Which of the following provides the BEST opportunity to evaluate the capabilities of incident response team members?

The correct answer is B. Breach simulation exercise. A breach simulation exercise (also called a red team exercise or full-scale simulation) places the incident response team in a realistic, dynamic scenario that tests their actual technical skills, decision-making, coordination, and communication under pressure. A tabletop test…

Submitted by carlos_mx· Apr 18, 2026Information Security Incident Management

Question

Options

ATabletop test
BBreach simulation exercise
CScheduled penetration test
DDisaster recovery exercise

How the community answered

(25 responses)

A
12% (3)
B
76% (19)
C
4% (1)
D
8% (2)

Explanation

A breach simulation exercise (also called a red team exercise or full-scale simulation) places the incident response team in a realistic, dynamic scenario that tests their actual technical skills, decision-making, coordination, and communication under pressure. A tabletop test (A) is discussion-based and does not test hands-on capabilities. A penetration test (C) evaluates system vulnerabilities, not team response skills. A disaster recovery exercise (D) focuses on restoring operations, not on detecting and responding to active incidents. Only a breach simulation replicates real adversary behavior against which the team must genuinely respond.

Topics

#Incident Response Testing#Breach Simulation#Security Exercises#Team Capability Evaluation

Community Discussion

No community discussion yet for this question.

Full CISM Practice