PCI SSCPCI DSSIncident ResponseEASYFree question
What is a tabletop exercise for incident response?
- A.A technical test where analysts launch a controlled attack against production systems and measure how fast the alerts reach the response team
- B.A review meeting where the QSA samples closed incident tickets and confirms that the plan was followed during the last breach
- C.A live drill where staff isolate real servers from the network and restore them from backup to prove the failover process works
- D.A discussion-based exercise where IR team members walk through a simulated security incident scenario to test the plan and practice their roles without impacting actual systems
Why D is correct
Tabletop exercises simulate incidents through discussion, allowing teams to practice roles and test the IR plan without impacting production systems.
Know someone studying for PCI DSS? Send them this one.