Malware Protection inside HTTPS connections is performed using which parts of the Zero Trust Exchange?

Deception creating decoy files for malware to discover.

Application Segmentation of users to specific private applications.

TLS Inspection decrypting traffic to compare signatures for known risks.

Data Loss Protection comparing saved filenames for known risks.