200-201 Question 107
Single answerA cybersecurity analyst is tasked with monitoring and controlling the usage of applications within the company's network. The analyst needs to identify and block specific applications that are consuming excessive bandwidth but also ensure legitimate business applications are not affected. Which feature of application visibility and control would best help the analyst in achieving this goal?
- A
Application Layer Traffic Classification
- B
Packet Filtering at Layer 2
- C
Network Address Translation (NAT)
- D
Deep Packet Inspection (DPI)
Show answer and explanation
Correct answer: A
Explanation
Application Layer Traffic Classification is a core feature of application visibility and control. It allows the analyst to identify and manage traffic based on the application, ensuring that bandwidth-hogging applications can be restricted while allowing business-critical applications to function seamlessly. Other options like Layer 2 filtering, NAT, and DPI are either unrelated or insufficient on their own for the given scenario.
- A. Correct.
Application Layer Traffic Classification allows for identifying and managing specific applications based on their unique characteristics, making it the most appropriate tool for controlling application traffic.
- B. Incorrect.
Packet Filtering at Layer 2 operates at a lower layer of the OSI model and cannot classify or block specific application traffic effectively.
- C. Incorrect.
Network Address Translation (NAT) is used for translating IP addresses and does not provide capabilities for identifying or controlling application usage.
- D. Incorrect.
Deep Packet Inspection (DPI) provides detailed analysis of packet content but does not inherently classify applications; it is typically used in conjunction with other tools.