What best describes a cyber Table Top (CTT) exercise?

What best describes a cyber Table Top (CTT) exercise?

• A. High-tech simulation requiring specialized hardware.
• B. Low tech, low cost, intellectually intensive exercise to introduce and explore the effects of cyber offensive ops.
• C. A physical fitness drill.
• D. An automated red team operation.

Answer: (B)

A cyber Table Top exercise is a discussion-based, scenario-driven activity that focuses on decision-making, incident response, and coordination without real-world system operations. It is designed to be low-tech and low-cost, yet intellectually intensive, letting participants explore how cyber offensive actions could affect an organization and how they would react, communicate, and adjust policies in a safe setting. This makes the option describing it as low tech, low cost, intellectually intensive, and aimed at introducing and exploring the effects of cyber offensive ops the best fit. It isn’t about running high-tech simulations with specialized hardware—that would be more like a cyber range or live exercise. It isn’t a physical fitness drill, which is unrelated to cyber concepts. And it isn’t an automated red team operation, which would involve actual automated offensive testing rather than a guided, discussion-focused session.

A cyber Table Top exercise is a discussion-based, scenario-driven activity that focuses on decision-making, incident response, and coordination without real-world system operations. It is designed to be low-tech and low-cost, yet intellectually intensive, letting participants explore how cyber offensive actions could affect an organization and how they would react, communicate, and adjust policies in a safe setting.

This makes the option describing it as low tech, low cost, intellectually intensive, and aimed at introducing and exploring the effects of cyber offensive ops the best fit. It isn’t about running high-tech simulations with specialized hardware—that would be more like a cyber range or live exercise. It isn’t a physical fitness drill, which is unrelated to cyber concepts. And it isn’t an automated red team operation, which would involve actual automated offensive testing rather than a guided, discussion-focused session.