You can define rules that control DNS requests and responses. The DNS Control policy has default rules that allow all DNS traffic. The default rules always maintain the lowest precedence. You can modify their actions, but you cannot delete them. See How do I modify the default DNS Control rule?