Ann, a security technician, is reviewing the IDS log files. She notices a large number of alerts for multicast packets from the switches on the network. After
investigation, she discovers that this is normal activity for her network. Which of the following BEST describes these results?

A.
True negatives

B.
True positives

C.
False positives

D.
False negatives

Explanation:
False positives are essentially events that are mistakenly flagged and are not really events to be concerned about.
Incorrect Answers:
A: True negatives would be non-events.
B: True positives would be real alerts and alarms.
D: With a false negative, you are not alerted to a situation when you should be alerted – The opposite of false negatives.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 28