Which license is required to use the Palo Alto Networks built-in IP address EDLs?

Which URL profiling action does not generate a log entry when a user attempts to access that URL?

Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL?

An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration.
What should the administrator do?

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?