A false positive can be defined as ________
(a) An alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior
(b) An alert that indicates nefarious activity on a system that is not running on the network
(c) The lack of an alert for nefarious activity
(d) Both An alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior and An alert that indicates nefarious activity on a system that is not running on the network
I had been asked this question during an interview.
I want to ask this question from Intrusion Detection Systems in portion Point to Point Protocol & Error Detection of Computer Network