A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAs).
Which Security profile is used to configure Domain Name Security (DNS) to identify and block previously unknown DGA-based threats in real time?
The Anti-Spyware profile is used to configure Domain Name Security (DNS) to identify and block previously unknown DGA-based threats in real time. This profile is specifically designed to detect and prevent spyware and other malicious activities, including threats based on domain generation algorithms.
A is correct https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/domain-generation-algorithm-detection