Q44Security Concepts
How do rule-based and statistical detection differ?
← → navigate · a answer
Community votes
Discussion · 6
5
The correct answer is B. Keep in mind that statistical will always involve probability. Rule based is based on measured data.
4
D- is the correct one
D 4
Selected Answer: D
ANSWER D
B 1
Selected Answer: B
It has to be B, not D. I do not like the phrasing for "d"
D 1
Selected Answer: D
Statistical detection is based on observed data and uses probabilistic models to spot deviations from expected behavior (anomalies). Even though it uses probability, it depends on measured data, not just theoretical assumptions. The option "Rule-based uses data known beforehand and statistical is based on assumptions" is correct because it shows that rule-based detection uses prior knowledge (signatures or fixed rules), while statistical detection models normal behaviors (well-founded assumptions).
The option "Statistical uses the probability approach while rule-based is based on measured data" is not valid because it says that rule-based detection is based on measured data, which is wrong: it is based on known rules, not on statistical measurements.
D 1
Selected Answer: D
The wording seems off. I am choosing D, but I do not really like how it is worded.