In Network Security, what is the main purpose of Anomaly-based detection?

A. cannot learn baselines B. matches only exact known signatures C. looks for deviations from normal behavior that may indicate attacks D. is used only for cable testing