For the purposes of protecting against worms, what feature should a new endpoint security system include?

An indicator of compromise $($IOC$)$ scanner.

Endpoint Data Backup Software

Adware and spyware detection.

A host$-$based firewall and intrusion prevention system.