John has implemented an intrusion detection system that has identified suspicious traffic without the use of signatures. While responding to the event, John notices that the IDS has falsely identified the traffic as being suspicious. Which of the following devices does John need to configure to prevent additional false alarms?

Question $33$ options:

Signature$-$based IDS

Anomaly$-$based IDS

Anomaly$-$based IPS

Host$-$based IDS