An organization plans to transition the intrusion detection and prevention techniques on a critical subnet to an anomaly-based system. Which of the following does the organization need to determine for this to be successful?

Question

Quizplus · Accepted Answer

An anomaly-based intrusion detection system requires a baseline of normal network behavior to identify deviations that may indicate potential threats.

An Organization Plans to Transition the Intrusion Detection and Prevention