A security analyst receives a notification from the IDS after working hours, indicating a spike in network traffic. Which of the following BEST describes this type of IDS?

Question

Quizplus · Accepted Answer

An anomaly-based IDS detects unusual patterns or spikes in network traffic that deviate from the normal behavior, which is why it would alert the analyst about a spike in traffic.

A Security Analyst Receives a Notification from the IDS After