1. This question relates to false positives and false negatives (FN).
   • Explain the difference between false positives (FP) and false negatives (FN). [4]
   • Optimal anomaly detection is challenging in many security operational environments and these can result large percentages of false negatives and false positives. You work at as a security analyst at the Security Operations Centers (SOC) and you have recently experienced an uptick in the number of FP and FN. Discuss how would you go about investigating and resolving the cause of this change?