312-39V2: Certified SOC Analyst v2

An attacker tries to obtain unauthorized access to a secure network by repeatedly guessing login credentials. The SIEM is configured to generate an alert after it detects 10 consecutive failed login attempts within a short time period. However, the attacker successfully logs in on the 9th attempt, immediately before reaching the threshold, thereby bypassing the alert mechanism. Security teams become aware of the incident only after identifying suspicious post-login activity, revealing a gap in the SIEM’s detection rules. What type of alert classification does this represent?