During a semester exam on IDS and IPS, which answer should be selected for Anomaly-based detection?

Correct Answer: C

looks for deviations from normal behavior that may indicate attacks

The correct answer is that Anomaly-based detection looks for deviations from normal behavior that may indicate attacks.