Which of the following actions would not reduce the number of false positives from a correlation search?
A) Reducing the severity.
B) Removing throttling fields.
C) Increasing the throttling window.
D) Increasing threshold sensitivity.

Question

Quizplus · Accepted Answer

Reducing the severity does not affect the number of false positives; it only changes the perceived importance of the alerts.

Which of the Following Actions Would Not Reduce the Number