Discussion

Connect the appropriate malware identification methods with respective descriptions :

a. Signature-based detection	1. Observes the behaviour of a file in a virtual environment to determine if it is a potential threat.
b. Sandbox detection	2. Continuously compares a suspected program's source code with known viruses in a database.
c. Data mining techniques	3. Uses a database called Virus Definition File (VDF) to detect known malware and requires regular updates.
d. Heuristics	4. Monitors the behaviour of applications during execution to detect dormant or activated malware.
e. Real-time protection	5. Utilizes techniques to classify the behaviour of a file as benign or malicious.

Choose the most appropriate option from below :

Answer: C

The correct matching is a-3, b-1, c-5, d-2, e-4.

Signature-based detection checks files against a database of known malware signatures, the Virus Definition File, which needs regular updates (3).
Sandbox detection runs a suspicious file in an isolated virtual environment and watches its behaviour (1).
Data mining techniques classify a file's behaviour as benign or malicious (5).
Heuristics examine a suspected program's code and compare it with code from known viruses (2).
Real-time protection monitors applications while they run (4).

Signature-3 and sandbox-1 occur together in only one option.

No comment is present. Be the first to comment.

Loading…