Unit 1: D2.2 AAQ

The antivirus software checks for known malware and takes action to remove or repair affected files.

The antivirus software removes all viruses from files. It will not protect against Trojan horses or worms, however.

The antivirus software make sure that users only visit websites that are secured over HTTPS.

The antivirus software detects and deflects DDoS attacks.

A worm requires a host program, while a virus does not.

A virus requires a host program, while a worm does not.

Both require a host program to spread.

Neither can spread without user intervention.

Real-Time Scanning

Signature-Based Detection

Heuristic Analysis

Automatic Updates

Signature scanning

Behavioural analysis

Sandboxing

Email scanning

Blocks access to known malicious websites

Performs system checks

Monitors network activity

Alerts users about suspicious links

Overly aggressive detection algorithms

Files sharing characteristics with known malware

Outdated virus definitions

All of the above

It combines multiple defenses

It relies solely on antivirus

It is not necessary

It focuses only on firewalls

Real-time scanning checks files as they are opened or saved

Full scans only check files when the computer is idle

Real-time scanning is more resource-intensive than full scans

Full scans are scheduled to run during peak hours