Which of the following is the MOST immediate consequence of failing to tune a newly installed
intrusion detection system (IDS) with the threshold set to a low value?
A.
The number of false positives increases
B.
The number of false negatives increases
C.
Active probing is missed
D.
Attack profiles are ignored
Explanation:
Failure to tune an intrusion detection system (IDS) will result in many false positives, especially
when the threshold is set to a low value. The other options are less likely given the fact that the
threshold for sounding an alarm is set to a low value.