NATIONAL INCIDENT MANAGEMENT SYSTEM
NIMS ICS 400 Reviewed Exam
Verified Questions and Correct Answers
A+ Graded – 2026/2027 Edition
Official Practice Exam · 2026/2027 Edition
Questions Minutes Passing Score Recertification
75 90 75% Annual
Table of Contents
Section 1: Fundamentals of ICS for Complex Incidents . . . . 11 questions (Q1–Q11)
Section 2: Unified Command . . . . 15 questions (Q12–Q26)
Section 3: Area Command . . . . 15 questions (Q27–Q41)
Section 4: Multi-Agency Coordination Systems . . . . 15 questions (Q42–Q56)
Section 5: Complex Incident Management . . . . 19 questions (Q57–Q75)
Instructions
This practice exam contains 75 multiple-choice questions divided into 5 sections. You have 90 minutes to
complete the exam. A passing score of 75% (56 correct answers) is required. Select the single best answer
for each question. All questions are weighted equally. Review the rationale for each answer to strengthen
your understanding of advanced ICS concepts for complex incidents.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 1 of {TOTAL}
, Section 1: Fundamentals of ICS for Complex Incidents — 2026/2027
Q1 Question 1 of 75
A Type 1 incident commander is managing a wildfire that has crossed three county boundaries and
threatens a municipal water supply. The incident has exceeded the capability of local resources and
requires multi-state support. According to ICS principles for complex incidents, what is the primary
reason for expanding the ICS organization at this level?
A. Complex incidents require a proportional expansion of the command structure to maintain
effective span of control and functional specialization
B. The Incident Commander must delegate authority to every General Staff position regardless of
actual need
C. Complex incidents always require replacing the Incident Commander with a Unified Command
structure
D. Expanding the ICS organization is primarily driven by the number of agencies involved rather than
incident complexity
Correct Answer: A
Rationale:
The correct answer recognizes that ICS expansion is driven by complexity and the need to maintain span of
control, not merely the number of agencies. While Unified Command may be appropriate, it is not always
required, and not every General Staff position must be filled regardless of need.
Q2 Question 2 of 75
During a complex hurricane response, the Operations Section Chief finds that the current span of
control has reached 1:12 for reporting divisions. The incident action plan is not being executed
effectively because supervisors cannot adequately monitor all subordinates. What is the most
appropriate ICS corrective action?
A. Request that the Incident Commander take direct control of the excess divisions
B. Add an additional level of supervision by creating branches or groups to reduce the span of
control to a manageable ratio
C. Reassign some divisions to the Planning Section to reduce the Operations Section workload
D. Eliminate some divisions to bring the span of control within acceptable limits
Correct Answer: B
Rationale:
The correct answer addresses the root cause by adding organizational layers to restore span of control, which
is the standard ICS solution. Eliminating divisions compromises incident management, reassigning to Planning
misapplies functional roles, and the IC taking direct control violates ICS principles.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 2 of {TOTAL}
,Q3 Question 3 of 75
An Incident Commander managing a complex technical rescue operation is reviewing the ICS Form
201 at the start of a new operational period. The form shows that the previous IC established four
branches in Operations but only two divisions are currently active. What should the new IC do
regarding the ICS organization?
A. Request that the agency executive restructure the entire command organization
B. Maintain all four branches as active regardless of current activity levels to preserve continuity
C. Retain the current organization but deactivate unused branches until they are needed,
maintaining the framework for rapid reactivation
D. Immediately collapse all branches and divisions to simplify the organization
Correct Answer: C
Rationale:
The correct answer balances organizational flexibility with efficiency by retaining the framework but deactivating
unused components. Collapsing everything loses the ability to scale quickly, maintaining all as active wastes
resources, and requesting agency executive intervention is unnecessary at this level.
Q4 Question 4 of 75
A complex incident involving a train derailment with hazardous materials has activated mutual aid
from six jurisdictions. The current ICS structure has become unwieldy, with duplicate positions and
conflicting resource ordering. What foundational ICS principle has been most compromised?
