Which feature should you implement?

You are a Microsoft 365 administrator for a company.

Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicious code. You need to remove the message from inboxes and disable the PDF threat if an affected document is opened.

Which feature should you implement?
A . Microsoft Exchange Admin Center block lists
B . Sender Policy Framework
C . Advanced Threat Protection anti-phishing
D . zero-hour auto purge
E . DKIM signed messages with mail flow rules

Answer: C

Explanation:

References:

https://docs.microsoft.com/en-us/office365/securitycompliance/atp-anti-phishing