A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21. During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?

Question

Quizplus · Accepted Answer

The alert was generated, but there were no signs of an attack, indicating that the system incorrectly identified normal traffic as a threat, which is a false positive.

A Network Administrator Received an Administrative Alert at 3:00 A from the Intrusion