A. Unified Command, because only one agency should have authority over the incident
B. Manageable span of control, because there are too many resources on scene
C. Integrated communications, because radios are on different frequencies
D. Common terminology, because multiple agencies are using different names for the same
functional positions and resources
Correct Answer: D
Rationale:
The scenario describes duplicate positions and conflicting resource ordering, which are direct results of failing
to use common terminology across agencies. While span of control and communications may also be issues,
the root cause described is terminology inconsistency. Unified Command does not mean single-agency
authority.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 3 of {TOTAL}
, Q5 Question 5 of 75
During a complex flood response spanning five counties, the Incident Commander needs to transfer
command to a more qualified Incident Commander from a cooperating agency. According to ICS
principles, what must occur for this transfer to be valid?
A. The outgoing IC must brief the incoming IC, the transfer must be documented, and all
personnel must be notified of the change
B. The agency executive must approve the transfer and issue a new delegation of authority
C. The incoming IC automatically assumes command upon arrival at the incident command post
D. Transfer of command can only occur at the start of a new operational period
Correct Answer: A
Rationale:
ICS requires a formal transfer process including briefing, documentation, and notification. Transfer does not
require agency executive approval (that is for delegation of authority), it does not happen automatically upon
arrival, and it can occur at any time when justified.
Q6 Question 6 of 75
A complex incident involving an active shooter and simultaneous bomb threats at a university has
required the activation of a Type 1 Incident Management Team. The team arrives and finds that local
responders have established an ICS structure that does not conform to standard ICS practices. What
should the incoming IMT do first?
A. Request that the governor suspend the existing ICS structure by executive order
B. Conduct a thorough assessment of the existing organization and transition to standard ICS
while maintaining continuity of operations
C. Immediately dismantle the existing organization and implement the IMT's pre-configured structure
D. Accept the existing organization as-is to avoid disrupting ongoing operations
Correct Answer: B
Rationale:
The correct answer prioritizes both operational continuity and adherence to ICS standards through a careful
transition. Immediately dismantling risks operational gaps, accepting non-standard structure perpetuates
problems, and an executive order is unnecessary and inappropriate.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 4 of {TOTAL}
NIMS ICS 400 Reviewed Exam
Verified Questions and Correct Answers
A+ Graded – 2026/2027 Edition
Official Practice Exam · 2026/2027 Edition
Questions Minutes Passing Score Recertification
75 90 75% Annual
Table of Contents
Section 1: Fundamentals of ICS for Complex Incidents . . . . 11 questions (Q1–Q11)
Section 2: Unified Command . . . . 15 questions (Q12–Q26)
Section 3: Area Command . . . . 15 questions (Q27–Q41)
Section 4: Multi-Agency Coordination Systems . . . . 15 questions (Q42–Q56)
Section 5: Complex Incident Management . . . . 19 questions (Q57–Q75)
Instructions
This practice exam contains 75 multiple-choice questions divided into 5 sections. You have 90 minutes to
complete the exam. A passing score of 75% (56 correct answers) is required. Select the single best answer
for each question. All questions are weighted equally. Review the rationale for each answer to strengthen
your understanding of advanced ICS concepts for complex incidents.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 1 of {TOTAL}
, Section 1: Fundamentals of ICS for Complex Incidents — 2026/2027
Q1 Question 1 of 75
A Type 1 incident commander is managing a wildfire that has crossed three county boundaries and
threatens a municipal water supply. The incident has exceeded the capability of local resources and
requires multi-state support. According to ICS principles for complex incidents, what is the primary
reason for expanding the ICS organization at this level?
A. Complex incidents require a proportional expansion of the command structure to maintain
effective span of control and functional specialization
B. The Incident Commander must delegate authority to every General Staff position regardless of
actual need
C. Complex incidents always require replacing the Incident Commander with a Unified Command
structure
D. Expanding the ICS organization is primarily driven by the number of agencies involved rather than
incident complexity
Correct Answer: A
Rationale:
The correct answer recognizes that ICS expansion is driven by complexity and the need to maintain span of
control, not merely the number of agencies. While Unified Command may be appropriate, it is not always
required, and not every General Staff position must be filled regardless of need.
