CompTIA Security+ Exam Prep

Answer - D - A-signature-based NIDS is solely based on specific network traffic.

Key Takeaway: IDS is primarily focused on evaluating attacks based on attack signatures and audit trails. An A-signature-based IDS will monitor packets on the network and compare them against a database of signatures or attributes from known malicious threats. This is similar to the way most antivirus software detects malware.