What are three benefits that Cisco Umbrella brings to DNS-Layer Security? (Choose three.)

Malware scanning refers to file inspection performed by a secure web gateway or proxy, which is a separate Umbrella capability beyond the DNS layer.

Umbrella protects devices regardless of whether they are on or off the corporate network by routing DNS queries through its cloud platform, covering remote and roaming users without requiring a VPN.

Umbrella uses machine learning and statistical models to analyze internet activity patterns across all its customers and proactively identify new malicious domains before attacks are launched.

Breach mitigation is a general security outcome, not a specific named feature of Umbrella's DNS-layer security offering.

Reputation filtering is a function of Umbrella's proxy and Investigate components rather than a distinct DNS-layer security benefit listed in Cisco's official positioning.

Umbrella operates its own high-availability recursive DNS resolver infrastructure, meaning it resolves DNS queries on behalf of clients while simultaneously enforcing security policy at that layer.