Which two Cisco Umbrella security categories are used to prevent command-and-control callbacks on port 53 and protect users from being tricked into providing confidential information? (Choose two.)

DNS Tunneling VPN is a security category in Cisco Umbrella that specifically identifies and blocks the use of DNS for command-and-control (C2) communication, which often occurs over port 53.

Dynamic DNS (DDNS) is a legitimate service for mapping domain names to changing IP addresses; while it can be abused, it is not a direct security category for preventing C2 on port 53 or phishing itself.

Newly Seen Domains is a category for domains recently registered or seen, which can be indicators of risk but is not specifically for established C2 callbacks on port 53 or phishing.

Potentially Harmful Domains is a broad category for domains that may pose a risk, but 'DNS Tunneling VPN' and 'Phishing Attacks' are more specific and direct matches to the described threats.

Phishing Attacks is a security category in Cisco Umbrella that blocks access to domains known to host phishing content, thereby protecting users from providing confidential information.