GSEC: GIAC Security EssentialsDemo

By GIAC · Question Mode

QuestionQ13

Network Security Devices

Why do false positives pose such a significant problem for IPS technology?

  • A File integrity is not guaranteed.
  • B Malicious code can get into the network.
  • C Legitimate services are not delivered.
  • D Rules are often misinterpreted.
Explanation

An IPS can automatically block traffic it identifies as malicious. A false positive causes legitimate traffic to be blocked, which disrupts the delivery of legitimate services.

Community Discussion

No comments yet. Be the first to start the discussion!