An administrator wants to restrict file uploads to Facebook using the AVC feature. Under which two actions must the administrator apply this restriction to an access policy? (Choose two.)

Cisco's Application Visibility and Control (AVC) provides granular control over applications by breaking them down into micro-applications or specific attributes. To restrict file uploads to Facebook, an administrator must target the specific functions responsible for this traffic. File uploads on Facebook primarily occur when a user posts photos/videos or sends attachments via messages/chat. The "Facebook Photos and Videos" attribute specifically controls the uploading and viewing of media files. The "Facebook Messages and Chat" attribute governs the messaging function, which includes sending file attachments. By applying a "Block" or "Restrict" action to these two specific micro-applications within an access policy, an administrator can effectively prevent file uploads while allowing other general Facebook activities.

A. Monitor Facebook General: This attribute typically covers general browsing activities like viewing the news feed and profiles, not the specific action of uploading files.
B. Monitor Social Networking: This is a broad application category that includes many different platforms (e.g., Twitter, LinkedIn), not a specific, controllable action within Facebook.
E. Monitor Facebook Application: This refers to the entire Facebook application. Blocking this would deny all access to Facebook, which is not the goal of selectively restricting only file uploads.

1. Cisco Firepower Management Center Configuration Guide, Version 6.4: In the chapter "Application and URL Filtering in Access Control Policies," the documentation explains the use of application filters for granular control. It states, "Many applications have sub-applications, called application tags, that you can use for more granular control. For example, the Facebook application has tags for chat, mail, video, and so on." This supports the principle of targeting specific sub-applications like "Photos and Videos" and "Messages and Chat" to control specific functions. (Reference Section: "Application Filters")

2. Cisco Application Visibility and Control (AVC) Solution Data Sheet: This document outlines the capabilities of AVC, emphasizing its ability to identify and control specific application behaviors. It notes that AVC can "identify thousands of applications and specific behaviors within applications, such as file transfer...within social media applications." This directly supports targeting the file transfer components of Facebook, which are "Photos and Videos" and attachments within "Messages and Chat". (Reference Section: "Key Features and Benefits")

3. NBAR2 Protocol Pack Library Documentation (for various releases): The official Network-Based Application Recognition (NBAR2) library, which powers AVC, lists the specific attributes for applications. For Facebook, it includes distinct attributes such as facebook-photos, facebook-video, and facebook-chat. These technical names directly correspond to the user-friendly options "Facebook Photos and Videos" and "Facebook Messages and Chat," confirming they are the correct targets for controlling these specific actions. (Reference: Searchable NBAR2 Protocol Pack Library on Cisco.com for "Facebook" application attributes).