Eccouncil Exam ECSS Topic 1 Question 63 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 63
Topic #: 1

[All ECSS Questions]

Jay, a network administrator, was monitoring traffic flowing through an IDS. Unexpectedly, he received an event triggered as an alarm, although there is no active attack in progress.

Identify the type of IDS alert Jay has received in the above scenario.

ATrue negative alert

BFalse negative alert

CTrue positive alert

DFalse positive alert

Show Suggested Answer

Suggested Answer: B

by Ty at Jan 06, 2023, 09:33 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tawanna

1 months ago

Ah, the joys of network monitoring. I'm feeling confident about B) False negative alert. If the IDS didn't catch a real attack, that's a missed detection.

upvoted 0 times

...

Linn

1 months ago

Haha, leave it to the network admin to get a false positive on their own network! I'm going with D) False positive alert. Gotta love those IDS systems, am I right?

upvoted 0 times

...

Sylvia

1 months ago

Hmm, this is tricky. I'm going to go with C) True positive alert. Even though there's no active attack, the IDS still detected something suspicious, right?

upvoted 0 times

Andra

4 days ago

User 2: I agree with Andra. It seems like a false positive alert in this case.

upvoted 0 times

...

Johnna

8 days ago

User 1: I think it's D) False positive alert. The IDS mistakenly triggered an alarm when there was no actual attack.

upvoted 0 times

...

Cherri

12 days ago

User3: I'm not sure, but I think it might be C) True positive alert.

upvoted 0 times

...

Annice

17 days ago

User2: I agree with User1, it could be a false positive.

upvoted 0 times

...

Cristal

25 days ago

User1: I think it's D) False positive alert.

upvoted 0 times

...

Maryrose

1 months ago

I think the correct answer is D) False positive alert. If there's no active attack, but the IDS triggered an alarm, it's likely a false positive scenario.

upvoted 0 times