SSCP: Systems Security Certified Practitioner

By ISC · Question Mode

QuestionQ138

VerifiedRisk Identification, Monitoring and Analysis

Which of the following are alternative terms for knowledge-based IDS and behavior-based IDS, respectively?

Explanation

A knowledge-based IDS matches activity against known attack signatures. A behavior-based IDS detects statistically significant deviations from established normal behavior, making it a statistical anomaly-based IDS.

Community Discussion

No comments yet. Be the first to start the discussion!