IPA IP 2021 Question 81

Topic: Security

A question IPA Japan published in 令和3年度 ITパスポート試験 公開問題 問81, translated into English. ITPEC is based on the same exams.

Which of the following is an appropriate description concerning J-CRAT?

Explanation

Supports organizations that consult it in reducing the damage of targeted cyberattacks and breaking the chain of attacks — J-CRAT is IPA's Cyber Rescue and Advice Team against targeted attack of Japan.

IPA set up J-CRAT in 2014. It runs a consultation desk for targeted cyberattacks: an organization that suspects it is under attack consults it, and J-CRAT analyses the case, advises on the response and, in serious cases, visits on site to help. Its aim is to limit the damage and to stop the attack spreading from that organization to its business partners, the chain of attacks. It supports and advises; the organization itself keeps the lead in its own response.

Answer (d)

Why not others:

  • •(a) — round-the-clock monitoring of networks and devices is a managed security service, a SOC run for customers, not J-CRAT
  • •(b) — J-CRAT does not take over the response; drawing up the response policies and procedures stays with the victim organization, with J-CRAT advising
  • •(c) — a forum where manufacturers of critical-infrastructure devices share information on cyberattacks describes J-CSIP, IPA's Initiative for Cyber Security Information sharing Partnership of Japan

Key rule: IPA's two names differ in what they serve: J-CSIP shares attack information among industries, J-CRAT rescues and advises the organizations that consult it about a targeted attack.

Security · AI-written, may contain errors

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.