Hybrid detection
Course: AP® Cybersecurity Shows up in: Unit 3: Securing Networks
Detection that combines signature-based and anomaly-based methods; the most expensive option and it generates more alerts.
Appears in the course and exam description (CED): 3.5.C.33.5.D.2
Why it matters in Unit 3
Chosen for networks with the most sensitive or critical data or services.
Example
A hospital network running both methods.
Learn it properly, with a checkpoint 3.5 Detecting Network Attacks