For this question refer to your textbook.

Which of the following is NOT a method for collecting data for anomaly$-$based intrusion detection?

Question $22$ options:

Observing network occurrences

Discerning anomalous traffic through heuristics and statistics

Recognizing attack patterns that deviate from normal network behavior

Configuring honeypot systems to mirror production systems

Alerting whenever a specific pattern is seen