Which of the following is a disadvantage of a statistical anomaly-based intrusion detection system?
A.
it may truly detect a non-attack event that had caused a momentary anomaly in the system.
B.
it may falsely detect a non-attack event that had caused a momentary anomaly in the system.
C.
it may correctly detect a non-attack event that had caused a momentary anomaly in the system.
D.
it may loosely detect a non-attack event that had caused a momentary anomaly in the system.
The Answer Is:
B
This question includes an explanation.
Explanation:
Some disadvantages of a statistical anomaly-based ID are that it will not detect an attack that does not significantly change the system operating characteristics, or it may falsely detect a non-attack event that had caused a momentary anomaly in the system.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 49.
SSCP PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"