CompTIA CySA+ CS0-003 Practice Question
As a cybersecurity analyst in an organization, you notice that the number of alerts from the Intrusion Detection System (IDS) has significantly increased over the past week. You are tasked with reporting this increase in alert volume to the management team. Which of the following explanations is most valuable in your report to determine appropriate actions?
The increase is likely not significant; it is probably due to more users being active on the network.
Management should immediately implement all pending patches and updates to mitigate this new wave of attacks.
The increase may indicate a real threat or a misconfiguration causing false positives; further analysis is needed to confirm the nature of the alerts.
Such spikes are common and should be expected during certain times of the year; thus, there is no cause for concern.