The correct answer is B. URL Filtering is used to control employee internet access to inappropriate, illicit, risky, or non-business websites through URL and category-based policy. Administrators can block or allow categories such as gambling, adult content, anonymizers, malware sites, phishing pages, or other categories based on organizational acceptable-use requirements. Option A describes Application Control more than URL Filtering, because application access control is based on application identity and behavior. Option C is too narrow and not the usual URL Filtering use case; internal website access may be controlled by ordinary Access Control rules or URL/site objects, but the blade's primary purpose is internet website access control. Option D is wrong because file access control belongs to Content Awareness, Threat Prevention, DLP, endpoint controls, or file permissions- not URL Filtering itself. Reference topics: URL Filtering, URL categories, employee internet access control, Application and URL Filtering policy.