Question 422:
As a result of a risk assessment, your security manager has determined that your organization needs to implement an intrusion detection system that can detect unknown attacks and can watch for unusual traffic behavior, such as a new service appearing on the network. What type of intrusion detection system would you select?
Answer options:
A. Protocol anomaly based B. Pattern matching C. Stateful matching D. Traffic anomaly-based