Which IPS signature trigger type is based on a defined profile of normal network activity?

Which IPS signature trigger type is based on a defined profile of normal network activity?

• pattern-based detection
• policy-based detection
• anomaly-based detection
• honeypot-based detection

Explanation: There are four IPS trigger types:
pattern-based detection
anomaly-based detection
policy-based detection
honeypot-based detection
Anomaly-based detection compares network activity to a predefined profile of what is considered normal activity.

Exam with this question: CCNA Security Certification Practice Exam Answers