CompTIA CySA+ (CS0-003) — Question 419

An organization recently changed its BC and DR plans. Which of the following would best allow for the incident response team to test the changes without any impact to the business?

Answer options

• A. Perform a tabletop drill based on previously identified incident scenarios.
• B. Simulate an incident by shutting down power to the primary data center.
• C. Migrate active workloads from the primary data center to the secondary location.
• D. Compare the current plan to lessons learned from previous incidents.

Correct answer: A

Explanation

The correct answer, A, involves conducting a tabletop drill, which allows teams to discuss and evaluate their response plans in a controlled environment without causing real disruptions. Options B and C would create actual incidents that could impact business operations, and option D, while useful for understanding past performance, does not facilitate direct testing of the new plans.