Q. A false positive can be defined as: (Solved)
1. an alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior
2. an alert that indicates nefarious activity on a system that, upon further inspection, turns out to truly be nefarious activity
3. the lack of an alert for nefarious activity
4. all of the above
- a. an alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior