Given the image, which two options are true about the Security policy rules. (Choose two.)

An internal host needs to connect through the firewall using source NAT to servers of the internet.
Which policy is required to enable source NAT on the firewall?

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated?
(Choose two.)

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?