P

Praveen Singh • 36.81K Points
Coach 

Q. A false positive can be defined as…

(A) An alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior.
(B) An alert that indicates nefarious activity on a system that is not running on the network.
(C) The lack of an alert for nefarious activity.
(D) Both a. and b.

Correct Answer - Option(D)

Share

Discusssion

Login to discuss.

Loading comments.....

Related Posts

Q. At which two traffic layers do most commercial IDSes generate signatures?

Q. What is the purpose of a shadow honeypot?

Q. The developers of an operating system or vendor application might issue this to prevent intruders from taking advantage of a weakness in their programming.

Q. This is a Peripheral Component Interconnect (PCI) card that offloads SSL processing to speed up secure transactions on e-commerce Web sites.

Q. This is the encryption algorithm that will begin to supplant the Data Encryption Standard (DES) - and later Triple DES - over the next few years as the new standard encryption algorithm.

Q. This enables users of a basically unsecure public network such as the Internet to securely and privately exchange data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority.

Q. In password protection, this is a random string of data used to modify a password hash.

Q. Today, many Internet businesses and users take advantage of cryptography based on this approach.

Q. This is an assault on the integrity of a security system in which the attacker substitutes a section of cipher text (encrypted text) with a different section that looks like (but is not the same as) the one removed.

Q. Which of the following is characteristic of spyware?

View All Posts