Which of the following is software that runs on an individual computer to protect it from viruses and malware?

The software that runs on an individual computer to protect it from viruses and malware is a host-based firewall. A host-based firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules, providing a layer of protection against threats. While firewalls can prevent unauthorized access and network-based attacks, they can also help protect the computer from malware that attempts to communicate with external sources, making them essential for maintaining system security.

On the other hand, host-based intrusion detection systems primarily focus on identifying and notifying users about suspicious activity or policy violations but do not actively prevent malware from executing. Application-level allow/deny listing restricts applications from running based on a predefined list, which is more about controlling application behavior than specifically targeting malware. System-based sandboxing creates isolated environments for running applications but does not inherently protect the computer from threats outside of the sandbox. Therefore, a host-based firewall serves the purpose of protecting an individual computer from viruses and malware effectively.