I noticed that Enhanced Protection Mode setting is not present anymore on current CIS 10. Has the functionality been removed for the Free version or is it enabled by default even without the setting?
Enable enhanced protection mode(Requires a system restart) - On 64 bit systems, enabling this mode will activate additional host intrusion prevention techniques to counteract extremely sophisticated malware that tries to bypass regular HIPS protection. Because of limitations in Windows 7/8/10 x64 systems, some HIPS functions in previous versions of CIS could theoretically be bypassed by malware. Enhanced Protection Mode implements several patent-pending ways to improve HIPS. CIS requires a system restart for enabling enhanced protection mode. (Default = Disabled)