[&] Which team type is best suited for small organizations with infrequent security incidents?
- Virtual IR team -- Correct
- Distributed IR team
- Centralized IR team
- Outsourced IR team

[&] For which type of organization is a distributed incident response team most suitable?
- Small local businesses
- Large multinational organizations -- Correct
- Companies with a singular office location
- Startups with limited resources

[&] Which characteristic is common to a coordinated hybrid IR team?
- It solely relies on local IT teams
- It's only activated during large scale incidents
- It functions without formal policies
- It combines centralized command with distributed teams -- Correct

[&] What is a centralized incident response team?
- An external third-party team hired for incident response.
- A temporary team formed from existing employees.
- A team that is spread across various departments.
- A single dedicated team handling all incidents. -- Correct

[&] What is a virtual IR team?
- An external team specialized in virtual threats.
- A permanent team focusing exclusively on incident response.
- Teams established within various international branches.
- A cross-functional team formed ad hoc from existing employees. -- Correct

[&] What describes an outsourced or managed IR team?
- It is formed from existing employees with other roles
- It consists of multiple distributed regional teams
- Incident functions are managed by an external provider -- Correct
- It handles incidents through an in-house centralized team