CISA Certified Information Systems Auditor – Question1083

Which of the following is MOST likely to reduce the effectiveness of a signature-based intrusion detection system (IDS)?

A.
The activities being monitored deviate from what is considered normal.
B. The environment is complex.
C. The pattern of normal behavior changes quickly and dramatically.
D. The information regarding monitored activities becomes state.

Correct Answer: C