Mile2_Security
MK0-201 · Question #243
Intrusion Detection Systems have multiple ways to decode the information. Which of the following definitions would best describe Protocol Anomaly Detection within an Intrusion Detection System (IDS)…
Sign in or unlock MK0-201 to reveal the answer and full explanation for question #243. The question stem and answer options stay visible for context.
Question
Intrusion Detection Systems have multiple ways to decode the information. Which of the following definitions would best describe Protocol Anomaly Detection within an Intrusion Detection System (IDS) engine?
Options
- AInterprets the attack as the victim would for greater accuracy
- BIdentifies attacks that are based on condition, not patterns
- CCompares traffic to RFC standards and reports deviations
- DIdentifies traffic that breaks policy or is not normal for network
Unlock MK0-201 to see the answer
You've previewed enough free MK0-201 questions. Unlock MK0-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.