A purple team is specifically defined as a collaborative approach that combines the offensive focus of the red team (penetration testing/adversary emulation) with the defensive focus of the blue team (detection
/response and defense). That matches the scenario: analysts participate in both pen testing and defending during exercises.
Exact extract (All-in-One Exam Guide):
" purple team A collaborative approach that combines the 'red team' and 'blue team.' The red team attempts to breach the organization's defenses, while the blue team responds to the simulated attacks from the red team." The Sybex Practice Tests also reinforce this definition:
Exact extract (Sybex Practice Tests):
"...the purple team combines elements of the red team and blue team ."
References (CompTIA CySA+ CS0-003 documents / study guides used):
* Mya Heath et al., CompTIA CySA+ All-in-One Exam Guide (CS0-003) : purple team combines red + blue
* Chapple/Seidl, CompTIA CySA+ Practice Tests (CS0-003) : purple team combines red + blue