ZIA Malware Protection is an inline security control that blocks malicious files or objects detected through signatures, reputation, and threat-intelligence checks. The policy action must stop the malicious transfer rather than simply route, isolate, or change TLS behavior. Option B (Block) is correct because Block is the malware policy action that prevents the identified malicious content from reaching the user.
Why the other options are incorrect:
A). Allow: Allow would permit the file or activity. A sandbox or malware policy often needs to hold, block, or analyze suspicious content instead of simply allowing it.
C). Unwanted Applications: Unwanted Applications is a software/category control. Malware-policy behavior is about malicious content handling.
D). Malware Protection: Malware Protection blocks known malicious objects. Sandbox behavior is used when a file needs detonation or verdict analysis.