What describes the impact of false-positive alerts compared to false-negative alerts?

Question

Options

• AA false negative is alerting for an XSS attack. An engineer investigates the alert and discovers
• BA false negative is a legitimate attack triggering a brute-force alert. An engineer investigates the
• CA false positive is an event alerting for a brute-force attack An engineer investigates the alert and
• DA false positive is an event alerting for an SQL injection attack An engineer investigates the alert

• A
  2% (1)
• B
  5% (2)
• C
  90% (38)
• D
  2% (1)

Explanation

False Positive: This occurs when an alert is generated for an event that is flagged as an attack or threat, but upon investigation, it is determined to be a legitimate action or benign event. For instance, in the case of a brute-force attack alert, the investigation reveals that the multiple login attempts were made by a legitimate user who forgot their password. False Negative: This happens when an attack or malicious activity occurs, but the security system fails to detect or generate an alert for it. In the context of a brute-force attack, a false negative occurs when a threat actor is attempting to break into the system using multiple incorrect login attempts, yet the security system fails to raise an alert for this suspicious activity.

No community discussion yet for this question.