The CrowdStrike Falcon platform includes a Host Firewall Management module specifically for creating granular network traffic rules. To block outbound traffic for a particular application, an administrator must create a custom firewall rule within a firewall policy. This process involves specifying the rule's direction as "Outbound," defining the target application (e.g., by its file path), and setting the action to "Block." This ensures that only the network communications from the designated application are blocked, without affecting other applications or the overall connectivity of the endpoint.

A. "Endpoint policy" is too generic. The specific policy type required for this task is a Firewall Policy, and the action is creating a rule, not just "disabling internet access."
B. The Application Control feature is designed to prevent the execution of an application (i.e., stop it from running), not to control its network traffic while it is running.
D. A setting to "Block Outbound Traffic" within a prevention policy would be a global host-level control, blocking all outbound traffic, not just traffic from a single, specific application.

1. CrowdStrike Falcon® Platform Documentation, Host and container firewall. In the section "Create a firewall rule," the procedure outlines the necessary steps: "In the Action section, select Block... In the Local Application section, enter the full path to an application." This directly supports the steps described in the correct answer. (Accessed via official CrowdStrike support portal, specific document ID varies by version).

2. SANS Institute, Endpoint Protection and Response Courseware (FOR508). The course material discusses modern Endpoint Detection and Response (EDR) capabilities, including host-based firewall control. It emphasizes the importance of creating specific rules to contain threats by blocking network access for a particular process or application, aligning with the methodology in the correct answer. (Reference to general module on Host-Based Controls).