PrepAway - Latest Free Exam Questions & Answers

Which of the following is the MOST immediate consequence of failing to tune a newly installed intrusion detect

Which of the following is the MOST immediate consequence of failing to tune a newly installed intrusion detection system (IDS) with the threshold set to a low value?

PrepAway - Latest Free Exam Questions & Answers

A.
The number of false positives increases

B.
The number of false negatives increases

C.
Active probing is missed

D.
Attack profiles are ignored

Explanation:
Failure to tune an intrusion detection system (IDS) will result in many false positives, especially when the threshold is set to a low value. The other options are less likely given the fact that the threshold for sounding an alarm is set to a low value.

2 Comments on “Which of the following is the MOST immediate consequence of failing to tune a newly installed intrusion detect


Leave a Reply