Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

A next-generation firewall (NGFW) is a security component that can detect command-and-control

(C2) traffic sent from multiple endpoints within a corporate data center. A NGFW is a network device

that combines traditional firewall capabilities with advanced features such as application awareness,

intrusion prevention, threat intelligence, and cloud-based analysis. A NGFW can identify and block

C2 traffic by inspecting the application layer protocols, signatures, and behaviors of the network

traffic, as well as correlating the traffic with external sources of threat intelligence. A NGFW can also

leverage inline cloud analysis to detect and prevent zero-day C2 threats in real-time. A NGFW can

provide granular visibility and control over the network traffic, as well as generate alerts and reports

on the C2 activity. Reference:

Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)

Command and Control, Tactic TA0011 - Enterprise | MITRE ATT&CK®

Advanced Threat Prevention: Inline Cloud Analysis - Palo Alto Networks