Which feature is designed to provide protection before third-party drivers initialize?

• A. Behavioral Intelligence
• B. Early Launch Anti-Malware (ELAM)
• C. WatchGuard Full Encryption
• D. Indicators of Attack (IOAs)

Answer: (B)

Early Launch Anti-Malware runs in the pre-boot phase, before any third-party drivers are initialized. This lets it start security checks before the OS and other drivers load, so it can block threats like bootkits or rootkits that try to hide by loading early. By initiating first, ELAM prevents malicious code from gaining a foothold as the system starts up.

The other options don’t operate at boot: Behavioral Intelligence looks for unusual activity after the system is running; WatchGuard Full Encryption protects data at rest rather than shielding the boot process; Indicators of Attack signals what happened after an intrusion, not what happens during startup.