These are attempts to measure reaction times to security breaches.

• A. Elicitation
• B. Surveillance
• C. Dry Run
• D. Test of Security

Answer: (D)

Assessing how quickly and effectively a security team responds to breaches is about evaluating response performance under controlled conditions. A Test of Security is the best fit because it directly probes how the system detects, responds to, and contains a breach, typically using simulated incidents to gather concrete reaction-time data and assess the overall effectiveness of procedures, training, and communication.

Elicitation isn’t about testing breach responses; it’s about prompting someone to reveal information. Surveillance involves watching and monitoring for threats, not measuring how fast actions are taken after a breach is detected. A Dry Run is a practice of procedures, which can help with familiarity, but it doesn’t inherently focus on measuring actual reaction times and effectiveness in a breach scenario the way a Test of Security does.