When no anomaly is present in an Intrusion Detection, but an alarm is generated, the response is known as __________.

A true positive occurs when a real anomaly is present and the IDS correctly generates an alarm - both the threat and the detection are accurate.

A true negative occurs when no anomaly is present and the IDS correctly generates no alarm - the system accurately identifies benign activity.

A false negative occurs when a real anomaly is present but the IDS fails to generate an alarm - this is a missed detection, the opposite of the described scenario.

A false positive means the IDS produced a positive result (alarm triggered) that was incorrect (false) - the system flagged normal activity as malicious when no actual threat existed. This is often called a false alarm, and a high false positive rate can cause alert fatigue in security operations teams, leading to real threats being overlooked.