312-50V13 · Question #177
What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on…
The correct answer is A. VCloud based. Antivirus software that identifies malware by collecting data from multiple protected systems and performing analysis in a central, cloud-based environment uses VCloud-based (or cloud-based) detection techniques.
Question
Options
- AVCloud based
- BHonypot based
- CBehaviour based
- DHeuristics based
How the community answered
(15 responses)- A87% (13)
- B7% (1)
- D7% (1)
Why each option
Antivirus software that identifies malware by collecting data from multiple protected systems and performing analysis in a central, cloud-based environment uses VCloud-based (or cloud-based) detection techniques.
VCloud based detection, more commonly known as cloud-based or community-based detection, involves sending suspicious file hashes or behavioral telemetry from numerous protected endpoints to a central, often cloud-hosted, analysis engine. This engine leverages collective threat intelligence and advanced analytics to identify malware rapidly without resource-intensive local scanning, providing comprehensive threat detection derived from a wide user base.
Honeypots are security traps designed to attract and study attackers, not a detection technique used by standard antivirus for endpoint protection.
Behavior-based detection typically involves monitoring processes and system calls locally on the endpoint, not primarily relying on data collected from multiple systems for central analysis.
Heuristics-based detection analyzes code for suspicious characteristics locally to identify unknown malware, without necessarily relying on data collected from multiple systems for central analysis.
Concept tested: Cloud-based malware detection
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/cloud-protection-microsoft-defender-antivirus?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.