Which statements about DNS filter profiles are true? (Choose two.)

Which statements about DNS filter profiles are true? (Choose two.)
A . They can inspect HTTP traffic.
B . They can redirect blocked requests to a specific portal.
C . They can block DNS requests to known botnet command and control servers.
D . They must be applied in firewall policies with SSL inspection enabled.

Answer: B C