Option A: Relying solely on inbound traffic blacklists limits the scope of protection. Many malicious activities, such as data exfiltration or beaconing, involve outbound connections.
Option B: Periodic audits can identify misconfigurations but lack the ability to detect or respond to real-time network activity or emerging threats.
Option C: CrowdStrike Falcon provides real-time monitoring and behavioral analytics to detect abnormal network activity in runtime environments. This feature allows security teams to identify and investigate malicious connections based on patterns or anomalies in communication, such as unusual ports, destinations, or traffic volumes.
Option D: While development pipeline scanning is useful for ensuring secure code and configurations, it does not address runtime network behavior or connections initiated by running workloads.