Which is true of a signature-based IDS?
A)it cannot work with an ips
B)it only identifies on known signatures
C)it detects never-before-seen anomalies
D)it works best in large enterprises.

Question

Quizplus · Accepted Answer

Signature-based IDS identifies threats by comparing the incoming traffic against a database of known attack patterns or signatures. It does not detect new, unknown anomalies; it requires prior knowledge of attack signatures to identify threats.

Which Is True of a Signature-Based IDS