The executive team gathers in a conference room while a facilitator walks them through a hypothetical data breach, asking how they would respond at each stage. No systems are touched and no actions are actually taken. Which type of exercise is this?
Select an answer to reveal the explanation.
Short Explanation
Talking it through around a table? That's a tabletop - you're walking the plan, not running it. A simulation actually plays out the event in a realistic way, with people performing their response actions. Watch for 'no systems are touched'; that's your giveaway.
Full Explanation
A tabletop exercise is a discussion-based activity in which participants walk through a scenario presented by a facilitator, describing what they would do, who they would contact, and what decisions they would make at each stage. Nothing is executed on production or test systems. Tabletops are low cost and low risk, and they are effective for validating roles, decision authority, and communication plans, especially with executives whose time is limited. A simulation exercise is more realistic: it emulates an incident in a controlled environment, often with injected events and participants performing actual response actions under time pressure, so it goes beyond conversation. A penetration test is a technical security assessment in which testers attempt to exploit weaknesses in real systems; it is not a rehearsal of the organization's response process. A failover test exercises resilience by switching workloads to alternate systems, which by definition touches infrastructure. Exam caveat: tabletop exercises often reveal gaps in playbooks and contact lists that should be fixed before running more expensive simulations. Operational check: after the exercise, document identified gaps with owners and due dates, and confirm they are incorporated into the playbook before the next scheduled exercise.