what is the difference here , do we need to perform both?

Enabling Ransomware Protection for a HyperScale MediaAgent, vs Enabling Ransomware Protection for a HyperScale Cluster

and in the documentation its says Ransomware protection is automatically enabled on new installations of the HyperScale X Reference Architecture.

but recently i have done a deployment and its not enabled by default