Malware policy. How it works?

Hi, we would like to enable the Malware Detection Policy in MCAS but we don't really know how it works.

- Does  this malware detection policy quarantine files by default when they are detected as a potential malicious file or only create an alert?

 - What does the "File Sandboxing" option mean?

Can you help us, please?

Thanks in advance and regards.

Have a good day.