CompTIA CASP+ (CAS-004) — Question 208

An organization developed an incident response plan. Which of the following would be BEST to assess the effectiveness of the plan?

Answer options

• A. Requesting a third-party review
• B. Generating a checklist by organizational unit
• C. Establishing role succession and call lists
• D. Creating a playbook
• E. Performing a tabletop exercise

Correct answer: E

Explanation

Performing a tabletop exercise allows the organization to simulate an incident and test the response plan in a controlled environment, which is essential for identifying gaps and areas for improvement. The other options, while useful in different contexts, do not provide the same practical assessment of the plan's effectiveness as a tabletop exercise does.