What classification is used for an alert that correctly identifies that an exploit has occurred?true negativefalse positivetrue positivefalse negative

The classification used for an alert that correctly identifies that an exploit has occurred is "True Positive".

Here's a step-by-step explanation:

1. In the context of cybersecurity, an alert is a notification that a system or network might be under attack.

2. These alerts are generated by intrusion detection systems (IDS) or intrusion prevention systems (IPS).

3. When an alert correctly identifies that an exploit has occurred, it means the system accurately detected a real threat.

4. This is known as a "True Positive".

5. The other terms refer to different situations:

   • "True Negative" is when the system correctly identifies that no exploit has occurred.
   • "False Positive" is when the system incorrectly identifies that an exploit has occurred.
   • "False Negative" is when the system fails to identify that an exploit has occurred.