Why would this message appear as an audit?

An administrator sees that a runtime audit has been generated for a Container. The audit message is DNS resolution of suspicious name wikipedia.com. type A".

Why would this message appear as an audit?
A . The Layer7 firewall detected this as anomalous behavior
B . This is a DNS known to be a source of malware
C . The process calling out to this domain was not part of the Container model.
D . The DNS was not learned as part of the Container model or added to the DNS allow list

View Answer

Answer: B