Eccouncil Exam ECSS Topic 1 Question 63 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 63
Topic #: 1

[All ECSS Questions]

Jay, a network administrator, was monitoring traffic flowing through an IDS. Unexpectedly, he received an event triggered as an alarm, although there is no active attack in progress.

Identify the type of IDS alert Jay has received in the above scenario.

ATrue negative alert

BFalse negative alert

CTrue positive alert

DFalse positive alert

Show Suggested Answer

Suggested Answer: B

by Ty at Jan 06, 2023, 09:33 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Myong

11 days ago

But what if it's a true positive alert? Maybe there's a new type of attack that the IDS is detecting.

upvoted 0 times

...

Bulah

17 days ago

I agree with Stefany, it's probably a false positive alert.

upvoted 0 times

...

Stefany

20 days ago

I think Jay received a false positive alert.

upvoted 0 times

...