Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
the scan identified a vulnerability that was not present
A false positive occurs when a vulnerability scanning tool incorrectly reports a vulnerability that does not actually exist on the scanned system. In this case, the administrator has verified that the vulnerability is "not present," meaning the scan generated an alert for a non-existent issue.
The wording of this question is slightly vague, but this is how I interpreted it: The scan identified a vulnerability (positive result) but the vulnerability was not present (false)