The CEO of a large defense contractor wants to validate that the organization's cybersecurity protections can effectively identify and defend against attacks by known threat actor groups. Which type of exercise is the BEST option to satisfy the CEO's requirements? A.Training B.Walkthrough C.Tabletop exercise D.Simulation