Which uses behavioral analysis to detect and block threats?

• A. Contextual Detections
• B. Heuristic Scanners
• C. Layered Protection
• D. WatchGuard Data Control

Answer: (A)

Behavioral analysis in endpoint security focuses on how programs and processes act—such as unusual file activity, new network connections, or attempts to tamper with security settings—rather than only checking for known signatures. Contextual detections use that idea by weighing these actions within the surrounding context: which user is involved, which application is running, the time and location, and the history of prior behavior. This combination helps identify and block threats that haven’t been seen before, including zero-day attacks, by assigning risk and taking automatic protective action. Heuristic scanners look for suspicious patterns in code or files, which is related but centers on code characteristics rather than how actions unfold in their environment. Layered Protection describes a broader strategy of multiple defenses rather than a single detection method. WatchGuard Data Control deals with preventing data loss, not threat detection based on behavior.