nerdexam
Cisco

210-255 · Question #25

Which option has a drastic impact on network traffic because it can cause legitimate traffic to be blocked?

The correct answer is C. false positive. A false positive occurs when a security system incorrectly flags legitimate traffic as malicious, causing it to be blocked and disrupting normal network operations.

Security Monitoring

Question

Which option has a drastic impact on network traffic because it can cause legitimate traffic to be blocked?

Options

  • Atrue positive
  • Btrue negative
  • Cfalse positive
  • Dfalse negative

How the community answered

(18 responses)
  • B
    6% (1)
  • C
    89% (16)
  • D
    6% (1)

Why each option

A false positive occurs when a security system incorrectly flags legitimate traffic as malicious, causing it to be blocked and disrupting normal network operations.

Atrue positive

A true positive correctly identifies malicious traffic and blocks it, which is the intended behavior and does not affect legitimate traffic.

Btrue negative

A true negative correctly identifies legitimate traffic and allows it to pass, having no negative impact on the network.

Cfalse positiveCorrect

A false positive is a detection result where the system incorrectly classifies legitimate, benign traffic or activity as malicious. Because the system acts on this incorrect classification by blocking or dropping the traffic, it can significantly disrupt normal network operations and deny access to legitimate users and services.

Dfalse negative

A false negative fails to detect actual malicious traffic, allowing it through, but it does not cause legitimate traffic to be blocked.

Concept tested: IDS/IPS detection accuracy and false positive impact

Source: https://csrc.nist.gov/glossary/term/false_positive

Topics

#false positive#IDS/IPS#alert classification#traffic blocking

Community Discussion

No community discussion yet for this question.

Full 210-255 Practice