nerdexam
(ISC)2

SSCP · Question #369

What IDS approach relies on a database of known attacks?

The correct answer is A. Signature-based intrusion detection. A weakness of the signature-based (or knowledge-based) intrusion detection approach is that only attack signatures that are stored in a database are detected. Network-based intrusion detection can either be signature-based or statistical anomaly-based (also called behavior

Submitted by tarun92· Apr 18, 2026Network and Communications Security

Question

What IDS approach relies on a database of known attacks?

Options

  • ASignature-based intrusion detection
  • BStatistical anomaly-based intrusion detection
  • CBehavior-based intrusion detection
  • DNetwork-based intrusion detection

How the community answered

(35 responses)
  • A
    89% (31)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Explanation

A weakness of the signature-based (or knowledge-based) intrusion detection approach is that only attack signatures that are stored in a database are detected. Network-based intrusion detection can either be signature-based or statistical anomaly-based (also called behavior

Topics

#Intrusion Detection Systems (IDS)#Signature-based IDS#Network Security#Security Monitoring

Community Discussion

No community discussion yet for this question.

Full SSCP Practice