A security engineer deploys an enterprise-wide host/endpoint technology for all of the company's corporate PCs. Management requests the engineer to block a selected set of applications on all PCs.
Which technology should be used to accomplish this task?
What should a security analyst consider when comparing inline traffic interrogation with traffic tapping to determine which approach to use in the network?