| Exam 200-201 | Question id=6002 | Host-based analysis |
What is a difference between signature-based and behavior-based detection?
| A. |
Signature-based identifies behaviors that may be linked to attacks, while behavior-based has a predefined set of rules to match before an alert. | |
| B. |
Behavior-based identifies behaviors that may be linked to attacks, while signature-based has a predefined set of rules to match before an alert. | |
| C. |
Behavior-based uses a known vulnerability database, while signature-based intelligently summarizes existing data. | |
| D. |
Signature-based uses a known vulnerability database, while behavior-based intelligently summarizes existing data. |