Exam 212-82 topic 1 question 11 discussion

True Positive -There is an attack and alert.

True positive:there is an attack that triggered an alarm

Certified Cybersecurity Technician Module 07 Page 859 True Positive (Attack - Alert): A true positive is a condition that occurs when an event triggers an alarm and causes the IDS to react as if a real attack is in progress. False Positive (No attack - Alert): A false positive occurs if an event triggers an alarm when no actual attack is in progress. False Negative (Attack - No Alert): A false negative is a condition that occurs when an IDS fails to react to an actual attack event. True Negative (No attack - No Alert): A true negative is a condition that occurs when an IDS identifies an activity as acceptable behavior, and the activity is acceptable.

The correct answer is A. True positive. A true positive occurs when an IDS correctly identifies a genuine threat or intrusion attempt, as described in Richards' scenario. The IDS system detected the ongoing intrusion attempt and alerted Richards to take necessary measures to mitigate the threat, indicating a high degree of accuracy and effectiveness.

Since the attack and alert are ture it is True Positive