What are two advantages of the DNS Sinkholing feature? (Choose two.)

What are two advantages of the DNS Sinkholing feature? (Choose two.)
A . It forges DNS replies to known malicious domains.
B . It monitors DNS requests passively for malware domains.
C . It can be deployed independently of an Anti-Spyware Profile.
D . It can work upstream from the internal DNS server.

Answer: A,D

Explanation: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing