CISA Certified Information Systems Auditor – Question0048

Which of the following should MOST concern an IS auditor reviewing an intrusion detection system (IDS)?

A.
Number of false negatives
B. Number of false positives
C. Legitimate traffic blocked by the system
D. Reliability of IDS logs

Correct Answer: A