A.It can automatically create address groups for use with KVM.

B.It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

C.It can bootstrap the virtual firewalls for dynamic deployment scenarios.

D.It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

A.It forges DNS replies to known malicious domains.

B.It monitors DNS requests passively for malware domains.

C.It can be deployed independently of an Anti-Spyware Profile.

D.It can work upstream from the internal DNS server.

A.Panorama

B.NGFW with PANOS 8 0.5 or later

C.Cortex Data Lake

D.Traps

E.Pathfinder

F.Directory Syn Service

A.Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)

B.Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)

C.Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)

D.Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)

A.Interface management profile on the zone of the ingress interface

B.Security profiles to security policy rules for traffic sourcing from the untrust zone

C.Zone protection profile on the zone of the ingress interface

D.An App-ID security policy rule to block traffic sourcing from the untrust zone