A false positive can be defined as:
A)an alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior
B)an alert that indicates nefarious activity on a system that, upon further inspection, turns out to truly be nefarious activity
C)the lack of an alert for nefarious activity
D)all of the above

Question

Quizplus · Accepted Answer

A false positive in the context of system security refers to an alert that signals potential malicious activity which, after further investigation, is found to be benign or legitimate activity. This is in contrast to a true positive (B), where the activity is indeed malicious, or a false negative (C), where malicious activity goes undetected.

A False Positive Can Be Defined As