CISA Certified Information Systems Auditor – Question2128

Which of the following is the BEST indicator of the effectiveness of signature-based intrusion detection systems?

A.
An increase in the number of identified false positives
B. An increase in the number of unfamiliar sources of intruders
C. An increase in the number of detected incidents not previously identified
D. An increase in the number of internally reported critical incidents

Correct Answer: C