CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
What is the primary detection method used by traditional antivirus software?
- A.Signature-based detection - comparing files against a database of known malware signatures
- B.AI-powered prediction
- C.Behavioral analysis only; signature based antivirus reliably detects previously unseen malware
- D.Network traffic analysis
Why A is correct
Traditional antivirus uses signature-based detection, comparing file hashes and byte patterns against a database of known malware. Limitations: cannot detect unknown/zero-day malware, and polymorphic malware evades signatures. Modern Endpoint Protection Platforms (EPP/EDR) add behavioral analysis, ML, and sandboxing for better detection.
Know someone studying for Security Fundamentals? Send them this one.