Which option best describes Anomaly-based detection in the topic of IDS and IPS?

Correct Answer: A

looks for deviations from normal behavior that may indicate attacks

Anomaly-based detection is best described as something that looks for deviations from normal behavior that may indicate attacks.