Which team consists of cybersecurity professionals who work internally to stop external attacks from a red team during a system check?

• A. Blue Team
• B. Red Team
• C. Purple Team
• D. Green Team

Answer: (A)

Internally focused defenders who monitor networks, detect intrusions, and respond to incidents are the Blue Team. In a system check where a red team acts as external attackers, the Blue Team uses security monitoring, incident response, and defensive controls to stop those attempts and minimize impact from within the organization. This defensive, inside-the-organization perspective is what defines the Blue Team’s role, as opposed to the Red Team which simulates attackers, the Purple Team which blends offensive and defensive efforts for better readiness, or the Green Team, which isn’t a standard term for this context.