SSCP · Question #527
Which of the following best defines a Computer Security Incident Response Team (CSIRT)?
The correct answer is C. An organization that coordinates and supports the response to security incidents. RFC 2828 (Internet Security Glossary) defines a Computer Security Incident Response Team (CSIRT) as an organization that coordinates and supports the response to security incidents that involves sites within a defined constituency. This is the proper definition for the CSIRT…
Question
Which of the following best defines a Computer Security Incident Response Team (CSIRT)?
Options
- AAn organization that provides a secure channel for receiving reports about suspected
- BAn organization that ensures that security incidents are reported to the authorities.
- CAn organization that coordinates and supports the response to security incidents.
- DAn organization that disseminates incident-related information to its constituency and
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C87% (26)
- D7% (2)
Explanation
RFC 2828 (Internet Security Glossary) defines a Computer Security Incident Response Team (CSIRT) as an organization that coordinates and supports the response to security incidents that involves sites within a defined constituency. This is the proper definition for the CSIRT. To be considered a CSIRT, an organization must provide a secure channel for receiving reports about suspected security incidents, provide assistance to members of its constituency in handling the incidents and disseminate incident-related information to its constituency and other involved parties. Security-related incidents do not necessarily have to be reported to the authorities.
Topics
Community Discussion
No community discussion yet for this question.