CompTIA CySA+ CS0-003 Practice Question
As a cybersecurity analyst in an organization, you notice that the number of alerts from the Intrusion Detection System (IDS) has significantly increased over the past week. You are tasked with reporting this increase in alert volume to the management team. Which of the following explanations is most valuable in your report to determine appropriate actions?
The increase may indicate a real threat or a misconfiguration causing false positives; further analysis is needed to confirm the nature of the alerts.
The increase is likely not significant; it is probably due to more users being active on the network.
Such spikes are common and should be expected during certain times of the year; thus, there is no cause for concern.
Management should immediately implement all pending patches and updates to mitigate this new wave of attacks.