(ISC)2
SSCP · Question #369
What IDS approach relies on a database of known attacks?
The correct answer is A. Signature-based intrusion detection. A weakness of the signature-based (or knowledge-based) intrusion detection approach is that only attack signatures that are stored in a database are detected. Network-based intrusion detection can either be signature-based or statistical anomaly-based (also called behavior
Submitted by tarun92· Apr 18, 2026Network and Communications Security
Question
What IDS approach relies on a database of known attacks?
Options
- ASignature-based intrusion detection
- BStatistical anomaly-based intrusion detection
- CBehavior-based intrusion detection
- DNetwork-based intrusion detection
How the community answered
(35 responses)- A89% (31)
- B3% (1)
- C6% (2)
- D3% (1)
Explanation
A weakness of the signature-based (or knowledge-based) intrusion detection approach is that only attack signatures that are stored in a database are detected. Network-based intrusion detection can either be signature-based or statistical anomaly-based (also called behavior
Topics
#Intrusion Detection Systems (IDS)#Signature-based IDS#Network Security#Security Monitoring
Community Discussion
No community discussion yet for this question.