C. Host-based IDS can detect attacks using encryption, because it can see the decrypted payload on the host.