nerdexam
EC-Council

312-50V10 · Question #368

Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

The correct answer is A. CSIRT provides an incident response service to enable a reliable and trusted single point of. The primary mission of a CSIRT is to serve as a trusted, single point of contact for coordinating and responding to computer security incidents.

Information Security and Ethical Hacking Fundamentals

Question

Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

Options

  • ACSIRT provides an incident response service to enable a reliable and trusted single point of
  • BCSIRT provides a computer security surveillance service to supply a government with important
  • CCSIRT provides a penetration testing service to support exception reporting on incidents
  • DCSIRT provides a vulnerability assessment service to assist law enforcement agencies with

How the community answered

(25 responses)
  • A
    88% (22)
  • C
    8% (2)
  • D
    4% (1)

Why each option

The primary mission of a CSIRT is to serve as a trusted, single point of contact for coordinating and responding to computer security incidents.

ACSIRT provides an incident response service to enable a reliable and trusted single point ofCorrect

A CSIRT's core function is to provide a reliable and trusted single point of contact for incident reporting and response, coordinating between affected parties, stakeholders, and other response teams. This centralized coordination role is what distinguishes a CSIRT from other security functions and is defined in RFC 2350 and Carnegie Mellon CERT guidelines.

BCSIRT provides a computer security surveillance service to supply a government with important

Providing government surveillance is not a CSIRT function - CSIRTs focus on incident response coordination, not intelligence or surveillance operations.

CCSIRT provides a penetration testing service to support exception reporting on incidents

Penetration testing is an offensive security assessment service, not an incident response function, and is not the primary role of a CSIRT.

DCSIRT provides a vulnerability assessment service to assist law enforcement agencies with

Vulnerability assessment to assist law enforcement is a forensic support role, not the primary chartered service of a CSIRT.

Concept tested: CSIRT primary mission and incident response function

Source: https://www.cisa.gov/topics/cyber-threats-and-advisories/incident-response

Topics

#CSIRT#incident response#single point of contact#security team

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice