CompTIA Security+ SY0-601 – Question148

A company needs to validate its updated incident response plan using a real-world scenario that will test
decision points and relevant incident response actions without interrupting daily operations. Which of the
following would BEST meet the company's requirements?


A.
Red-team exercise
B. Capture-the-flag exercise
C. Tabletop exercise
D. Phishing exercise

Correct Answer: C