Certified Information Security Manager (CISM) — Question 736
An incident response team has been assembled from a group of experienced individuals. Which type of exercise would be MOST beneficial for the team at the first drill?
Answer options
- A. Tabletop exercise
- B. Red team exercise
- C. Disaster recovery exercise
- D. Black box penetration test
Correct answer: A
Explanation
A tabletop exercise is designed to allow teams to discuss and walk through their response plans in a low-pressure environment, making it ideal for initial drills. In contrast, red team exercises, disaster recovery exercises, and black box penetration tests involve more complex and practical scenarios that may not be suitable for a team's first practice.