An organization's automated security monitoring tool generates an excessively large amount of false positives. Which of the following is the BEST method to optimize the monitoring process?

The correct answer is B. Change reporting thresholds. Adjusting the reporting thresholds helps reduce false positives by fine-tuning the sensitivity of the monitoring tool. This improves the signal-to-noise ratio, allowing security teams to focus on real threats more effectively.

Submitted by sofia.br· Apr 18, 2026Information Security Incident Management

Question

An organization’s automated security monitoring tool generates an excessively large amount of false positives. Which of the following is the BEST method to optimize the monitoring process?

Options

AReport only critical alerts.
BChange reporting thresholds.
CMonitor incidents in a specific time frame.
DReconfigure log recording.

How the community answered

(60 responses)

A
7% (4)
B
75% (45)
C
15% (9)
D
3% (2)

Explanation

Adjusting the reporting thresholds helps reduce false positives by fine-tuning the sensitivity of the monitoring tool. This improves the signal-to-noise ratio, allowing security teams to focus on real threats more effectively.

Topics

#Security Monitoring#False Positives#System Tuning#Security Operations

Community Discussion

No community discussion yet for this question.

Full CISM Practice