A newly hired Chief Information Security Officer (CISO) wants to understand how the organization's CIRT handles issues brought to their attention, but needs to be very cautious about impacting any systems. The MOST appropriate method to use would be:

Question

Accepted Answer

D. a guided tabletop exercise. A guided tabletop exercise is a structured, scenario-driven discussion in which participants walk through a hypothetical incident response without performing any real technical actions. It is the only listed option that reveals how the CIRT communicates, escalates, and makes decisions while posing absolutely zero risk of impacting production systems, making it ideal for an evaluative, low-risk assessment by a new CISO.

Answer

A. an internal vulnerability assessment. An internal vulnerability assessment actively probes and scans live systems, directly risking availability disruption and potentially triggering unplanned CIRT responses.

Answer

B. a red-team threat-hunt exercise. A red-team threat-hunt exercise involves active adversarial simulation against live infrastructure, which carries meaningful risk of service disruption.

Answer

C. a white-box penetration test. A white-box penetration test exploits the environment with full system knowledge, representing the highest likelihood of impacting production systems.

A newly hired Chief Information Security Officer (CISO) wants to understand how the organization's CIRT handles issues brought to their attention, but needs to be very cautious about impacting any…

Question

Options

How the community answered

Why each option

Topics

Community Discussion