Certified SOC Analyst (CSA) — Question 16

Daniel is a member of an IRT, which was started recently in a company named Mesh Tech. He wanted to find the purpose and scope of the planned incident response capabilities.
What is he looking for?

Answer options

• A. Incident Response Intelligence
• B. Incident Response Mission
• C. Incident Response Vision
• D. Incident Response Resources

Correct answer: B

Explanation

Daniel is looking for the 'Incident Response Mission,' which outlines the team's objectives and scope. The other options either pertain to information gathering (A), a broader future outlook (C), or the tools and personnel available (D), none of which define the specific goals of the incident response capabilities.