CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ365

Incident Management

An incident response team has been formed from a group of experienced individuals. Which type of exercise would be MOST beneficial for the team during its first drill?

  • A Tabletop exercise
  • B Red team exercise
  • C Disaster recovery exercise
  • D Black box penetration test
Explanation

A tabletop exercise lets the incident response team walk through a simulated incident in a facilitated, discussion-based setting. It is well suited to an initial drill because it validates roles, communication paths, procedures, and decision-making without requiring a live technical attack or recovery event.

Community Discussion

No comments yet. Be the first to start the discussion!