CRP Testing & Exercise Programs 2 — Questions and Answers
Question 1: Which exercise type involves participants working through a scenario in a conference room without activating actual response resources?
- Full-scale exercise
- Tabletop exercise (Correct answer)
- Functional exercise
- Operational drill
Correct answer: Tabletop exercise
A tabletop exercise is a discussion-based session where participants walk through a scenario around a table without deploying actual resources.
Question 2: What is the PRIMARY purpose of a hot wash conducted immediately after an exercise?
- Assign blame for failures
- Capture immediate observations and lessons while fresh (Correct answer)
- Document the exercise scenario for future use
- Update the business continuity plan
Correct answer: Capture immediate observations and lessons while fresh
A hot wash immediately captures participant impressions and lessons learned before details fade from memory.
Question 3: In exercise program design, what does the term 'inject' refer to?
- A software tool used to simulate cyberattacks
- A piece of information or event introduced during an exercise to drive participant actions (Correct answer)
- The process of adding new team members mid-exercise
- A medical simulation element in continuity drills
Correct answer: A piece of information or event introduced during an exercise to drive participant actions
An inject is a scripted message or event introduced to exercise participants to prompt specific decisions or actions.
Question 4: Which of the following best describes a 'purple team' approach in resilience testing?
- A team that only conducts physical security exercises
- A collaborative exercise where offensive (red) and defensive (blue) teams share knowledge in real time (Correct answer)
- A team of external auditors evaluating exercise outcomes
- A regulatory compliance review team
Correct answer: A collaborative exercise where offensive (red) and defensive (blue) teams share knowledge in real time
Purple team exercises combine red (attack) and blue (defense) teams working together to maximize learning and improve defenses simultaneously.
Question 5: A resilience professional wants to test whether backup communication systems work during a primary network outage. Which exercise type is MOST appropriate?
- Tabletop exercise
- Awareness workshop
- Technical drill (Correct answer)
- Orientation seminar
Correct answer: Technical drill
A technical drill activates and tests specific systems or equipment, such as backup communications, without a full-scale deployment.
Question 6: What is the recommended approach when an exercise reveals a critical gap in the recovery plan?
- Disqualify the exercise results and retest
- Document the gap, assign ownership, and track corrective action to closure (Correct answer)
- Immediately halt all future exercises until the gap is fixed
- Notify regulators before addressing the gap internally
Correct answer: Document the gap, assign ownership, and track corrective action to closure
Gaps identified in exercises must be documented with assigned owners and tracked through an improvement plan to ensure resolution.
Question 7: Which metric is MOST useful for measuring the effectiveness of an exercise program over time?
- Number of participants per exercise
- Percentage of corrective actions completed from prior exercises (Correct answer)
- Total hours spent on exercises per year
- Number of scenarios developed
Correct answer: Percentage of corrective actions completed from prior exercises
Tracking the closure rate of corrective actions from prior exercises directly measures whether the program drives real improvement.
CRP Testing & Exercise Programs 2
Which exercise type involves participants working through a scenario in a conference room without activating actual response resources?