Exam ZDTA Topic 2 Question 21 Discussion

ZIA Malware Protection is an inline security control that blocks malicious files or objects detected through signatures, reputation, and threat-intelligence checks. The policy action must stop the malicious transfer rather than simply route, isolate, or change TLS behavior. Option A (Malware protection) is correct because Block is the malware policy action that prevents the identified malicious content from reaching the user.
Why the other options are incorrect:
B). File reputation: File reputation checks whether an object is known good or bad. The question's answer is about the behavior-analysis control for unknown files.
C). SHA-256 hashing: SHA-256 hashing is a cryptographic integrity/hash function. It does not execute a suspicious file or observe behavior the way Cloud Sandbox does.
D). Site reputation: Site reputation scores web destinations. It does not detonate or analyze the file itself.