False-positive alerts are alerts that are triggered by benign or normal network traffic and are mistakenly identified as malicious. False positives can have a negative impact on business as they may consume the resources and time of the security team that need to analyze and verify them. True-positive alerts are alerts that correctly identify malicious traffic or activity and require proper incident response procedures. True positives can help the security team to quickly detect and mitigate threats and minimize the damage to the organization.
References := Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) - Cisco, page 92;
[Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide], page 98