A Newly Hired Chief Information Security Officer (CISO) Wants to Understand

Multiple Choice

A newly hired Chief Information Security Officer (CISO) wants to understand how the organization's CIRT handles issues brought to their attention, but needs to be very cautious about impacting any systems. The MOST appropriate method to use would be:

A) an internal vulnerability assessment.
B) a red-team threat-hunt exercise.
C) a white-box penetration test.
D) a guided tabletop exercise.