Following an incident in which a company's incident response plan (IRP) failed, the response team makes several updates and changes to the IRP. The CEO wants to test the IRP with a realistic incident using an attacking team, a defending team, and moderating team, and is not concerned with costs and planning. Which IRP exercise is the BEST option while meeting the CEO’s expectations?