medium
Single Answer
0Carl wants to test his organization’s incident response process. He conducts a tabletop exercise for his security team. Which of the following best describes this type of exercise?
Answer Options
A
A scenario is introduced and each member of the team takes actions that they would use to respond to the scenario.
B
Third-party penetration testers work with the security team to address issues they discovered during their penetration test.
C
The security team meets to talk through what they would do in a given scenario and takes notes on what works and what doesn’t.
D
The organization’s datacenter is manually forced to fail over to an alternate site to test the scenario’s objectives.
Correct Answer: C
Explanation
Tabletop exercises involve teams sitting down to talk through an exercise. Teams don’t perform actions or even simulate them, third-party penetration testers are not reviewing their data, and no actual fail overs occur.