Behavior-based monitoring attempts to overcome the limitations of both anomaly-based monitoring and signature-based monitoring by being more adaptive and proactive instead of reactive.
A- True
B- False

A. True

Explanation: Both signature-based and anomaly-based monitoring systems are considered as being reactive based on the fact that, In signature-based monitoring, threat and attacks can only be detected or monitored based on previous threat patterns, meaning tm attacks with a new pattern or signature will go undetected. For the anomaly-based monitoring, it contains a set of rules regarded as norm and flags any process which deviates as a threat.

However, the behavior based monitoring is more adaptive and proactive, it looks at evidence rather than a static or previously established signature which a uses a reactive approach.

answer; ecological fallacy;

answer; personal construct;