Exam SY0-701 Topic 2 Question 170 Discussion

A tabletop exercise is a simulation-based activity where incident response team members and relevant stakeholders walk through a hypothetical security incident in a discussion-based format. This exercise helps validate response plans, roles, and communication channels without actual system disruption.
Lessons learned (A) is a post-incident review, digital forensics (B) is evidence collection after an incident, and root cause analysis (D) investigates the underlying cause after an event.
Tabletop exercises are standard practices within the Security Operations domain to prepare teams for real incidents#6:Chapter 14 CompTIA Security+ Study Guide#.