210-255 · Question #25
Which option has a drastic impact on network traffic because it can cause legitimate traffic to be blocked?
The correct answer is C. false positive. A false positive occurs when a security system incorrectly flags legitimate traffic as malicious, causing it to be blocked and disrupting normal network operations.
Question
Which option has a drastic impact on network traffic because it can cause legitimate traffic to be blocked?
Options
- Atrue positive
- Btrue negative
- Cfalse positive
- Dfalse negative
How the community answered
(18 responses)- B6% (1)
- C89% (16)
- D6% (1)
Why each option
A false positive occurs when a security system incorrectly flags legitimate traffic as malicious, causing it to be blocked and disrupting normal network operations.
A true positive correctly identifies malicious traffic and blocks it, which is the intended behavior and does not affect legitimate traffic.
A true negative correctly identifies legitimate traffic and allows it to pass, having no negative impact on the network.
A false positive is a detection result where the system incorrectly classifies legitimate, benign traffic or activity as malicious. Because the system acts on this incorrect classification by blocking or dropping the traffic, it can significantly disrupt normal network operations and deny access to legitimate users and services.
A false negative fails to detect actual malicious traffic, allowing it through, but it does not cause legitimate traffic to be blocked.
Concept tested: IDS/IPS detection accuracy and false positive impact
Source: https://csrc.nist.gov/glossary/term/false_positive
Topics
Community Discussion
No community discussion yet for this question.