Which of the following are TURE with regards to making use of Endpoint Protection in Configuration Manager?