What is a difference between signature-based and behavior-based detection?
A.
Signature-based identifies behaviors that may be linked to attacks, while behavior-based has a predefined set of rules to match before an alert.
B.
Behavior-based identifies behaviors that may be linked to attacks, while signature-based has a predefined set of rules to match before an alert.
C.
Behavior-based uses a known vulnerability database, while signature-based intelligently summarizes existing data.
D.
Signature-based uses a known vulnerability database, while behavior-based intelligently summarizes existing data.
The Answer Is:
B
This question includes an explanation.
Explanation:
Behavior-based detection monitors the behavior of programs in real-time. If a piece of software acts similarly to known malware after it’s been executed, behavior-based detection can stop it in its tracks. Signature-based detection involves searching for known patterns of data within executable code; if a pattern matches a “signature” in the system’s database that is considered malicious. References: Cisco Cybersecurity Operations Fundamentals
200-201 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"