Which of the following exercises should an organization use to improve its incident response process?
Choose an answer
Tap an option to check your answer.
Correct answer: Tabletop.
Why this is the answer
A tabletop exercise is a discussion-based training session where participants talk through their roles and responsibilities during an incident, identifying strengths and weaknesses in the incident response plan without actually executing it. This helps improve the process by uncovering gaps and refining procedures in a low-stress environment. Replication, failover, and recovery are technical processes related to data availability and disaster recovery, not exercises designed to improve the incident response process itself. Replication involves creating copies of data, failover is switching to a redundant system upon failure, and recovery is restoring systems after an outage. While these are components of a robust security posture, they are not the primary method for improving the incident response process through structured discussion and review.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed