ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam
Go to Exam

Exam CAS-004 topic 1 question 351 discussion

Actual exam question from CompTIA's CAS-004
Question #: 351
Topic #: 1
[All CAS-004 Questions]

A security analyst is reviewing SIEM events and is uncertain how to handle a particular event. The file is reviewed with the security vendor who is aware that this type of file routinely triggers this alert. Based on this information, the security analyst acknowledges this alert. Which of the following event classifications is MOST likely the reason for this action?

  • A. True negative
  • B. False negative
  • C. False positive
  • D. Non-automated response
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Nnatech at Sept. 1, 2023, 5:26 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Nnatech
11 months, 2 weeks ago
Selected Answer: C
If the vendor confirms that a routine alert trigger is expected, then it is a False Positive.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel