Discuss Isaca CISA Exam Topic 7 Question 54

Which of the following is the BEST indicator of the effectiveness of signature-based intrusion detection systems (lDS)?

AAn increase in the number of identified false positives

BAn increase in the number of detected Incidents not previously identified

CAn increase in the number of unfamiliar sources of intruders

DAn increase in the number of internally reported critical incidents

Suggested Answer: D

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Nguyet 11 months ago

Not sure about C. Unfamiliar sources could just be noise, right?

Shayne 11 months ago

I'm surprised that false positives (A) are even considered a good sign.

Beatriz 12 months ago

But what about option D? Internally reported incidents show real impact too.

Jani 12 months ago

Totally agree with B! It's all about catching new threats.

Keith 12 months ago

I think option B is the best indicator. More detected incidents means better detection.

Fatima 1 year ago

I'm leaning towards option D because if critical incidents are being reported more frequently, it might show that the system is actually catching important issues.

Quentin 1 year ago

I practiced a question similar to this, and I think the focus should be on how well the system detects new threats, which might point to option B.

Germaine 1 year ago

I feel like the number of detected incidents not previously identified could be a strong indicator, but I need to think about how that relates to overall effectiveness.

Annabelle 1 year ago

I think I remember that false positives can indicate issues, but I'm not sure if they're the best measure of effectiveness.

Barney 1 year ago

Okay, I've got this. The trace output will show the raw materials and the products they are used to make. So the correct answers are by-products and co-products.

Buddy 1 year ago

Hmm, let me think about this. I know Docker Hub is a container registry, but I'm not sure about the others. I'll have to review my notes on container services to be sure.

Emerson 1 year ago

This looks like a straightforward question about the status of a case in a Work Queue. I'll carefully review the options and try to identify the one that indicates a case is waiting to be worked.

Deangelo 1 year ago

Hmm, I'm a bit unsure here. I know the command is related to MPLS, but I'm not sure if that automatically means the MPLS configuration mode is the right choice. I'll have to think this through carefully.

Jennifer 1 year ago

I'll focus on the details about the foreign currency payment and try to match it to the appropriate option.

Isaca CISA Exam - Topic 7 Question 54 Discussion