Which of the following objectives is best achieved by a tabletop exercise?

A tabletop exercise is a discussion-based training session where participants talk through their roles and responsibilities during an incident. This format is ideal for familiarizing participants with the incident response process, identifying gaps in plans, and improving communication. It's about understanding the how and who, not the doing. Deciding red and blue team rules of engagement is typically done during the planning phase of a penetration test or adversarial exercise, not a tabletop. Quickly determining the impact of an actual security breach requires real-time monitoring and analysis tools, not a simulated discussion. Conducting multiple security investigations in parallel is an operational task, not the primary objective of a tabletop exercise.