MENU
Jay, a network administrator, was monitoring traffic flowing through an IDS. Unexpectedly, he received an event triggered as an alarm, although there is no active attack in progress.
Identify the type of IDS alert Jay has received in the above scenario.
Suggested Answer: B
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
RO
Roosevelt
11 months ago
False positives can be so misleading, right?
GA
Gail
11 months ago
Wait, are we sure it's not a true positive? Seems odd.
DA
Darnell
12 months ago
Agreed, false positive makes the most sense here.
PA
Paola
12 months ago
I thought true negatives were the ones with no attacks?
SE
Serina
1 year ago
That's definitely a false positive alert!
KA
Kaycee
1 year ago
I’m leaning towards false positive too, but I recall something about true positives being actual threats. It’s a bit confusing!
PE
Penney
1 year ago
If Jay got an alarm without an attack, it sounds like a false positive to me, but I could be mixing it up with false negatives.
AV
Avery
1 year ago
I remember practicing a question about IDS alerts, and I think a true negative means no alert when there’s no attack, so that doesn't fit here.
JA
James
1 year ago
I think this might be a false positive alert since there's no actual attack happening, but I'm not entirely sure.
AN
Antonio
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully review the details about the HPE Superdome Flex and nPar configuration to figure out the right components.
GL
Glen
1 year ago
I remember we talked about how speed is crucial for user satisfaction, so option B sounds familiar, but I could be mixing it up.
TO
Tora
1 year ago
I remember we covered certificate issues in the lab, but I'm unsure if it's about the server or intermediate certificates for this one.
GE
Georgiann
1 year ago
I feel like option A and option B are both plausible. I want to say that setting the local preference on routes that have passed through is common, but I've also seen questions that emphasize routes originating from an AS.
TA
Tawanna
1 year ago
Ah, the joys of network monitoring. I'm feeling confident about B) False negative alert. If the IDS didn't catch a real attack, that's a missed detection.
LI
Linn
1 year ago
Haha, leave it to the network admin to get a false positive on their own network! I'm going with D) False positive alert. Gotta love those IDS systems, am I right?
SY
Sylvia
1 year ago
Hmm, this is tricky. I'm going to go with C) True positive alert. Even though there's no active attack, the IDS still detected something suspicious, right?
CL
Clement
1 year ago
User 3: I'm not sure, but I think it could be C) True positive alert. The IDS might have detected something legitimate that appeared suspicious.
AN
Andra
1 year ago
User 2: I agree with Andra. It seems like a false positive alert in this case.
JO
Johnna
1 year ago
User 1: I think it's D) False positive alert. The IDS mistakenly triggered an alarm when there was no actual attack.
CH
Cherri
1 year ago
User3: I'm not sure, but I think it might be C) True positive alert.
AN
Annice
1 year ago
User2: I agree with User1, it could be a false positive.
CR
Cristal
1 year ago
User1: I think it's D) False positive alert.
MA
Maryrose
1 year ago
I think the correct answer is D) False positive alert. If there's no active attack, but the IDS triggered an alarm, it's likely a false positive scenario.
TA
Tawna
1 year ago
That's correct, false positives can occur when the IDS mistakenly identifies benign traffic as malicious.
FR
Francene
1 year ago
Yes, false positive alerts can sometimes be triggered by normal network activity.
DA
Daren
1 year ago
I agree, it seems like a false positive alert.
FR
Frank
1 year ago
D) False positive alert
CH
Chandra
1 year ago
C) True positive alert
BR
Brandee
1 year ago
B) False negative alert
CH
Cherelle
1 year ago
A) True negative alert
MY
Myong
2 years ago
But what if it's a true positive alert? Maybe there's a new type of attack that the IDS is detecting.
BU
Bulah
2 years ago
I agree with Stefany, it's probably a false positive alert.
ST
Stefany
2 years ago
I think Jay received a false positive alert.