A security analyst wants to control internet access based on site reputation and categorization. The analyst needs a solution that does not require traffic flow changes. Which of the following…

A proxy server requires client traffic to be explicitly routed through it, which represents a significant change in the network's traffic flow for clients accessing the internet.

DNS filtering operates by intercepting DNS resolution requests and blocking access to domains categorized as malicious, inappropriate, or low-reputation, preventing the client from even connecting to undesirable sites. This method works by simply denying name resolution, thus not requiring any alteration to the client's direct traffic flow or network configuration once the DNS server is configured.

A Router ACL (Access Control List) filters traffic based on IP addresses, ports, and protocols, but typically does not integrate with dynamic site reputation or categorization databases without additional services, and applying it is a direct traffic flow change.

A load balancer distributes incoming traffic among multiple servers and is unrelated to controlling internet access based on site reputation or categorization.