Cybercombat with IC's Options

[Jimson]

I’m relatively new to running any sort of cybercombat. In reading up on cybercombat, I’m getting really confused by IC’s.

Here are a few questions I have:

1. Do IC programs have their own Firewall/Response? It sounds like one IC Program can be running multiple programs at once (i.e. an Attack and a Track). Therefore, is an IC Programs limited by its own Response (if it has one), or the nodes Response?
2. Can one node have multiple ICs? Meaning, if a hacker triggers an alert, can he be attacked by two IC Programs running Attack (or Black Hammer/Backout) programs? Or have two IC’s attack and another Tracking?
3. Once an IC Program is defeated, it can no longer run any programs contained within, correct?

I just may be simpler if someone could just give me an example of an IC encounter. I read the one in the book and it confused me more.