Which of the following mitigation techniques is based on anomaly detection? (Choose 2)

Brute force attack prevention is anomaly-based because ASM establishes a baseline of normal login attempt frequency and flags deviations - such as excessive failed attempts from a source - as suspicious, without relying on a static signature.

CSRF prevention relies on token-based validation (verifying an anti-forgery token embedded in the request), which is a deterministic rule check, not anomaly detection.

Web scraping prevention is anomaly-based because ASM tracks request rates, session patterns, and navigation sequences to identify bot-like behavior that deviates from legitimate user traffic baselines.

Parameter tampering prevention uses explicit allowlisting of expected parameter names, types, and value ranges - a positive security model approach, not anomaly detection.