Passed Exam Today 200-201

true positive

true negative

false positive

false negative

obtaining disposed documents from an organization

using a vulnerability scanner on a corporate network

setting up a rogue access point near a public hotspot

impersonating a tech support agent during a phone call

True positives affect security as no alarm is raised when an attack has taken place, while false positives are alerts raised appropriately to detect and further mitigate them.

True-positive alerts are blocked by mistake as potential attacks, while False-positives are actual attacks Identified as harmless.

False-positive alerts are detected by confusion as potential attacks, while true positives are attack attempts identified appropriately.

False positives alerts are manually ignored signatures to avoid warnings that are already acknowledged, while true positives are warnings that are not yet acknowledged.

UIDs and group identifiers

number of concurrent connections the server can handle

running services and applications

server uptime and internal clock

server purpose and functionality