ExamGecko
Question list
Search
Search

Related questions











Question 38 - 200-201 discussion

Report
Export

What is the difference between statistical detection and rule-based detection models?

A.

Rule-based detection involves the collection of data in relation to the behavior of legitimate users over a period of time

Answers
A.

Rule-based detection involves the collection of data in relation to the behavior of legitimate users over a period of time

B.

Statistical detection defines legitimate data of users over a period of time and rule-based detection defines it on an IF/THEN basis

Answers
B.

Statistical detection defines legitimate data of users over a period of time and rule-based detection defines it on an IF/THEN basis

C.

Statistical detection involves the evaluation of an object on its intended actions before it executes that behavior

Answers
C.

Statistical detection involves the evaluation of an object on its intended actions before it executes that behavior

D.

Rule-based detection defines legitimate data of users over a period of time and statistical detection defines it on an IF/THEN basis

Answers
D.

Rule-based detection defines legitimate data of users over a period of time and statistical detection defines it on an IF/THEN basis

Suggested answer: B

Explanation:

Statistical detection involves collecting data over time to define what is considered normal behavior or legitimate data for users or systems. It then uses statistical analysis to identify abnormal behavior that could indicate a security incident. Rule-based detection uses predefined rules or patterns that are based on known threats or vulnerabilities - it operates on an IF/THEN basis where if certain conditions are met then an alert is triggered.Reference:=Cisco Cybersecurity Operations Fundamentals

asked 07/10/2024
Mikalai Yurouski
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first