Given the topology, which zone type should zone A and zone B to be configured with?

Based on the screenshot presented which column contains the link that when clicked opens a window to display all applications matched to the policy rule?

How many zones can an interface be assigned with a Palo Alto Networks firewall?

An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

Which two security profile types can be attached to a security policy? (Choose two.)