CRA

CRA Basics

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

The Cyber Resilience Act: essential cybersecurity requirements, scope, and key definitions for products with digital elements.

10 questions · 70% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 10

What does the Cyber Resilience Act (Regulation (EU) 2024/2847) primarily regulate?

Only AI systems used by public authoritiesThe cybersecurity of products with digital elements, covering their design, development, production, and vulnerability handlingOnly financial-sector ICT systemsOnly personal data processing activities

Question 2 of 10

Under Article 2, what triggers a product being in scope of the CRA?

The product costs more than EUR 1,000The product is only ever used offline with no possible connectionThe product's intended or reasonably foreseeable use includes a direct or indirect data connection to a device or networkThe product is manufactured exclusively within the EU

Question 3 of 10

Which of the following is explicitly excluded from the CRA's scope under Article 2?

General-purpose laptops sold to consumersSmart home devicesMedical devices already covered by Regulation (EU) 2017/745Cloud-connected industrial sensors

Question 4 of 10

Under Article 3, what is a 'product with digital elements'?

Only physical hardware, never softwareA software or hardware product and its remote data processing solutions, including components placed on the market separatelyOnly products sold directly to consumersOnly products that process personal data

Question 5 of 10

Who is a 'manufacturer' under Article 3(13)?

Only a company physically headquartered in the EUA natural or legal person who develops or manufactures products with digital elements, or has them designed/developed/manufactured, and markets them under its own name or trademarkOnly the end user of the productOnly a retailer that resells the product unmodified

Question 6 of 10

Under Article 6, what must be true before a product with digital elements can be made available on the market?

Nothing — any product can be made available regardless of securityIt must meet the essential cybersecurity requirements in Annex I Part I, and the manufacturer’s processes must meet Annex I Part IIOnly that it has a CE marking, regardless of what it certifiesOnly that it has passed a general safety test unrelated to cybersecurity

Question 7 of 10

Under Article 3(39), what is a software bill of materials (SBOM)?

A pricing document for software licencesA formal record containing details and supply chain relationships of components included in the software elements of a productA marketing brochure describing product featuresA legal contract between manufacturer and distributor

Question 8 of 10

Under Article 13(8), what is the minimum support period during which a manufacturer must handle vulnerabilities in a product with digital elements?

There is no minimum; it is entirely at the manufacturer’s discretionAt least five years, unless the product’s expected use time is shorter30 daysOne year in all cases with no exceptions

Question 9 of 10

Under Article 14, what must a manufacturer do upon becoming aware of an actively exploited vulnerability in its product?

Wait until the next scheduled product release to address itNotify the CSIRT designated as coordinator and ENISA, via the single reporting platform, within defined deadlinesOnly inform its own internal legal team, with no external notificationNothing is required unless a regulator specifically asks

Question 10 of 10

The Cyber Resilience Act applies only to standalone software products, never to hardware products with digital elements.

TrueFalse

0 of 10 answered