Which security measure involves inspecting traffic to locate and block viruses?

Which security measure involves inspecting traffic to locate and block viruses?

• A. Trend analysis
• B. Web filtering
• C. Configuration baselines
• D. Antivirus

Answer: (D)

The concept being tested is antivirus protection that inspects data as it moves through a network or sits on endpoints to detect and block malware. Antivirus works by examining files and traffic for known malware signatures and suspicious behavior. When a match or anomalous activity is detected, it quarantines, cleans, or blocks the payload in real time, preventing infections from spreading. Regular updates to virus definitions and real-time scanning are essential to keep this protection effective against new threats. Trend analysis looks for patterns over time to flag anomalies, but it isn’t the core mechanism for identifying malware in traffic. Web filtering controls access to websites or content, which can help reduce exposure but isn’t primarily about inspecting traffic for viruses. Configuration baselines ensure systems start from secure, standard configurations; they don’t scan for or block malware in traffic.

The concept being tested is antivirus protection that inspects data as it moves through a network or sits on endpoints to detect and block malware. Antivirus works by examining files and traffic for known malware signatures and suspicious behavior. When a match or anomalous activity is detected, it quarantines, cleans, or blocks the payload in real time, preventing infections from spreading. Regular updates to virus definitions and real-time scanning are essential to keep this protection effective against new threats.

Trend analysis looks for patterns over time to flag anomalies, but it isn’t the core mechanism for identifying malware in traffic. Web filtering controls access to websites or content, which can help reduce exposure but isn’t primarily about inspecting traffic for viruses. Configuration baselines ensure systems start from secure, standard configurations; they don’t scan for or block malware in traffic.