Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

What is a recommended consideration when deploying content updates to the firewall from Panorama?

An administrator wants to prevent users from unintentionally accessing malicious domains where data can be exfiltrated through established connections to remote systems.
From the Pre-defined Categories tab within the URL Filtering profile, what is the right configuration to prevent such connections?

Arrange the correct order that the URL classifications are processed within the system.

Which statement is true about Panorama managed devices?