A false positive can be defined as ________

A. An alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior
B. An alert that indicates nefarious activity on a system that is not running on the network
C. The lack of an alert for nefarious activity

D. Both an alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior and an alert that indicates nefarious activity on a system that is not running on the network

Explanation: A false positive is any alert that indicates nefarious activity on a system that, upon further inspection, turns out to represent legitimate network traffic or behavior.

Occurrence: 0, System Administrator 2026