| Exam 200-201 | Question id=6002 | Host-based analysis | 
        What is a difference between signature-based and behavior-based detection?
      
| A. | 
            Signature-based identifies behaviors that may be linked to attacks, while behavior-based has a predefined set of rules to match before an alert. | |
| B. | 
              Behavior-based identifies behaviors that may be linked to attacks, while signature-based has a predefined set of rules to match before an alert. | |
| C. | 
            Behavior-based uses a known vulnerability database, while signature-based intelligently summarizes existing data. | |
| D. | 
            Signature-based uses a known vulnerability database, while behavior-based intelligently summarizes existing data. |