What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated?
(Choose two.)

Given the image, which two options are true about the Security policy rules. (Choose two.)

Which URL profiling action does not generate a log entry when a user attempts to access that URL?