EC-Council
EC0-350 · Question #320
A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over…
The correct answer is D. False positives. See the full explanation below for the reasoning.
Question
A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21. During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?
Options
- ATrue negatives
- BFalse negatives
- CTrue positives
- DFalse positives
How the community answered
(24 responses)- A8% (2)
- B17% (4)
- C4% (1)
- D71% (17)
Community Discussion
No community discussion yet for this question.