When normal traffic is flagged as an attack, it is an example of
A.
Fail-safe
B.
Fail-secure
C.
False-negative
D.
False-positive
Explanation:
D: False-positives occur when the IDS or IPS identifies something as an attack, but it is in fact normal traffic. False-negatives occur when it failed to interpret something as an attack when it should have. In these cases, intrusion systems must be carefully tuned to ensure that these are kept to a minimum. Page 564.