Which method does an intrusion detection and prevention system (IDPS) use to identify intrusions by scanning and analyzing events to detect if they are statistically different from normal events?

exams DEA-1TT5 V1 DEA-1TT5 exam 0 Comments

Which method does an intrusion detection and prevention system (IDPS) use to identify intrusions by scanning and analyzing events to detect if they are statistically different from normal events?
A . Anomaly-based
B . Signature-based
C . Profile-based
D . Device-based

Answer: A