In a WIDS anomaly detection system the security administrator defines the ____ (or normal) state of the network's traffic.
A) baseline
B) signature
C) pattern
D) false positives

Question

Quizplus · Accepted Answer

In a WIDS anomaly detection system, the security administrator defines the baseline or normal state of the network's traffic. This baseline is then used as a reference to detect any unusual or suspicious activity in the network. Signature and pattern are both terms associated with intrusion detection systems but are not directly related to WIDS anomaly detection. False positives refer to a situation where an anomaly is detected, but it is not a real threat, and is not related to the question.

In a WIDS Anomaly Detection System the Security Administrator Defines