A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and…

A true positive means the IDS correctly identified and alerted on a real attack, which did not happen here since the IDS failed to trigger.

A false negative occurs when a security system fails to detect a genuine threat, producing no alert when one should have fired. In this scenario, the IDS was misconfigured and did not alarm despite real network breaches occurring. This is the most dangerous IDS failure mode because attacks go undetected.

A false positive means the IDS fired an alarm when no real threat existed, which is the opposite of what occurred - here the IDS stayed silent during real breaches.

Duplicate of choice C - a false positive is an alert triggered on a benign event, not a missed detection of a real attack.