GIAC
GCIA · Question #52
Which of the following is the process of categorizing attack alerts produced from an IDS in order to distinguish false positives from actual attacks?
Sign in or unlock GCIA to reveal the answer and full explanation for question #52. The question stem and answer options stay visible for context.
Intrusion Detection System (IDS) Fundamentals & Snort Rules
Question
Which of the following is the process of categorizing attack alerts produced from an IDS in order to distinguish false positives from actual attacks?
Options
- AAlarm filtering
- BConfidence value
- CReactive system
- DSite policy
Unlock GCIA to see the answer
You've previewed enough free GCIA questions. Unlock GCIA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#alarm filtering#IDS alert triage#false positives#alert classification