CompTIA Security+ (SY0-701) — Question 507

Which of the following objectives is best achieved by a tabletop exercise?

Answer options

• A. Familiarizing participants with the incident response process
• B. Deciding red and blue team rules of engagement
• C. Quickly determining the impact of an actual security breach
• D. Conducting multiple security investigations in parallel

Correct answer: A

Explanation

A tabletop exercise primarily serves to educate participants about the incident response process, ensuring they understand their roles and responsibilities. The other options, such as deciding team rules of engagement or assessing the impact of a breach, are not the main focus of a tabletop exercise, which is more about discussion and strategy rather than operational execution or real-time analysis.