CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
What is the primary detection method used by traditional antivirus software?
- A.B. Signature-based detection - comparing files against a database of known malware signatures
- B.A. Behavioral analysis only
- C.C. Network traffic analysis
- D.D. AI-powered prediction
Why A is correct
Traditional antivirus uses signature-based detection, comparing file hashes and byte patterns against a database of known malware. Limitations: cannot detect unknown/zero-day malware, and polymorphic malware evades signatures. Modern Endpoint Protection Platforms (EPP/EDR) add behavioral analysis, ML, and sandboxing for better detection.
Know someone studying for Security Fundamentals? Send them this one.