When tuning an IPS, which three determinations should help you decide whether a rule should be disabled? (Choose three.)

When tuning an IPS, which three determinations should help you decide whether a rule should be disabled? (Choose three.)
A . Does the alert occur frequently?
B . Does the alert generate a true positive condition?
C . If the alert is not a security incident, does it offer valuable information?
D . Does the alert pertain to your network environment?

View Answer

Answer: BCD