CISM Certified Information Security Manager – Question0824

Which of the following is MOST likely to reduce the effectiveness of a signature-based intrusion detection system (IDS)?

A.
The activities being monitored deviate from what is considered normal.
B. The information regarding monitored activities becomes stale.
C. The pattern of normal behavior changes quickly and dramatically.
D. The environment is complex.

Correct Answer: D