Security OperationsCâu 78 / 100
Which detection method flags activity that deviates from an established normal pattern?
a.Signature-based
b.Rule-based
c.Whitelist-based
d.Anomaly-based
Giải thích
Anomaly-based detection builds a baseline of normal behavior and alerts on deviations, enabling detection of novel attacks. It can catch previously unseen threats but may produce more false positives. Signature-based detection, by contrast, matches known patterns.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- Which recovery site is fully equipped and can take over operations almost immediately?
- Which scan identifies known weaknesses in systems without actively exploiting them?
- An authorized simulated attack that attempts to exploit vulnerabilities to test defenses is a:
- Which endpoint solution continuously records activity and enables investigation and automated response to threats on hosts?
- Which practice ensures logs cannot be tampered with by centralizing them on a protected, write-once server?
- A discussion-based session where a team walks through their response to a hypothetical incident is called a:
Cập nhật gần nhất: · quy trình kiểm tra
Đội Ngũ Biên Tập PrepPass · Đối chiếu với CompTIA Security+ (SY0-701) · Quy trình kiểm tra