Question

What type of monitoring compares network traffic, activities, transactions, or behavior against a database of known attack patterns?

Answer 1

Signature based monitoring examines network traffic, activity, and transactions, and compares them against a collection of pre-defined signatures in a database.

Source: Security+ Guide to Network Security Fundamentals by Mark Ciampa.