You must use Cisco AVC on a WLC to prevent users from accessing a social media website. Which action do you configure in a rule?

The 'drop' action in a Cisco AVC policy rule instructs the WLC to silently discard all packets classified as the matched application, completely blocking user access to the social media site without sending any response back to the client - this is the only AVC action that enforces a hard block on application traffic.

The 'rate-limit' action throttles bandwidth for the matched application rather than blocking it, meaning users would still reach the social media site at a reduced speed.

'Deny' is not a valid configurable action in Cisco AVC policy rules on the WLC - the correct term for blocking application traffic in AVC is 'drop', not 'deny'.

The 'mark' action re-marks the DSCP or QoS tag on matched application traffic for prioritization or deprioritization purposes and does not prevent access to the application.