Which signature type results in a legitime alert been dismissed?