Study. uk . com
  1. Home
  2. All questions
  3. Question 499

CISSP study material · question 499 of 500

An operations centre receives thousands of alerts a day, most of them noise. How does OWASP's 2025 entry treat this situation?

  1. As a tuning matter outside the scope of application security.
  2. As a monitoring success, since coverage is evidently complete.
  3. As acceptable, provided all alerts are retained for later analysis.
  4. As a logging and alerting failure, since important alerts become indistinguishable and are recognised late or not at all.
Show the answer

Answer: D. As a logging and alerting failure, since important alerts become indistinguishable and are recognised late or not at all.

OWASP lists too many false positive alerts making it impossible to distinguish important alerts, so they are recognised too late or not at all, overloading the operations team.

Source: OWASP Top 10 A09:2025 (OWASP) — OWASP Top 10:2025 A09 Security Logging and Alerting Failures > Description

Challenge yourself on this topic → Study as cards