Which statement explains the primary difference between reputation-based detection and anomaly-based detection methods?
A. Over time, reputation-based detection will learn and evaluate patterns that could indicate suspicious activity.
B. Anomaly-based detection leverages use of a "signature" to determine whether suspicious activity is occurring.
C. Reputation-based detection allows the IPS to block all traffic from known bad sources before any significant inspection is done.
D. Anomaly-based detection is faster than reputation-based detection.
E. Reputation-based detection leverages use of a "signature," to determine whether suspicious activity is occurring.
