When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's Computer to update the router configuration. What type

A false negative occurs when the IDS fails to generate an alert for genuinely malicious activity, meaning a real attack goes undetected - the opposite of what happened here.

A true negative occurs when the IDS correctly does not generate an alert for legitimate traffic, meaning no alert is logged - but in this scenario an alert was logged.

A true positive occurs when the IDS correctly generates an alert for genuinely malicious activity, but here the flagged activity was legitimate administrative work, not an actual attack.

A false positive occurs when the IDS generates an alert for activity that is actually legitimate and authorized. In this scenario, the administrator accessing the router to update its configuration is a normal, sanctioned action - not an attack. The IDS incorrectly identified this legitimate traffic as suspicious, making it a false positive.