Validating SIEM Results – Quiz

The SIEM has alerted to suspected unauthorized root access, however, the data suggests this poses no threat. This is a _________ select .

Rule _________ can help reduce the number of false positives a SIEM generates.

The SIEM hasn’t alerted to any unusual activity, the data suggests everything is operating normally. This is a _______________ .

The SIEM has alerted to unauthorized network access, the data suggests this is a legitimate threat. This is a _________________ .

The SIEM has alerted to a suspected DOS attack, the data suggests this poses no threat. This is a _____________ .

The SIEM hasn’t alerted to any unusual activity, however, the data suggests elevation of privileges by a standard user. This is a ________________ .

The SIEM has alerted to a successful brute force attack, the data suggests this is a legitimate threat. This is a ______________.

True negatives refer to _________ activity.

If a rule is tuned until it no longer alerts on malicious traffic, this is called __________ .

The SIEM hasn’t alerted to any unusual activity, however, the data suggests that there has been a malware outbreak. This is a ______________ .