SY0-701 · Question #683
SY0-701 Question #683: Real Exam Question with Answer & Explanation
The correct answer is C: To update the IRP. Tabletop exercises are structured discussion-based simulations designed to walk a team through a hypothetical incident scenario, and their primary output is identifying gaps or weaknesses in the Incident Response Plan (IRP) - making C the best answer. Option A is wrong because au
Question
Which of the following is the best reason to perform a tabletop exercise?
Options
- ATo address audit findings
- BTo collect remediation response times
- CTo update the IRP
- DTo calculate the ROI
Explanation
Tabletop exercises are structured discussion-based simulations designed to walk a team through a hypothetical incident scenario, and their primary output is identifying gaps or weaknesses in the Incident Response Plan (IRP) - making C the best answer. Option A is wrong because audits are formal compliance reviews; a tabletop may surface findings, but addressing audit findings is not its purpose. Option B is wrong because tabletops are discussion-based and do not generate real operational metrics like actual remediation timers. Option D is wrong because ROI is a financial calculation unrelated to the goals of an incident response drill. Memory tip: Think of a tabletop as a "plan check" - you sit around a table, walk through a scenario, and walk away with an updated plan (IRP).
Topics
Community Discussion
No community discussion yet for this question.