312-50V10 · Question #368
Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?
The correct answer is A. CSIRT provides an incident response service to enable a reliable and trusted single point of. The primary mission of a CSIRT is to serve as a trusted, single point of contact for coordinating and responding to computer security incidents.
Question
Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?
Options
- ACSIRT provides an incident response service to enable a reliable and trusted single point of
- BCSIRT provides a computer security surveillance service to supply a government with important
- CCSIRT provides a penetration testing service to support exception reporting on incidents
- DCSIRT provides a vulnerability assessment service to assist law enforcement agencies with
How the community answered
(25 responses)- A88% (22)
- C8% (2)
- D4% (1)
Why each option
The primary mission of a CSIRT is to serve as a trusted, single point of contact for coordinating and responding to computer security incidents.
A CSIRT's core function is to provide a reliable and trusted single point of contact for incident reporting and response, coordinating between affected parties, stakeholders, and other response teams. This centralized coordination role is what distinguishes a CSIRT from other security functions and is defined in RFC 2350 and Carnegie Mellon CERT guidelines.
Providing government surveillance is not a CSIRT function - CSIRTs focus on incident response coordination, not intelligence or surveillance operations.
Penetration testing is an offensive security assessment service, not an incident response function, and is not the primary role of a CSIRT.
Vulnerability assessment to assist law enforcement is a forensic support role, not the primary chartered service of a CSIRT.
Concept tested: CSIRT primary mission and incident response function
Source: https://www.cisa.gov/topics/cyber-threats-and-advisories/incident-response
Topics
Community Discussion
No community discussion yet for this question.