Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:

The Cisco ASA administration must enable the Cisco ASA to automatically drop suspicious botnet traffic. After the Cisco ASA administrator entered the initial
configuration, the Cisco ASA is not automatically dropping the suspicious botnet traffic. What else must be enabled in order to make it work?

A.
DNS snooping

B.
Botnet traffic filtering on atleast one of the Cisco ASA interface.

C.
Periodic download of the dynamic botnet database from Cisco.

D.
DNS inspection in the global policy.

E.
Manual botnet black and white lists.

Explanation:
Just check all the following settings – certain they will change from time to time