Testing & Exercise Programs Flashcards
7 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Testing & Exercise Programs flashcards as text
What is the primary output of the exercise evaluation process?
Answer: An After-Action Report (AAR) with a Corrective Action Plan (CAP)
The After-Action Report documents observed strengths and areas for improvement, and the Corrective Action Plan assigns responsibility and timelines for addressing gaps.
Who should own corrective actions identified in an exercise After-Action Report?
Answer: Specific individuals or departments with accountability and completion timelines
Corrective actions must be assigned to specific owners with defined deadlines to ensure accountability and measurable progress toward improvement.
What does it indicate if an organization repeatedly identifies the same gaps in successive exercise After-Action Reports?
Answer: Corrective actions from prior exercises are not being effectively implemented
Recurring gaps across multiple AARs signal that the corrective action process is broken—findings are documented but not resolved or verified for closure.
Which metric would BEST measure the effectiveness of an exercise program over time?
Answer: Percentage of corrective actions closed within defined timelines
Tracking corrective action closure rates measures whether the exercise program is actually driving improvement rather than just generating documentation.
An exercise reveals that the alternate processing site cannot handle peak transaction volumes. This finding should be classified as:
Answer: A critical gap requiring prioritized corrective action
Capacity gaps at the recovery site are critical findings because they directly affect the organization's ability to meet its Recovery Time and Recovery Point Objectives.
Which of the following is a key difference between a 'lesson learned' and a 'best practice' in exercise documentation?
Answer: A lesson learned identifies what went wrong; a best practice identifies what worked well and should be repeated
Lessons learned capture gaps or failures to be corrected, while best practices document effective responses worth replicating and sharing across the organization.
How should an organization handle exercise results that reveal sensitive security or operational vulnerabilities?
Answer: Classify or restrict distribution of the AAR to need-to-know personnel only
AARs containing sensitive vulnerabilities should have controlled distribution to prevent the information from being exploited by adversaries or inadvertently disclosed.