An IPS appliance that uses statistical analysis to identify network traffic anomalies is said to be:

A.
not as secure as an IDS.

B.
vulnerable to false positives.

C.
signature based.

D.
behavior based.