SY0-301 · Question #635
Which of the following is an example of a false negative?
The correct answer is A. The IDS does not identify a buffer overflow. A false negative occurs when a security system fails to detect an actual threat, as illustrated by an IDS that does not alert on a real buffer overflow attack.
Question
Which of the following is an example of a false negative?
Options
- AThe IDS does not identify a buffer overflow.
- BAnti-virus identifies a benign application as malware.
- CAnti-virus protection interferes with the normal operation of an application.
- DA user account is locked out after the user mistypes the password too many times.
How the community answered
(23 responses)- A91% (21)
- C4% (1)
- D4% (1)
Why each option
A false negative occurs when a security system fails to detect an actual threat, as illustrated by an IDS that does not alert on a real buffer overflow attack.
A false negative is defined as a failure to detect a condition that is actually present - in this case, the IDS misses a genuine buffer overflow attack and generates no alert. This is a critical IDS failure because the real threat goes undetected. The other choices describe different categories of security system behavior that do not fit the definition of a false negative.
Identifying a benign application as malware is a false positive - flagging something as a threat when it is not.
Antivirus interfering with a legitimate application describes an operational conflict or false positive side effect, not a failure to detect a threat.
An account lockout after repeated wrong passwords is an intended security control functioning correctly, not a detection failure.
Concept tested: False negative in IDS threat detection
Source: https://csrc.nist.gov/glossary/term/false_negative
Topics
Community Discussion
No community discussion yet for this question.