Question

what are the two most common ways in which antimalware can function?
scanning files and network messages and comparing them to a database of known malware signatures
examining the behavior of processes and traffic - handling services
searching through all users on the device to find unauthorized users
scanning files and network messages to identify unauthorized users
scanning a device for recent settings changes that could give an unauthorized user access to data

Explanation:

Antimalware commonly uses two core methods: signature-based detection (matching against known malware signatures) and behavior-based detection (analyzing process/network behavior for suspicious activity). The other options focus on unauthorized users or settings changes, which are not primary antimalware functions.

Answer:

Scanning files and network messages and comparing them to a database of known malware signatures, Examining the behavior of processes and traffic-handling services