What describes automatic updates of detection rules used to identify malware?

• A. Endpoint Protection Platform (EPP)
• B. Endpoint Detection and Response (EDR)
• C. Telemetry Events
• D. Signature File Updates

Answer: (D)

Automatic updates of detection rules keep malware fingerprints current so endpoints can recognize new threats without manual intervention. These rules, or signatures, are patterns or indicators of known malicious code and behaviors; when vendors push signature file updates, endpoints receive and apply them, extending protection as threats evolve. This mechanism is what the term “signature file updates” describes. The other options refer to broader product categories or data collection rather than the update process itself: an Endpoint Protection Platform covers overall protection features, Endpoint Detection and Response centers on detecting and responding to incidents (often using telemetry), and telemetry events are data sent to a security console for analysis.