

EPI defines several facility options for Business Continuity:

Company-owned facility→ highest cost

Co-location→ moderate to high cost

Government-owned facility→ typically not a commercially viable or general-purpose BC option

Disaster Recovery (DR) provider→lowest-costsolution for BC

ADR provideroffers:

Shared or subscription-based DR facilities

Lower capital investment

Pay-as-you-use or retainer-based access

Rapid availability without owning infrastructure

Minimal financial burden for standby capacity

This aligns with management’s goal:cheapest possible alternative facility.

Thus,D – DR provideris correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

DR provider facilities are the most economical BC facility option.

They provide shared resources and reduce capital expenditure.

Among maintenance contract models, theLowest-Riskoption is the:

Comprehensive Contract

A comprehensive maintenance contract includes:

Preventive maintenance

Corrective maintenance

Replacement parts

Labor costs

Priority response times

Faster repair and recovery

Predictable costs

Strong service guarantees

Higher reliability and lower operational risk

Why other options are incorrect:

A – Basic: Limited coverage; higher risk of delays.

B – Time & Material: Highest financial and operational risk.

D – Exclusive: Typically an enhanced premium model but not the primary “lowest risk” category in EPI’s standard contract structure.

Thus,Cis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

A comprehensive contract provides the lowest operational risk for critical infrastructure.

Offers full-service coverage and fastest response times.

Customer satisfaction surveys must be concise, relevant, and easy to complete. EPI’s service improvement guidance emphasizes that survey fatigue occurs when surveys are overly long or contain too many detailed questions, causing customers to abandon them. The most common reason for low participation isexcessive number of questions, making the survey time-consuming or overwhelming. In modern service environments, customers expect short, focused surveys that can be completed quickly. Surveys with more than a handful of core questions often have dramatically reduced response rates.

Option A (not enough questions) would not reduce participation; shorter surveys typically perform better. Option B (not sent by the data center manager) may influence perception but does not typically impact participation significantly. Option D (postal mail) is outdated but still not as strong a factor as excessive survey length—especially because the question does not indicate this method was used.

Therefore, the most likely root cause for poor participation is thatthe survey had too many questions.

The ISMS framework (aligned with ISO 27001) follows thePDCA cycle:

P – Plan

D – Do

C – Check

A – Act

This model ensures:

Continuous improvement

Systematic risk management

Documented policies and controls

Regular audits and corrective actions

Why other options are incorrect:

A – SMART: For objective setting, not ISMS.

B – PCI-DSS: A security compliance standard, not a process model.

C – ROI: A financial metric, unrelated.

Thus,Dis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

ISMS implementation is based on PDCA methodology.

Ensures continuous improvement of security controls.

A common operational problem occurs when incidents areinitially responded to but then lose attention.

EPI identifiesincomplete shift handoveras a major root cause because:

Incident ownership is not transferred correctly

Pending actions are not communicated

Operators on the next shift are unaware of unresolved incidents

Follow-up obligations are lost

This leads to customers receiving initial responses but no closure or updates.

Why other options are incorrect:

A: Even without auto-emails, incidents would still be followed up internally.

B: Skill level issues affect resolution quality, not disappearance of tickets.

D: Lack of contingency causes delays, not loss of tracking.

Thus,Cis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Proper shift handover is essential to maintain service continuity.

Incomplete handover leads to dropped incidents and SLA failures.