What are three benefits that Cisco Umbrella brings to DNS-Layer Security? (Choose three.)

Breach mitigation is a broad outcome, not a specific DNS-layer feature - Umbrella prevents threats before connection rather than mitigating damage after a breach occurs.

Umbrella enforces DNS-layer security by blocking requests to domains and IP addresses associated with malware, phishing, and command-and-control infrastructure before a network connection is ever established.

Umbrella functions as a cloud-delivered recursive DNS service, meaning DNS queries are resolved and filtered in the cloud without requiring on-premises hardware or software agents.

Device profiling is a capability of network access control solutions such as Cisco Identity Services Engine (ISE), not a function of DNS-layer security.

Umbrella logs every DNS query made by protected users and devices, providing full visibility into internet activity for forensic investigation, threat hunting, and compliance purposes.

Sandboxing of malware is provided by Cisco Secure Malware Analytics (Threat Grid), a separate service that is not part of Umbrella's DNS-layer security feature set.