Which of the following alert types is the most likely to be ignored over time?

The correct answer is C. False positive. A false positive is an alert that incorrectly identifies benign activity as malicious. Over time, if an alerting system generates too many false positives, security teams are likely to ignore these alerts, resulting in "alert fatigue." This increases the risk of missing genuine…

Submitted by ravi_2018· Mar 6, 2026Security Operations

Question

Options

ATrue positive
BTrue negative
CFalse positive
DFalse negative

How the community answered

(40 responses)

A
3% (1)
B
8% (3)
C
85% (34)
D
5% (2)

Explanation

A false positive is an alert that incorrectly identifies benign activity as malicious. Over time, if an alerting system generates too many false positives, security teams are likely to ignore these alerts, resulting in "alert fatigue." This increases the risk of missing genuine threats. True positives and true negatives are accurate and should be acted upon. False negatives are more dangerous because they fail to identify real threats, but they are not "ignored" since they do not trigger alerts.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice