Appendix . Answers to the “Do I Know This Already?” Quizzes and Q&A Questions
What is a false positive?
Answer: A false positive happens when a signature triggers incorrectly during normal user traffic instead of attack traffic.
What is a true positive?
Answer: A true positive happens when a signature correctly identifies an attack launched against the network.
If your sensor has only two monitoring interfaces, can you operate in promiscuous and inline modes simultaneously?
Answer: No, because running inline requires a pair of sensor interfaces. If you have only two interfaces, you can run either a single interface pair (in inline mode) or two interfaces (in promiscuous ...