Suspicious traffic without a specific signature was detected. Under further investigation, it was determined that these were false indicators. Which of the following security devices needs to be…

A signature-based IPS compares traffic against a database of known attack patterns and blocks matching traffic; it would not alert on traffic that lacks a specific signature.

A signature-based IDS also relies on known signatures to generate alerts; it cannot flag traffic that does not match an existing signature entry.

An application-based IPS inspects traffic at the application layer against known attack patterns or policies; without a matching signature or policy violation, it would not generate alerts on unrecognized traffic.

Anomaly-based IDS establishes a behavioral baseline for normal network activity and alerts on deviations, which makes it effective against novel threats but prone to false positives when legitimate traffic does not match the baseline. Since the traffic had no specific signature and was determined to be a false indicator, the system producing the alert is anomaly-based, and its sensitivity or thresholds must be adjusted to reduce false alarms.