What is a tabletop exercise for telemetry security, and what is its purpose?

• A. A hands-on hardware attack simulation for live systems.
• B. A lengthy policy review session with no practical drills.
• C. A routine software patch procedure to fix vulnerabilities.
• D. A guided, discussion-based drill to simulate a security incident to evaluate readiness, response times, and communication.

Answer: (D)

A tabletop exercise is a guided, discussion-based drill used to rehearse how an organization would respond to a security incident without testing on live systems. For telemetry security, its purpose is to run through a hypothetical incident to evaluate how quickly the team detects the issue, decides on actions, and communicates with the right people and stakeholders. It helps validate incident response plans, clarify roles and escalation paths, and identify gaps in readiness and coordination—such as how operators, security teams, and management would coordinate containment, eradication, recovery, and external communications.

This fits best because it centers on thinking through the response in a structured, non-operational setting, rather than performing hands-on attacks, conducting policy-only reviews, or executing routine patching.