Which of the following describes how Threat Extraction functions?

Providing a detailed report of discovered threats describes Threat Emulation, which sandboxes files and generates behavioral analysis reports - not Threat Extraction.

Threat Extraction works proactively by intercepting inbound files, removing potentially exploitable active content such as macros, scripts, and embedded objects, and delivering a clean reconstructed version to the user before any malicious payload can execute. This proactive stance differs from reactive detection tools because threats are neutralized regardless of whether a specific signature or behavior is identified.

Threat Extraction never delivers files with their original unmodified content; active content is always removed from the reconstructed file by design.

While Threat Extraction can convert files to PDF format, it also reconstructs original file types with active content removed, making 'PDF versions only' an incomplete and overly narrow description of the feature.