Which statement concerning signature-based monitoring is correct?
a. Signature-based monitoring is designed for detecting statistical anomalies.
b. Signature-based monitoring uses an algorithm to determine if a threat exists.
c. Signature-based monitoring operates by being adaptive and proactive.
d. Signature-based monitoring looks for well-known patterns.
Answer: D
A method for auditing usage is to examine network traffic, activity, transactions, or behavior and look for well-known patterns, much like antivirus scanning. This is known as signature-based monitoring because it compares activities against a predefined signature.