What are three DNS policy actions? (Choose three.)

Block is a direct action that prevents the DNS query from resolving, stopping access to potentially malicious domains.

While Allow is a general policy action, it's not typically listed as a distinct malicious DNS policy action in the context of threat prevention profiles, as DNS Security focuses on handling suspicious or malicious queries.

Strict is not a standard, distinct DNS policy action; it might describe a profile's overall posture but isn't an individual action like Block or Sinkhole.

Sinkhole redirects malicious DNS queries to a specified sinkhole IP address, allowing the firewall to identify infected hosts on the network.

Alert generates a log entry when a malicious DNS query is detected, providing visibility without blocking or redirecting the traffic.