Which Security profile can be used to detect and block compromised hosts from trying to communicate with external command-and-control (C2) servers?

URL Filtering controls access to websites based on categories or custom lists, but its primary function is not the detection and blocking of C2 communication initiated by compromised hosts.

Antivirus profiles primarily detect and block known malware files based on signatures, but they are not the primary mechanism for detecting and preventing C2 communication channels.

Vulnerability profiles detect and block exploits against known system vulnerabilities, which is different from detecting active C2 communication from an already compromised host.

The Anti-Spyware Security profile is purpose-built to prevent and detect malware such as spyware and botnets, including their attempts to communicate with C2 servers, by identifying and blocking malicious DNS queries or C2 traffic patterns.