CompTIA Security+ (SY0-701) — Question 388

A security manager created new documentation to use in response to various types of security incidents. Which of the following is the next step the manager should take?

Answer options

• A. Set the maximum data retention policy.
• B. Securely store the documents on an air-gapped network.
• C. Review the documents’ data classification policy.
• D. Conduct a tabletop exercise with the team.

Correct answer: D

Explanation

Conducting a tabletop exercise with the team is essential to ensure that everyone understands the new documentation and can effectively respond to incidents. Options A, B, and C, while important, do not directly address the immediate need to validate the team's readiness and understanding of the response procedures.