Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?

exams 312-50v10 312-50v10 exam 0 Comments

Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?
A . Produces less false positives
B . Can identify unknown attacks
C . Requires vendor updates for a new threat
D . Cannot deal with encrypted network traffic

Answer: B