Files matching known viruses for detection.

• A. Detection
• B. Malware Dwell Time
• C. Collective Intelligence
• D. Signature Files

Answer: (D)

Detecting known malware is done with signature-based detection, where signature files contain unique patterns of known threats (like specific byte sequences or file hashes) and are used to scan and match against files on endpoints. When a file matches a signature, it’s flagged as malicious and can be blocked or quarantined. This method is fast and effective for known viruses because each threat has a distinct signature, but it requires up-to-date signatures to catch new variants. The other terms refer to different ideas: general detection, the time it takes to detect after infection, or sharing threat intel, none of which describe using files that match known virus patterns. So the option that best fits is signature files.