200-201 Question 246
Single answerA cybersecurity analyst is monitoring traffic logs on a network using an intrusion detection system (IDS). A sophisticated malware attack successfully infiltrates the network, but the IDS does not generate any alert. Which of the following best describes this situation?
- A
True positive
- B
False positive
- C
True negative
- D
False negative
Show answer and explanation
Correct answer: D
Explanation
A false negative in cybersecurity occurs when a threat or malicious activity is present, but the detection system fails to recognize it, leading to no alert being generated. In this scenario, the IDS did not detect the malware attack, making it a classic case of a false negative.
- A. Incorrect.
This is incorrect because a true positive occurs when a threat is correctly identified by the system.
- B. Incorrect.
This is incorrect because a false positive occurs when the system falsely identifies benign activity as a threat.
- C. Incorrect.
This is incorrect because a true negative occurs when there is no threat, and the system correctly identifies that no threat exists.
- D. Correct.
This is correct because a false negative occurs when a threat is present, but the system fails to identify or alert about it.