Student Seeks Advice After Failing SAL1 Exam Section
SAL1examretakebrute-forceTruePositiveFalsePositiveadvice
The poster failed their first attempt at the SAL1 exam, specifically Section 3. They questioned whether brute force-related alerts with unsuccessful attempts should be classified as True Positive or False Positive, noting they marked them as False Positive. They also asked if Sections 2 and 3 remain the same in terms of topics when retaking the exam. The post seeks advice or clarification from others who have retaken the exam.