What term describes an alarm that correctly indicates an actual attack?

• A. True Positive
• B. False Positive
• C. True Negative
• D. False Negative

Answer: (A)

In detection outcomes, you classify results into four categories: true positives, false positives, true negatives, and false negatives. When the system raises an alarm and there is indeed an attack, that is a true positive. It represents a correct indication of a real threat. A false positive would be an alarm with no actual attack, a true negative would be no alarm when there’s no attack, and a false negative would be no alarm despite an actual attack. So the term that fits an alarm that correctly indicates an actual attack is true positive.