312-39 question 95 discussion

View all Certified SOC Analyst Exam here
back to eccouncil forum

Question 95

David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not
able to find any suspicious events.
This type of incident is categorized into ?

  • A. True Positive Incidents
  • B. False positive Incidents
  • C. True Negative Incidents
  • D. False Negative Incidents
Answer:

C

User Votes:
A
50%
B 1 votes
50%
C
50%
D 2 votes
50%
Discussions
0 / 1000
tiara
1 month, 2 weeks ago

false negative