Which of the following questions is LEAST likely to help in assessing controls covering audit trails?

Which of the following best describes signature-based detection?

Which of the following is NOT a characteristic of a host-based intrusion detection system?

Which of the following assertions is NOT true about pattern matching and anomaly detection in intrusion
detection?

Which of the following is required in order to provide accountability?

Which of the following is NOT a critical security aspect of Operations Controls?

When attempting to establish liability, which of the following would be described as performing the ongoing
maintenance necessary to keep something in proper working order, updated, effective, or to abide by what is
commonly expected in a situation?

Which of the following is NOT an example of a detective control?

Which of the following is NOT an example of preventive control?

Which of the following control helps to identify an incident’s activities and potentially an intruder?