What situation will generate a true negative IPS alarm type?
- normal traffic that generates a false alarm
- a verified security incident that is detected
- a known attack that is not detected
- normal traffic that is correctly being ignored and forwarded
Explanation: The true negative alarm type is used when normal network traffic flows through an interface. Normal traffic should not, and does not generate an actual alarm. A true negative indicates that benign normal traffic is correctly being ignored and forwarded without generating an alert.
Related exam: Checkpoint Exam: Intrusion Prevention Group Exam Answers
