A company needs to validate its updated incident response plan using a real-world scenario that will test
decision points and relevant incident response actions without interrupting daily operations. Which of the
following would BEST meet the company's requirements?


A. Red-team exercise
B. Capture-the-flag exercise
C. Tabletop exercise
D. Phishing exercise