What is the level of granularity that is supported by application visibility and control?

Question

Options

• Afiltering of instant messaging within an HTTP packet
• Bfiltering by TCP/UDP ports
• Cfiltering by IP address
• Dfiltering of HTTP packets

• A
  7% (4)
• B
  89% (51)
• C
  2% (1)
• D
  2% (1)

Explanation

Application visibility and control (AVC) operates at the transport layer, using TCP/UDP port numbers to identify and control application traffic - for example, blocking port 80 (HTTP) or port 443 (HTTPS) to restrict web access. This port-based approach is the defined granularity level for this technology in the context of this exam.

• A is wrong because filtering IM traffic within an HTTP packet (deep sub-protocol inspection) goes beyond what AVC is scoped to do - that requires deep packet inspection (DPI) or next-generation firewall capabilities.
• C is wrong because filtering by IP address is a Layer 3 (network layer) function, not application-layer visibility; it identifies hosts, not applications.
• D is wrong because filtering HTTP packets as a whole is too broad and describes general packet filtering, not the port-level granularity that AVC specifically provides.

Memory tip: Think of AVC as sitting at the "door" of each application - it checks which port (door number) traffic uses to decide whether to allow or block it, rather than inspecting what's inside the packet.

No community discussion yet for this question.