A university is hit by a brand-new malware variant that has never been seen before, so no vendor has
yet published a pattern for it.
Which statement about detection is correct?

Question

A university is hit by a brand-new malware variant that has never been seen before, so no vendor has
      yet published a pattern for it. 
       Which statement about detection is correct?

Answer

Neither method can help, because detection of unknown code is the exclusive responsibility of the firewall's rule set.

Answer

Anomaly-based detection will miss it, because it can only flag behaviour that matches a previously recorded pattern.

Answer

Signature-based detection will miss it; anomaly-based detection may catch it, but at the cost of more false positives.

Answer

Signature-based detection will catch it, because signatures describe general attack categories rather than specific samples.

Crowdly

A university is hit by a brand-new malware variant that has never been seen befo...

Want instant access to all verified answers on online.codl.lk?