Same for: 11.2.5 Check Your Understanding – Identify the Alert Classification
1. Which type of alert would have no incident reported and no incident has occurred?
- false negative
- true negative
- true positive
- true negative
Explanation: A true alert occurs when no incidents are reported and no incidents have occurred.
2. Which type of alert has happened when an alert is received, but no incident has occurred?
- true positive
- true negative
- false positive
- false negative
Explanation: A positive alert happens when an alert is received, but no incident has occurred.
3. Which type of incident has occurred when nothing is reported, however an exploit has occurred?
- false negative
- true negative
- false positive
- true positive
Explanation: A false alert has no incidents reported, however an exploit has occurred.
4. Which type of alert is it when an alert is received, and an exploit has been verified?
- false negative
- true negative
- false positive
- true positive
Explanation: A positive alert occurs when an alert is received, and an exploit verified.
5. True or False? A benign event should trigger an alert.
- true
- false
Explanation: A benign event should not trigger an alert.