A database administrator contacts a security administrator to request firewall changes for a connection to a new internal application. The security administrator notices that the new application uses

Explicit deny is a specific ACL rule that actively blocks defined traffic, but the scenario describes a broader policy decision process, not a single explicit rule entry.

Port security refers specifically to switch-level controls limiting which MAC addresses can connect to a physical port, not firewall port filtering.

Access Control Lists are rule sets used to permit or deny traffic based on attributes such as port numbers. By evaluating the port request against a known threat (a virus-associated port) and denying it while suggesting an alternative, the administrator is actively managing and enforcing ACL-based firewall policy.

Implicit deny is the default deny-all rule at the end of an ACL that blocks unmatched traffic automatically, not an administrative decision to evaluate and reject a request.