CompTIA Security+ (SY0-601) — Question 461

Which of the following exercises should an organization use to improve its incident response process?

Answer options

• A. Tabletop
• B. Replication
• C. Failover
• D. Recovery

Correct answer: A

Explanation

The correct answer is A, Tabletop, as it involves simulated scenarios that allow teams to discuss and practice their incident response plans in a controlled environment. Options B, C, and D focus on different aspects of system operations and recovery rather than the procedural improvement of incident response.