Which statement is true about Deviating Devices and metrics?

Which three categories are identified as best practices in the Best Practice Assessment tool?
(Choose three.)

Which two types of security chains are supported by the Decryption Broker? (Choose two.)

Palo Alto Networks publishes updated Command and Control signatures.
How frequently should the related signatures schedule be set?

DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client's DNS query (that is, the firewall cannot see the originator of DNS query) Which of the following Statements is true?