A global organization is developing an incident response team. The organization wants to keep headquarters informed of all incidents and wants to be able to present a unified response to widely disper

Question

Options

• AVirtual incident response team
• BOutsourced incident response team
• CCentralized incident response team
• DDistributed incident response team

• A
  11% (4)
• B
  6% (2)
• C
  80% (28)
• D
  3% (1)

Explanation

A centralized incident response team operates from a single location (headquarters), making it the natural fit when an organization needs both unified command and a single point of contact for all incident reporting - exactly what the question describes.

Why the distractors fail:

• A (Virtual): A virtual team is geographically dispersed and collaborates remotely; it lacks the cohesive, single-location authority needed for a truly unified response.
• B (Outsourced): Handing incident response to a third party reduces organizational control and makes it harder for your headquarters to stay directly informed.
• D (Distributed): Distributed teams are intentionally spread across multiple locations, which can fragment command and make presenting a "unified response" more difficult.

Memory tip: Think "Centralized = Command center." Just like a military command center keeps all information flowing to one headquarters and issues coordinated orders outward, a centralized IR team does the same - one hub, one voice, full visibility.

No community discussion yet for this question.