CAS-001 · Question #279
Which of the following types of Incident Response Teams (IRT) is responsible for a logical or physical segment of the infrastructure, usually of a large organization or one that is geographically…
The correct answer is C. Distributed IRT. A Distributed IRT assigns incident response responsibility to specific logical or physical segments of an organization, making it the appropriate structure for large or geographically dispersed enterprises.
Question
Which of the following types of Incident Response Teams (IRT) is responsible for a logical or physical segment of the infrastructure, usually of a large organization or one that is geographically dispersed?
Options
- ACoordinating IRT
- BCentral IRT
- CDistributed IRT
- DOutsourced IRT
How the community answered
(60 responses)- A2% (1)
- B3% (2)
- C90% (54)
- D5% (3)
Why each option
A Distributed IRT assigns incident response responsibility to specific logical or physical segments of an organization, making it the appropriate structure for large or geographically dispersed enterprises.
A Coordinating IRT acts as a liaison and orchestrator across multiple independent response teams rather than owning direct responsibility for a specific infrastructure segment.
A Central IRT handles all incidents through one consolidated team and is not designed around segmented or distributed infrastructure responsibility.
A Distributed IRT is organized around segments of the infrastructure - such as regional offices or specific network zones - with each team owning incident response for their area. This structure is ideal for large organizations or those spread across multiple locations because it avoids a central bottleneck, leverages local expertise, and enables faster response within each segment. It is distinct from a Central IRT, which handles all incidents from a single unified team regardless of location.
An Outsourced IRT is defined by its external staffing model - contracted from a third party - not by its structural relationship to infrastructure segments.
Concept tested: Incident Response Team types and organizational structures
Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.