Proofpoint's Targeted Attack Protection (TAP) is an advanced threat protection solution focused on threats delivered via email. Its two primary capabilities are URL Defense and Attachment Defense. URL Defense rewrites links in emails and analyzes the destination for threats in real-time when a user clicks. Attachment Defense uses sandboxing technology to analyze email attachments for malicious behavior, condemning them if they are found to be a threat. These features protect users from credential phishing, malware, and other advanced attacks.

A. This describes Proofpoint's Threat Response Auto-Pull (TRAP) feature, which is a separate, post-delivery remediation tool, not a core TAP protection capability.

B. This describes Proofpoint Security Awareness Training (PSAT), a separate product line focused on educating users rather than direct technical threat prevention.

D. This is also a function of Proofpoint's Threat Response Auto-Pull (TRAP), which automatically quarantines malicious messages delivered to user inboxes.

1. Proofpoint, Inc. (2023). Targeted Attack Protection (TAP) Datasheet. "Key Capabilities" section. The document explicitly lists "URL Defense: Defend against malicious URLs" and "Attachment Defense: Defend against malicious attachments" as the core functions of the TAP solution.

2. Proofpoint, Inc. (2022). Proofpoint TAP Administrator Guide. Section: "How TAP Works". This guide details the process of how TAP rewrites URLs and sandboxes attachments to protect end-users from email-based threats.