A network administrator has deployed Cisco Umbrella using DNS-layer security for all branch offices. Users report that some websites in categories rated as risky are being fully allowed or fully blocked at the domain level, but the security team wants Umbrella to inspect only the specific URLs and files from domains that have both trusted and risky content (such as file-sharing sites) — without proxying all internet traffic. Which Umbrella capability should the administrator enable to achieve this selective HTTP/HTTPS inspection?