What are two differences between an application group and an application filter? (Choose two.)

An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?

The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?

Match the Palo Alto Networks Security Operating Platform architecture to its description.

What does an application filter help you to do?