Which Windows feature should you use to protect a computer against spyware?

Group Policy manages system and user settings across a network but does not directly scan for or prevent spyware infection.

User Account Control (UAC) prompts for administrative consent for system changes, preventing unauthorized software installation but not directly protecting against or removing spyware.

Windows Defender actively detects and removes spyware; however, EFS offers a distinct protective layer by encrypting data, ensuring that even if spyware is present and exfiltrates files, the information remains unreadable.

Encrypting File System (EFS) protects sensitive data at rest by encrypting files and folders on NTFS volumes, securing data against unauthorized access. While EFS does not detect or remove spyware, it protects the confidentiality of information by rendering files unreadable even if spyware manages to exfiltrate them without the corresponding decryption key, thereby mitigating the risk of sensitive data theft.