CompTIA

CY0-001 · Question #51

A company wants to reduce IDS false positives. What tuning should occur FIRST?

The correct answer is B. Baseline normal behavior. A behavioral baseline enables effective tuning and alert reduction.

Threat Management

Question

A company wants to reduce IDS false positives. What tuning should occur FIRST?

Options

AAdd new signatures
BBaseline normal behavior
CDisable low-priority alerts
DIncrease signature sensitivity

How the community answered

(65 responses)

A
9% (6)
B
85% (55)
C
5% (3)
D
2% (1)

Explanation

A behavioral baseline enables effective tuning and alert reduction.

Topics

#IDS tuning#false positive reduction#behavioral baseline#signature tuning

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CY0-001 Practice