Which protection stops exploit attacks and notifies the user?

• A. Code Injection
• B. Zerologon
• C. Block Mode
• D. EternalBlue

Answer: (C)

Block Mode is the protection that both stops exploit attempts in real time and notifies the user. It enforces active defense, blocking the exploit payload from executing on the endpoint, while also surfacing a notification so the user or administrator is aware something was blocked. This combination of prevention and visibility is what makes Block Mode the correct choice for stopping exploit attacks and alerting you to them.

The other options aren’t described as a protective mode. Code injection is a type of attack technique, not a mode of protection. Zerologon and EternalBlue are names of specific exploits, not the protective mechanism used to stop them and notify users.