26.2.5 Check Your Understanding – Identify the Alert Classification Answers

1. Which type of alert would have no incident reported and no incident has occurred?

  • false negative
  • true negative
  • true positive
  • true negative

Explanation: A true alert occurs when no incidents are reported and no incidents have occurred.

2. Which type of alert has happened when an alert is received, but no incident has occurred?

  • true positive
  • true negative
  • false positive
  • false negative

Explanation: A positive alert happens when an alert is received, but no incident has occurred.

3. Which type of incident has occurred when nothing is reported, however an exploit has occurred?

  • false negative
  • true negative
  • false positive
  • true positive

Explanation: A false alert has no incidents reported, however an exploit has occurred.

4. Which type of alert is it when an alert is received, and an exploit has been verified?

  • false negative
  • true negative
  • false positive
  • true positive

Explanation: A positive alert occurs when an alert is received, and an exploit verified.

5. True or False? A benign event should trigger an alert.

  • true
  • false

Explanation: A benign event should not trigger an alert.

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x