ITPEC FE Subject A April 2026 Question 33

An in-house organization that receives and responds to security incident reports — CSIRT stands for Computer Security Incident Response Team.

CSIRT is a generic term rather than the name of one body: a company, a university or a government agency each sets up its own team. It receives reports of incidents such as intrusions, malware infections and data leaks, investigates them, coordinates the response, and exchanges information with other CSIRTs.

Answer (a)

Why not others:

• •(b) — people pursuing religious or political goals through IT are hacktivists
• •(c) — producing Internet technical documents (RFCs) and working on standardization is the IETF
• •(d) — setting IP address allocation policy and coordinating the DNS root servers globally is ICANN

Key rule: A CSIRT is defined by its function, incident response for its own organization or constituency; the other options describe attackers or specific Internet governance bodies.

Security · AI-written, may contain errors