How would you test incident response tabletop exercises for effectiveness?

• A. Define scenarios, assign roles, measure detection, containment, eradication, recovery times, and improvement actions; evaluate comms and RCA quality.
• B. Define scenarios only, with no metrics.
• C. Focus solely on regulatory compliance checklists.
• D. Conduct a purely technical drill with no discussion.

Answer: (B)