Q2 Question 2 of 75
During a complex hurricane response, the Operations Section Chief finds that the current span of
control has reached 1:12 for reporting divisions. The incident action plan is not being executed
effectively because supervisors cannot adequately monitor all subordinates. What is the most
appropriate ICS corrective action?
A. Request that the Incident Commander take direct control of the excess divisions
B. Add an additional level of supervision by creating branches or groups to reduce the span of
control to a manageable ratio
C. Reassign some divisions to the Planning Section to reduce the Operations Section workload
D. Eliminate some divisions to bring the span of control within acceptable limits
Correct Answer: B
Rationale:
The correct answer addresses the root cause by adding organizational layers to restore span of control, which
is the standard ICS solution. Eliminating divisions compromises incident management, reassigning to Planning
misapplies functional roles, and the IC taking direct control violates ICS principles.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 2 of {TOTAL}
,Q3 Question 3 of 75
An Incident Commander managing a complex technical rescue operation is reviewing the ICS Form
201 at the start of a new operational period. The form shows that the previous IC established four
branches in Operations but only two divisions are currently active. What should the new IC do
regarding the ICS organization?
A. Request that the agency executive restructure the entire command organization
B. Maintain all four branches as active regardless of current activity levels to preserve continuity
C. Retain the current organization but deactivate unused branches until they are needed,
maintaining the framework for rapid reactivation
D. Immediately collapse all branches and divisions to simplify the organization
Correct Answer: C
Rationale:
The correct answer balances organizational flexibility with efficiency by retaining the framework but deactivating
unused components. Collapsing everything loses the ability to scale quickly, maintaining all as active wastes
resources, and requesting agency executive intervention is unnecessary at this level.
Q4 Question 4 of 75
A complex incident involving a train derailment with hazardous materials has activated mutual aid
from six jurisdictions. The current ICS structure has become unwieldy, with duplicate positions and
conflicting resource ordering. What foundational ICS principle has been most compromised?
A. Unified Command, because only one agency should have authority over the incident
B. Manageable span of control, because there are too many resources on scene
C. Integrated communications, because radios are on different frequencies
D. Common terminology, because multiple agencies are using different names for the same
functional positions and resources
Correct Answer: D
Rationale:
The scenario describes duplicate positions and conflicting resource ordering, which are direct results of failing
to use common terminology across agencies. While span of control and communications may also be issues,
the root cause described is terminology inconsistency. Unified Command does not mean single-agency
authority.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 3 of {TOTAL}
, Q5 Question 5 of 75
During a complex flood response spanning five counties, the Incident Commander needs to transfer
command to a more qualified Incident Commander from a cooperating agency. According to ICS
principles, what must occur for this transfer to be valid?
A. The outgoing IC must brief the incoming IC, the transfer must be documented, and all
personnel must be notified of the change
B. The agency executive must approve the transfer and issue a new delegation of authority
C. The incoming IC automatically assumes command upon arrival at the incident command post
D. Transfer of command can only occur at the start of a new operational period
Correct Answer: A
Rationale:
ICS requires a formal transfer process including briefing, documentation, and notification. Transfer does not
require agency executive approval (that is for delegation of authority), it does not happen automatically upon
arrival, and it can occur at any time when justified.
Q6 Question 6 of 75
A complex incident involving an active shooter and simultaneous bomb threats at a university has
required the activation of a Type 1 Incident Management Team. The team arrives and finds that local
responders have established an ICS structure that does not conform to standard ICS practices. What
should the incoming IMT do first?
A. Request that the governor suspend the existing ICS structure by executive order
B. Conduct a thorough assessment of the existing organization and transition to standard ICS
while maintaining continuity of operations
C. Immediately dismantle the existing organization and implement the IMT's pre-configured structure
D. Accept the existing organization as-is to avoid disrupting ongoing operations
Correct Answer: B
Rationale:
The correct answer prioritizes both operational continuity and adherence to ICS standards through a careful
transition. Immediately dismantling risks operational gaps, accepting non-standard structure perpetuates
problems, and an executive order is unnecessary and inappropriate.
NIMS ICS 400 — 2026/2027 | Passing Score: 75% | Page 4 of {TOTAL}
