CISSP · Question #64
Which of the following is a network intrusion detection technique?
The correct answer is A. Statistical anomaly. Statistical anomaly is a network intrusion detection technique that compares the current network activity with a baseline of normal behavior, and detects any deviations that exceed a predefined threshold. Statistical anomaly can identify unknown or novel attacks, but it may also
Question
Options
- AStatistical anomaly
- BPerimeter intrusion
- CPort scanning
- DNetwork spoofing
How the community answered
(24 responses)- A92% (22)
- B4% (1)
- D4% (1)
Explanation
Statistical anomaly is a network intrusion detection technique that compares the current network activity with a baseline of normal behavior, and detects any deviations that exceed a predefined threshold. Statistical anomaly can identify unknown or novel attacks, but it may also generate false positives if the baseline is not updated or the threshold is not set properly.
Topics
Community Discussion
No community discussion yet for this question.