Certified Network Defender (CND) — Question 81
Who is an IR custodian?
Answer options
- A. An individual responsible for conveying company details after an incident
- B. An individual who receives the initial IR alerts and leads the IR team in all the IR activities
- C. An individual who makes a decision on the classifications and the severity of the incident identified
- D. An individual responsible for the remediation and resolution of the incident that occurred
Correct answer: D
Explanation
The correct answer is D, as the IR custodian is specifically responsible for managing the remediation and resolution of incidents. Option A refers to communication roles, B describes leadership in alerts rather than resolution, and C focuses on classification rather than addressing the incident itself.