CRA

CRA Practitioner

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

Applying the CRA in practice: the 24h/72h/14-day reporting chain, SBOM requirements, technical documentation, and manufacturer due diligence.

10 questions · 75% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 10

Under Article 14(2), what is the deadline for a manufacturer's early warning notification of an actively exploited vulnerability?

Within 24 hours of becoming aware of itWithin 30 daysWithin 6 monthsThere is no deadline for the early warning

Question 2 of 10

Under Article 14(2), following the early warning, when must the vulnerability notification be submitted (unless already provided)?

Within 72 hours of the manufacturer becoming aware of the actively exploited vulnerabilityWithin 10 business daysWithin 1 hourThere is no separate vulnerability notification required

Question 3 of 10

Under Article 14(2)(c), when must the final report on an actively exploited vulnerability be submitted, unless already provided?

No later than 14 days after a corrective or mitigating measure is availableImmediately upon becoming aware of the vulnerability, with no further reportingWithin 5 yearsOnly if the manufacturer chooses to disclose it publicly

Question 4 of 10

Under Article 14(4), what is the final-report deadline for a severe incident (as opposed to a vulnerability)?

Within one month after submission of the incident notificationWithin 14 days in all cases, identical to vulnerabilitiesThere is no final report requirement for incidentsOnly if requested by the affected users

Question 5 of 10

Per Annex I Part II point 1, what must a manufacturer's SBOM cover at minimum?

Every single line of source codeAt least the top-level dependencies of the product, in a commonly used and machine-readable formatOnly components purchased from EU-based suppliersOnly components written in a single specific programming language

Question 6 of 10

Under Article 13(5), what must manufacturers do when integrating components sourced from third parties, including free and open-source software?

Nothing — third-party components are entirely the third party’s responsibilityExercise due diligence so that those components do not compromise the cybersecurity of the productRefuse to use any third-party or open-source component under any circumstancesOnly check the component’s price, not its security

Question 7 of 10

Under Article 31, what must the technical documentation contain at minimum?

Only a marketing summary of the product’s featuresAt least the elements set out in Annex VII, showing compliance with the essential cybersecurity requirementsOnly the manufacturer’s certificate of incorporationNothing specific is required beyond a product photo

Question 8 of 10

Under Article 31(2), when must the technical documentation be drawn up and maintained?

Only after a regulator specifically requests itBefore the product is placed on the market, and continuously updated, where appropriate, at least during the support periodOnly once, with no updates ever requiredOnly if the product is sold outside the EU

Question 9 of 10

Under Article 13(17), what must manufacturers designate to enable users to communicate about vulnerabilities?

A dedicated marketing hotlineA single point of contact to enable users to communicate directly and rapidly with themA physical retail store in every Member StateNo contact point is required under the CRA

Question 10 of 10

Which of the following products are explicitly excluded from the CRA's scope under Article 2, because other Union legislation already applies?

Select all that apply.

Medical devices under Regulation (EU) 2017/745In-vehicle systems under Regulation (EU) 2019/2144Products certified under the civil aviation safety regulation (EU) 2018/1139A general-purpose consumer smart speaker with no other applicable Union legislation

0 of 10 answered