Free Exin CDFOM Practice Exam with Questions & Answers | Set: 2

EPI’s physical security framework requiresmandatory background screeningforallindividuals assigned to security roles, regardless of:

previous experience

certifications

law enforcement background

length of employment

Security personnel have privileged access to sensitive areas and are responsible for enforcing access control, incident response, and compliance. Therefore:

No exemptionsare permitted.

Prior experience or certification doesnotreplace a formal background check.

Even previous law enforcement staff must undergo screening.

Thus, the correct answer isC.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Background screening is mandatory for all security personnel.

No exceptions are permitted, regardless of experience or qualifications.

Qualitative risk analysis is the process of assessing risks usingdescriptive,non-numerical, andcategoricalscales to evaluate:

Probability (likelihood)

Impact (severity)

It often uses terms like:

Low / Medium / High

Minor / Moderate / Severe

Likely / Unlikely

This analysis supports prioritization, but the definition itself is aboutdescribing impact and probability, not financial quantification.

Why other options are incorrect:

Adescribes quantitative risk analysis (monetary values).

Bis incomplete; qualitative analysis assesses both impact AND likelihood.

Dis an outcome of qualitative analysis, not the definition.

Thus,Cis the correct answer.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Qualitative analysis assesses likelihood and impact using descriptive scales.

Used when monetary or statistical values are not required.

EPI describes threecommonly offered maintenance service levelsin the data center industry:

Time & Material (T&M)

Pay per visit, per hour, and per part

No guaranteed response time

Lowest cost, lowest priority

Basic Contract

Includes scheduled preventive maintenance

Limited support for corrective issues

Faster response than T&M but still limited

Comprehensive Contract

Includes preventive + corrective maintenance

Parts + labor included

Priority response times

Best uptime protection

These are the standard, industry-recognized tiers reflected in EPI’s training.

Why the other options are incorrect:

AandBare marketing labels used in some industries but not standard for data center facility maintenance.

Cis not an EPI-recognized offering.

Thus,Dis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Standard vendor offerings include T&M, Basic, and Comprehensive contracts.

Used widely for UPS, generators, cooling systems, and electrical infrastructure.

EPI’s safety and statutory requirements training emphasizes thatsafety is a shared responsibilityacross the entire data center organization. While roles such as the safety manager and facilities manager provide leadership, guidance, oversight, audits, and enforcement of safety procedures, they alone cannot ensure a safe workplace. Every individual working in or around the data center—whether employees, contractors, vendors, or visitors—has the responsibility to follow safety procedures, report hazards, use required protective equipment, and stop unsafe activities.

This collective responsibility approach ensures that risks are recognized early, unsafe conditions are not ignored, and safety culture is embedded throughout daily operations. The safety manager establishes policies, training, audits, and compliance frameworks; the facilities manager ensures operational processes support safety; the managing director endorses governance and resources. However,frontline workers are the most exposed to hazards, making their behavior critical.

Option C is correct because EPI emphasizes that safety cannot be delegated solely to one role; it must be embraced byall staff, ensuring a consistent, safe working environment. Data centers operate high-voltage systems, heavy equipment, and complex mechanical infrastructure, making shared vigilance essential for preventing incidents and ensuring regulatory compliance.

In Service Level Management (SLM), EPI highlights thatcustomer feedback—such as surveys, complaints, and satisfaction assessments—is a core driver for the Service Improvement Process (SIP).

The SIP is designed to:

Identify weaknesses in services

Address dissatisfaction

Improve service delivery quality

Optimize process performance

Remove recurring issues

Customer surveys and complaints provide:

Direct feedback on service experience

Indicators of service quality gaps

Evidence of unmet expectations

Insights for corrective and preventive actions

These are theprimary input sourcesfor generating SIP actions.

Why the other options are not correct:

A. Needs Analysis— focuses on understanding customer requirements before service definition, not post-operational feedback.

C. Capability Assessment— evaluates internal service delivery capability, not customer perception.

D. Service Portfolio— defines available services, not improvements.

Therefore,Service Improvement Processis the correct selection.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

SIP is fueled by customer feedback such as complaints and surveys.

SLM uses feedback to drive improvements and maintain SLA quality.

EPI’s governance and risk management principles clearly state:

When a data center outsources maintenance,operational work can be outsourced, but risk cannot be transferred.

Risk may beshared, mitigated, or reduced through contractual arrangements, butownership remains with the data center service provider.

The data center operator is still responsible for ensuring compliance, operational continuity, and safety—even if another party performs the maintenance tasks.

Therefore:

The service provider must remain involved in risk evaluation, risk treatment, and ongoing monitoring.

Oversight responsibilities cannot be delegated.

OptionsCandDare incorrect because outsourcing the activity doesnotoutsource risk accountability.

OptionBis irrelevant because risk responsibility does not depend on provider expertise.

Thus,Ais correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Risk ownership remains with the organization even when maintenance is outsourced.

Outsourcing shares risk but does not transfer it.

The data center must maintain involvement in the risk management process.

Customer satisfaction surveys must be concise, relevant, and easy to complete. EPI’s service improvement guidance emphasizes that survey fatigue occurs when surveys are overly long or contain too many detailed questions, causing customers to abandon them. The most common reason for low participation isexcessive number of questions, making the survey time-consuming or overwhelming. In modern service environments, customers expect short, focused surveys that can be completed quickly. Surveys with more than a handful of core questions often have dramatically reduced response rates.

Option A (not enough questions) would not reduce participation; shorter surveys typically perform better. Option B (not sent by the data center manager) may influence perception but does not typically impact participation significantly. Option D (postal mail) is outdated but still not as strong a factor as excessive survey length—especially because the question does not indicate this method was used.

Therefore, the most likely root cause for poor participation is thatthe survey had too many questions.

When operators receive excessivenon-alarm notifications, this indicates that:

Thresholds are not well-configured

Events are misclassified

Alarm definitions are incorrect

Monitoring profiles require tuning

EPI’s monitoring best practices state that the correct response is to:

Review alarm information and adjust definitions, thresholds, and filtering.

This ensures that:

Only relevant alarms reach operators

Noise is minimized

Operators maintain focus on true issues

SLA-related metrics are accurately monitored

Why other options are incorrect:

A: Training is secondary and will not fix incorrect alarm settings.

C: Ignoring notifications is dangerous and violates operational control.

D: Upgrading software may not resolve the underlying configuration problem.

Thus,Bis correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Monitoring systems must generate actionable alarms, not noise.

Alarm thresholds and event filters must be reviewed and optimized regularly.