What situation will generate a true negative IPS alarm type?

  • a verified security incident that is detected
  • normal traffic that is correctly being ignored and forwarded
  • normal traffic that generates a false alarm
  • a known attack that is not detected
    Answers Explanation & Hints:

    The true negative alarm type is used when normal network traffic flows through an interface. Normal traffic should not, and does not generate an actual alarm. A true negative indicates that benign normal traffic is correctly being ignored and forwarded without generating an alert.