IPA FE Subject A 2026 Question 10
A question IPA Japan published in 令和８年度 基本情報技術者試験 科目A 公開問題 問10, translated into English. ITPEC is based on the same exams.
Among the descriptions of specialized organizations concerning information security, which of the following is the most appropriate description of CSIRT?
Explanation
An organization that responds to security incidents that have occurred — CSIRT stands for Computer Security Incident Response Team.
A CSIRT receives reports of security incidents, analyses them and leads the response: containment, recovery and prevention of recurrence. It also coordinates with the CSIRTs of other organizations and with outside bodies. Its role is responding to incidents once they occur.
Answer (c)
Why not others:
- •(a) — handling the risks of vulnerabilities in the products or services a company supplies to its customers is the work of a PSIRT (Product Security Incident Response Team)
- •(b) — monitoring systems and analysing logs to detect incidents is a SOC (Security Operation Center); it detects incidents and hands them to the CSIRT
- •(d) — a consultation desk for targeted cyberattacks that helps the organizations consulting it reduce damage and break the chain of attacks describes J-CRAT, run by IPA in Japan
Key rule: The SOC detects, the CSIRT responds to incidents in its organization, and the PSIRT deals with vulnerabilities in the company’s own products.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.