An administrator wants to prevent hacking attacks through DNS queries to malicious domains. Which two DNS policy actions can the administrator choose in the Anti-Spyware Security Profile? (Choose…

'Deny' is a general security policy action, but in the context of DNS policy within Anti-Spyware, 'block' or 'sinkhole' are the specific actions for preventing resolution of malicious domains.

The 'block' action prevents a DNS query to a malicious domain from being resolved, effectively stopping communication to known malicious IPs.

The 'sinkhole' action redirects DNS queries for malicious domains to a specified sinkhole IP address, allowing the firewall to log and track infected hosts.

'Override' is not a standard DNS policy action in Anti-Spyware profiles; it might relate to overriding other settings but not a direct action against malicious DNS queries.