200-201 Question 106
Select 3A cybersecurity analyst at a company notices an unusual spike in network traffic originating from an internal application. To investigate further, the analyst uses an application visibility and control tool. Which of the following actions can the analyst take using this tool to address the issue?
- A
Identify the specific application generating the traffic
- B
Block the application entirely from accessing the network
- C
Determine if the application traffic is adhering to its expected behavior
- D
Modify the application code to fix the issue directly
- E
Establish policies to limit the application's bandwidth usage
Show answer and explanation
Correct answers: A, C, E
Explanation
Application visibility and control tools are designed to help cybersecurity professionals monitor and manage application traffic across the network. They enable identification of applications, behavioral analysis, and policy enforcement to address issues like unusual traffic spikes. Blocking or modifying application code is outside the scope of these tools' capabilities.
- A. Correct.
Correct: Application visibility and control tools allow analysts to identify specific applications generating traffic, enabling targeted investigation.
- B. Incorrect.
Incorrect: Blocking the application entirely is not the primary purpose of application visibility and control tools. These tools focus on visibility and applying fine-grained controls, not outright blocking unless necessary.
- C. Correct.
Correct: These tools provide insights into whether an application's traffic is behaving as expected, which is key to identifying potential anomalies or misconfigurations.
- D. Incorrect.
Incorrect: Application visibility and control tools do not modify application code; they monitor and control network behavior related to applications.
- E. Correct.
Correct: Analysts can use these tools to create policies that limit bandwidth or restrict certain application behavior as part of network traffic management.