Evaluation of operator response to emergency events in cyber operations is known as what?

• A. Emergency Drills
• B. Emergency Operating Procedures (EOPs)
• C. Splunk
• D. Active Directory (AD)

Answer: (A)

Evaluating how operators respond to cyber emergencies is done through emergency drills. These drills simulate realistic attack or failure scenarios so teams can practice and observe how they detect, assess, escalate, contain, and recover from incidents. The focus is on performance under pressure—timing, decision-making, communication, and adherence to incident response procedures—so you can identify gaps and improve readiness.

Emergency Operating Procedures describe the exact steps to take during emergencies, but they’re about the prescribed process, not the performance observed during practice. Splunk is a tool for log analysis and incident detection, not an assessment method. Active Directory is a directory service for managing identities and access, unrelated to evaluating incident response.

So emergency drills are the best fit for evaluating operator response to cyber emergencies.