nerdexam
CompTIA

SY0-701 · Question #942

A CIRT team updates their playbooks to include instructions to respond to a ransomware attack. To prepare for a real event, the team performs a simulation and assesses their performance afterward…

The correct answer is D. Tabletop exercise. A tabletop exercise is a simulated scenario where team members discuss and walk through their planned response to an incident, such as a ransomware attack, and then assess performance to identify improvements.

Submitted by yasin.bd· Mar 6, 2026Security Operations

Question

A CIRT team updates their playbooks to include instructions to respond to a ransomware attack. To prepare for a real event, the team performs a simulation and assesses their performance afterward. Which of the following activities does this describe?

Options

  • ALessons learned
  • BRoot cause analysis
  • CDisaster recovery planning
  • DTabletop exercise

How the community answered

(20 responses)
  • A
    5% (1)
  • D
    95% (19)

Explanation

A tabletop exercise is a simulated scenario where team members discuss and walk through their planned response to an incident, such as a ransomware attack, and then assess performance to identify improvements.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice