A customer wants to block instant-messaging traffic within Facebook Chat for its employees. Which feature licensing option provides this capability'?

Question

Options

• Adefault FirePOWER services
• BIPS
• CURL
• DAVC
• Ebotnet filtering

• A
  7% (1)
• C
  13% (2)
• D
  80% (12)

Explanation

AVC (Application Visibility and Control) is correct because it provides deep packet inspection at the application layer, enabling granular control over specific behaviors within an application - such as blocking only the instant-messaging feature inside Facebook while potentially allowing other Facebook traffic. The other options target different threat vectors: IPS (B) detects and blocks exploit signatures and network threats, not application-layer usage policies; URL filtering (C) blocks entire domains or categories of websites, so it can block all of Facebook but not just the chat feature; default FirePOWER services (A) provide basic visibility without the AVC license required for application-level control; and botnet filtering (E) identifies traffic to known command-and-control servers, unrelated to IM traffic management.

Memory tip: Think "AVC = App-layer Volume Control" - it's the knob that lets you turn down (or off) specific features inside an application, not just block the whole site.

No community discussion yet for this question.