Which term is best described as ongoing, real-time observation of system changes for security analysis?

• A. Status Change Alerts
• B. Telemetry Events
• C. Continuous Real-Time Monitoring
• D. Signature File Detection

Answer: (C)

Continuous Real-Time Monitoring is the ongoing, live observation of what’s happening on endpoints and in the system to see changes as they occur. This approach provides immediate visibility into process starts, file modifications, network connections, and other activities, enabling rapid detection of anomalies and swift incident response.

Telemetry events are data points collected from endpoints that feed analysis and monitoring, but they describe the data itself rather than the act of watching in real time. Status change alerts are notifications triggered by specific changes after they happen, useful for awareness but not continuous observation. Signature file detection relies on known threat patterns to identify issues, which is a detection method rather than a live, ongoing watch of system changes.