CompTIA Security+ (SY0-701) — Question 521

Which of the following is the best reason to perform a tabletop exercise?

Answer options

• A. To address audit findings
• B. To collect remediation response times
• C. To update the IRP
• D. To calculate the ROI

Correct answer: C

Explanation

The correct answer is C, as tabletop exercises are designed to evaluate and improve the Incident Response Plan (IRP) through discussion and simulations. Options A, B, and D do not focus on the primary goal of enhancing the IRP, making them less relevant in the context of a tabletop exercise.