Which of the following is the next step the manager should take?

A security manager created new documentation to use in response to various types of security incidents.

Which of the following is the next step the manager should take?
A . Set the maximum data retention policy.
B . Securely store the documents on an air-gapped network.
C . Review the documents’ data classification policy.
D . Conduct a tabletop exercise with the team.

View Answer

Answer: D

Explanation:

A tabletop exercise is a simulated scenario that tests the effectiveness of a security incident response plan. It involves gathering the relevant stakeholders and walking through the steps of the plan, identifying any gaps or issues that need to be addressed. A tabletop exercise is a good way to validate the documentation created by the security manager and ensure that the team is prepared for various types of security incidents.

Reference: CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 6: Risk Management,

page 2841. CompTIA Security+ Certification Kit: Exam SY0-701, 7th Edition, Chapter 6: Risk Management, page 2842.