Which action should be taken if the system is overwhelmed with alerts when false positives and false negatives are compared?
A) Modify the settings of the intrusion detection system.
B) Design criteria for reviewing alerts.
C) Redefine signature rules.
D) Adjust the alerts schedule.

Question

Quizplus · Accepted Answer

Modifying the settings of the intrusion detection system can help in reducing false positives and false negatives by fine-tuning the sensitivity and specificity of the alerts.

Which Action Should Be Taken If the System Is Overwhelmed