CertNexus Certified Cyber Secure Coder (CSC) — Question 36

Which of the following could be useful to an organization that wants to test its incident response procedures without risking any system downtime?

Answer options

• A. Blue team exercise
• B. Business continuity exercise
• C. Tabletop exercise
• D. Red team exercise

Correct answer: B

Explanation

The correct answer is B, as a Business Continuity Exercise focuses on testing and validating procedures in a way that minimizes or avoids any impact on operations. Options A and D involve active engagement that often leads to system changes or disruptions, while C, a Tabletop exercise, is more of a discussion-based approach and may not thoroughly test the procedures in a practical setting.