Auto-Protectin Symantec Endpoint Security performscloud lookups on filesdownloaded during theInitial Access phase. This feature checks files against a cloud-based reputation database, enhancing detection capabilities for newly introduced files on the system.
* Function of Auto-Protect:
* Auto-Protect immediately scans files as they are accessed or downloaded, leveraging Symantec's cloud reputation to quickly determine the risk level of a file.
* This real-time scanning and cloud lookup are essential during the Initial Access phase to prevent threats from executing.
* Why Other Options Are Incorrect:
* Exploit Protection(Option A) focuses on protecting against application and system vulnerabilities, not file lookups.
* Intrusion Prevention(Option C) monitors network-based threats, andAntimalware(Option D) generally focuses on known malware patterns rather than immediate cloud-based lookups.
References: Auto-Protect is designed for proactive file scanning with cloud lookups to prevent Initial Access threats.