Examining network traffic, activity, transactions, or behavior and looking for well-known patterns is known as ____-based monitoring
A) application
B) protocol
C) packet
D) signature

Question

Quizplus · Accepted Answer

Signature-based monitoring involves looking for specific patterns or signatures in network traffic, activity, or behavior that are known to be associated with particular threats or attacks. This approach can be effective for detecting known threats, but may not be as effective for identifying new or unknown attacks. Application-based monitoring focuses on monitoring specific applications or services running on a network, while protocol-based monitoring looks at the specific network protocols being used. Packet-based monitoring involves analyzing individual packets of network traffic for specific characteristics or patterns.

Examining Network Traffic, Activity, Transactions, or Behavior and Looking for Well-Known