Signature-based monitoring can be described as which of the following?
A) attempts to answer the question: "will this do something harmful if allowed to execute?"
B) compiles a baseline of normal activities and looks for statistical anomalies
C) examines network traffic,activity,and transactions,and looks for well-known patterns
D) continuously analyzes the behavior of processes and alerts the user if abnormal actions are detected

Question

Quizplus · Accepted Answer

Signature-based monitoring examines network traffic, activity, and transactions and looks for well-known patterns, such as known malicious codes, viruses, or malware. It compares observed network behavior to an established database of patterns or signatures to detect possible threats.

Signature-Based Monitoring Can Be Described as Which of the Following