Which conceptual approach to intrusion detection system is the most common?

The correct answer is B. Knowledge-based intrusion detection. There are two conceptual approaches to intrusion detection. Knowledge-based intrusion detection uses a database of known vulnerabilities to look for current attempts to exploit them on a system and trigger an alarm if an attempt is found. The other approach, not as common, is…

Submitted by obi.ng· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Options

ABehavior-based intrusion detection
BKnowledge-based intrusion detection
CStatistical anomaly-based intrusion detection
DHost-based intrusion detection

How the community answered

(19 responses)

B
89% (17)
C
5% (1)
D
5% (1)

Explanation

There are two conceptual approaches to intrusion detection. Knowledge-based intrusion detection uses a database of known vulnerabilities to look for current attempts to exploit them on a system and trigger an alarm if an attempt is found. The other approach, not as common, is called behaviour-based or statistical analysis-based. A host-based intrusion detection system is a common implementation of intrusion detection, not a conceptual approach.

Topics

#Intrusion Detection Systems#IDS types#Signature-based IDS#Threat detection

Community Discussion

No community discussion yet for this question.

Full SSCP Practice