Which condition describes a true positive IPS signature alarm?

Which condition describes a true positive IPS signature alarm?

• when an alarm is not generated in response to a known attack
• when an alarm is not generated by normal traffic
• when an alarm is generated in response to a known attack
• when an alarm is generated by normal traffic

Explanation: There are four IPS alarms:
False positive - occurs when normal traffic triggers an alarm
False negative - occurs when known malicious traffic that should trigger an alarm does not
True positive - occurs when traffic that is known to be malicious triggers an attack
True negative - occurs when normal traffic does not trigger an alarm.

Exam with this question: CCNA Security Certification Practice Exam Answers