When the Acronis Active Protection service is on, it monitors the processes running on your computer by using the real-time mode. When it detects a third-party process that tries to encrypt your files, the service informs you about it and asks if you want to allow the process to modify your files or block the process.
Acronis Active Protection has the following settings: