SY0-301 · Question #39
Which of the following is an example of a false positive?
The correct answer is A. Anti-virus identifies a benign application as malware. A false positive occurs when a security control incorrectly identifies legitimate, benign activity as malicious or threatening.
Question
Which of the following is an example of a false positive?
Options
- AAnti-virus identifies a benign application as malware.
- BA biometric iris scanner rejects an authorized user wearing a new contact lens.
- CA user account is locked out after the user mistypes the password too many times.
- DThe IDS does not identify a buffer overflow.
How the community answered
(22 responses)- A86% (19)
- C9% (2)
- D5% (1)
Why each option
A false positive occurs when a security control incorrectly identifies legitimate, benign activity as malicious or threatening.
When antivirus software flags a known-safe application as malware, it produces an alert for a threat that does not actually exist - this is the textbook definition of a false positive. The system returned a 'positive' (malicious) result when the true condition was 'negative' (benign).
A biometric scanner rejecting an authorized user is a false rejection or false negative - the system failed to recognize a legitimate user and denied access that should have been granted.
An account lockout after repeated wrong passwords is correct, expected system behavior functioning as designed and is not an erroneous detection result.
An IDS failing to detect a real buffer overflow is a false negative - the system produced a 'negative' (no threat) result when a genuine threat was present.
Concept tested: Definition and example of a false positive
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-alerts
Topics
Community Discussion
No community discussion yet for this question.