An administrator would like to block traffic to all high risk audio streaming applications, including new App-IDs introduced with content updates. Which filter should the administrator configure in…

While "media" is a category, "Evasive" is a characteristic, not a risk level that would encompass all high-risk applications; this filter is too broad by category and too specific by characteristic.

A risk level of 1 typically indicates very low risk, not high risk, which is the opposite of the administrator's goal.

To block all high-risk audio streaming applications, including those newly introduced via content updates, the most effective filter combines the "subcategory is audio-streaming" with "risk is 5". Subcategory targets the specific type of application, and a risk level of 5 indicates the highest risk, ensuring that existing and future high-risk audio streaming applications are included.

While "media" is a category, "tag is high risk" is not a standard built-in filter option for App-ID risk classification; risk is a numerical value (1-5), not a tag.