Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?
A . It functions like PAN-DB and requires activation through the app portal.
B . It removes the 100K limit for DNS entries for the downloaded DNS updates.
C . IT eliminates the need for dynamic DNS updates.
D . IT is automatically enabled and configured.

Answer: A,B