CompTIA Security+ (SY0-701) SY0-701 — Question 415

A security architect wants to prevent employees from receiving malicious attachments by email. Which of the following functions should the chosen solution do?