False positive
Course: AP® Cybersecurity Shows up in: Unit 3: Securing Networks
An alert for activity that is actually harmless; high rates waste time and cause alert fatigue.
Appears in the course and exam description (CED): 3.5.D.3
Why it matters in Unit 3
Anomaly-based and hybrid detection have more of them than signature-based.
Example
A big but legitimate software update flagged as data theft.
Learn it properly, with a checkpoint 3.5 Detecting Network Attacks