When reviewing an intrusion detection system (IDS), an IS auditor should be MOST concerned about which of the following? 
A、Number of nonthreatening events identified as threatening 
B、Attacks not being identified by the system 
C、Reports/logs being produced by an automated tool 
D、Legitimate traffic being blocked by the system