Exam CISM topic 1 question 932 discussion

Actual exam question from Isaca's CISM

Question #: 932
Topic #: 1

Senior management has expressed concern that the organization's intrusion prevention system (IPS) may repeatedly disrupt business operations. Which of the following BEST indicates that the information security manager has tuned the system to address this concern?

A. Decreasing false positives
B. Decreasing false negatives
C. Increasing false negatives
D. Increasing false positives

Show Suggested Answer

Suggested Answer: A 🗳️

by iacini at Sept. 11, 2023, 7:42 p.m.

Comments

Submit Cancel

yottabyte

9 months, 2 weeks ago

Selected Answer: A

More positive is required here because Positives are identified incorrectly. False positive is incorrect interpretation of correctness. Decreasing false positive will decrease the incorrect interpretation of correctness, meaning I have confused you :-) but thats the answer.

upvoted 1 times

...

POWNED

11 months, 1 week ago

Selected Answer: A

Decrease the false positives. The IPS is similar to an IDS, but will block/ drop potentially malicious activity. The IPS is placed inline of the firewall, if it makes it through the firewall and it is marked malicious it will report and block the activity. If not tuned properly IPS's can block legit traffic. Unlike an IDS where the false positive will still make it into the network IPS false positives will be blocked.

upvoted 1 times

...

richck102

1 year, 2 months ago

A. Decreasing false positives

upvoted 2 times

...

iacini

1 year, 3 months ago

In earlier question in the bank we had that the greatest concern is high number of false negatives, hence maybe decrease of false negatives is better option?

upvoted 1 times

AlexJacobson

11 months, 2 weeks ago

I hate to be that guy but...dude, learn the difference between these 4 categories and don't try to cheat your way to CISM cert.

upvoted 1 times

...

ats20

10 months ago

False positives occur when system incorrectly identifies legitimate activity as malicious, leading to unnecessary alerts or actions that can disrupt business.

upvoted 1 times

...