Q27
Single choice
Which of the following is the BEST way to detect zero-day malware on an end user's workstation?