nerdexam
CompTIA

CAS-001 · Question #279

Which of the following types of Incident Response Teams (IRT) is responsible for a logical or physical segment of the infrastructure, usually of a large organization or one that is geographically…

The correct answer is C. Distributed IRT. A Distributed IRT assigns incident response responsibility to specific logical or physical segments of an organization, making it the appropriate structure for large or geographically dispersed enterprises.

Enterprise Security

Question

Which of the following types of Incident Response Teams (IRT) is responsible for a logical or physical segment of the infrastructure, usually of a large organization or one that is geographically dispersed?

Options

  • ACoordinating IRT
  • BCentral IRT
  • CDistributed IRT
  • DOutsourced IRT

How the community answered

(60 responses)
  • A
    2% (1)
  • B
    3% (2)
  • C
    90% (54)
  • D
    5% (3)

Why each option

A Distributed IRT assigns incident response responsibility to specific logical or physical segments of an organization, making it the appropriate structure for large or geographically dispersed enterprises.

ACoordinating IRT

A Coordinating IRT acts as a liaison and orchestrator across multiple independent response teams rather than owning direct responsibility for a specific infrastructure segment.

BCentral IRT

A Central IRT handles all incidents through one consolidated team and is not designed around segmented or distributed infrastructure responsibility.

CDistributed IRTCorrect

A Distributed IRT is organized around segments of the infrastructure - such as regional offices or specific network zones - with each team owning incident response for their area. This structure is ideal for large organizations or those spread across multiple locations because it avoids a central bottleneck, leverages local expertise, and enables faster response within each segment. It is distinct from a Central IRT, which handles all incidents from a single unified team regardless of location.

DOutsourced IRT

An Outsourced IRT is defined by its external staffing model - contracted from a third party - not by its structural relationship to infrastructure segments.

Concept tested: Incident Response Team types and organizational structures

Source: https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final

Topics

#incident response#IRT types#distributed IRT#organizational structure

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice