A newly hired Chief Information Security Officer (CISO) wants to understand how the organization's CIRT handles issues brought to their attention, but needs to be very cautious about impacting any systems. The MOST appropriate method to use would be:
A) an internal vulnerability assessment.
B) a red-team threat-hunt exercise.
C) a white-box penetration test.
D) a guided tabletop exercise.

Question

Quizplus · Accepted Answer

A guided tabletop exercise allows the CISO to understand the CIRT's processes and decision-making without impacting any systems, as it is a discussion-based activity.

A Newly Hired Chief Information Security Officer (CISO) Wants to Understand