Which of the following is an example of malware that runs on the device and...

The key clue is “uses built-in sensors to monitor targets without their consent.” In the All-in-One Exam Guide’s mobile security coverage, it explains that modern devices can be abused for unauthorized location tracking and that device settings or apps may send location information “to third parties, sometimes without explicit consent or knowledge.” It also warns about unauthorized camera and microphone activation , stating that “app features, malware, and unauthorized network connections can potentially be used to activate… built-in cameras and microphones,” which enables an attacker to “effectively spy on anyone near it.” The Mike Meyers Lab Manual mirrors this exactly: unauthorized tracking can occur without explicit consent and built-in cameras/microphones are “of particular concern” because they let an attacker spy nearby.

That specific “surveillance via sensors” behavior aligns best with stalkerware (a spyware-style category focused on covert monitoring). By contrast, a rootkit’s hallmark is hiding itself using low-level OS control, and a Trojan primarily masquerades as something harmless. Therefore, D is the best answer.