CAS-003 · Question #329
Due to a recent breach, the Chief Executive Officer (CEO) has requested the following activities be conducted during incident response planning: - Involve business owners and stakeholders - Create…
The correct answer is D. Tabletop. The correct answer is D: Tabletop. A tabletop exercise is a discussion-based, low-cost IR rehearsal where key stakeholders and business owners gather to verbally walk through a hypothetical scenario (e.g., a breach) without deploying actual resources or systems. The defining…
Question
Due to a recent breach, the Chief Executive Officer (CEO) has requested the following activities be conducted during incident response planning:
- Involve business owners and stakeholders
- Create an applicable scenario
- Conduct a biannual verbal review of the incident response plan
- Report on the lessons learned and gaps identified
Which of the following exercises has the CEO requested?
Options
- AParallel operations
- BFull transition
- CInternal review
- DTabletop
- EPartial simulation
How the community answered
(22 responses)- A9% (2)
- C5% (1)
- D86% (19)
Explanation
The correct answer is D: Tabletop. A tabletop exercise is a discussion-based, low-cost IR rehearsal where key stakeholders and business owners gather to verbally walk through a hypothetical scenario (e.g., a breach) without deploying actual resources or systems. The defining characteristics here are: (1) involving business owners and stakeholders, (2) using a realistic scenario, (3) conducting a verbal/discussion-based review (biannually), and (4) capturing lessons learned and gaps. These are the hallmark traits of a tabletop exercise. Parallel operations and full transition are BCP/DR tests that involve running systems simultaneously or cutting over live systems. Partial simulation involves some real actions (not purely verbal), and 'internal review' is simply a document review - not a scenario-driven exercise.
Topics
Community Discussion
No community discussion yet for this question.