MENU
David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not able to find any suspicious events.
This type of incident is categorized into ?
Suggested Answer: C
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
GA
Gayla
11 months ago
Really? I thought it could be a false positive too.
PE
Pearly
11 months ago
False negatives can be tricky, but yeah, I think you're right.
SH
Sharen
12 months ago
Wait, are we sure it’s not a True Negative?
ME
Merlyn
12 months ago
I agree, he missed the attack!
TU
Tuyet
1 year ago
This is definitely a False Negative Incident.
BE
Beth
1 year ago
I practiced a similar question, and I believe if an attack occurred but went unnoticed, it’s likely a False Negative Incident.
WE
Weldon
1 year ago
I'm a bit unsure, but I remember something about True Positive and False Positive incidents. Could this be related to those?
RO
Robt
1 year ago
I think this might be a False Negative Incident since David didn't find any suspicious events despite an attack happening.
LO
Lonna
1 year ago
I’m not completely confident, but I feel like True Negative might not fit here since there was an actual attack.
RA
Ranee
1 year ago
I'm a bit confused by this question. What's the difference between sending output to stdout and saving it to a file? Isn't that the same thing? I'll have to review my notes.
AL
Alline
1 year ago
Risk analysis and management seems like the most logical choice to me. With a change in scope, there are likely going to be some risks and uncertainties that need to be addressed, and this technique could help us navigate that.
SE
Selma
1 year ago
This one seems pretty straightforward. I'm pretty sure the domain of COBIT doesn't include "Preventing control steps", so I'll go with A.