Tracking actions of running applications for security.

• A. Forensic Analysis
• B. Visibility
• C. Network Intelligence
• D. Unpatched Vulnerabilities

Answer: (B)

Visibility means you can see and understand what software is running on the endpoint and what actions it takes in real time. This includes which processes start, how they interact with other apps, file and registry activity, and network calls. Having this continuous insight lets security teams spot unusual or forbidden behaviors quickly, enforce policies, and respond to threats as they happen. It’s how you maintain situational awareness and detect abuse before it causes damage.

Forensic analysis, by contrast, looks backward after an incident to reconstruct what happened, which is retrospective rather than ongoing monitoring. Network intelligence focuses on external threat data and network-related signals rather than the direct, current actions of local applications. Unpatched vulnerabilities describe gaps that could be exploited due to missing updates, not a monitoring capability.