CompTIA Security+ Exam Notes

CompTIA Security+ Exam Notes
Let Us Help You Pass

Saturday, November 28, 2020

Blue, Red, White, & Purple Teams explained

 Organization Security Exercise Types

An organization will train its own security people to defend against an attack. Two different scenarios can be implemented: pitting a Red Team against a Blue Team and allowing both teams to share information.

Red Team: This team acts as the aggressor; they will attempt to break into the network without sharing information with the Blue Team.

Blue Team: This team is the defensive team that attempts to detect and prevent any infiltration.

White Team: Sets the roles of engagements and monitors the exercise.
This team will also be the arbitrator and can stop the exercise when it becomes destructive.

Purple Team: In this type of exercise, the Red and Blue teams share information and collaborate throughout. 

No comments:

Post a Comment