What mechanism is used on the Cisco ASA to map IP addresses to domain names that are
contained in the botnet traffic filter dynamic database or local blacklist?

A.
HTTP inspection

B.
DNS inspection and snooping

C.
WebACL

D.
dynamic botnet database fetches (updates)

E.
static blacklist

F.
static whitelist

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_botnet.html