Chapter 1
Security Architecture
Course: Comptia Securityx Cas 005
Subject: Comptia Securityx Cas 005 Practice Exam
Chapter: Security Operations
1. Event Classifications
Understanding event classifications is critical for accurate incident response, as misclassification can lead to incorrect actions or missed threats.
| Classification | Definition | Example | | False Positive | A benign event incorrectly flagged as malicious. | A legitimate software update is flagged as malware. | | False Negative | A malicious event that is not flagged or detected. | A ransomware attack evades detection and encrypts files undetected. | | True Positive | A correctly flagged malicious event. | Detection of a brute-force attack attempting unauthorized logins. | | True Negative | A benign event correctly identified as non-malicious. | Normal user login activity is ignored by the monitoring system. |
2. Triage Event
Definition: Triage involves prioritizing events based on their severity, potential impact, and urgency.