Which two characteristics apply to the endpoint security aspect of the Cisco Threat Defense architecture? (Choose two.)

Detecting and blocking ransomware in email attachments is primarily a function of email security gateways, although endpoint protection can provide a last line of defense.

Endpoint security solutions monitor and control data leaving an endpoint, providing capabilities such as outbound URL analysis to prevent access to malicious sites and data transfer controls to prevent data exfiltration.

User context analysis is a broader security capability often integrated across various security layers (e.g., identity, network access control) rather than being a specific, standalone characteristic unique to endpoint security itself.

Advanced endpoint protection platforms (EPP) and endpoint detection and response (EDR) solutions are designed to detect and block sophisticated threats like fileless malware, which operate in memory without leaving traditional file artifacts, in real time on the endpoint.

Cloud-based analysis of threats is a method employed by many modern security solutions (e.g., email, network, endpoint) but is a processing characteristic rather than a unique functional aspect specific to endpoint security.