DNS Protection

There are few queries related to DNS DDoS protection

1.  What is the difference between a DNS DoS protection profile and a DNS security profile?

2. what module do need to buy for the full protection of DNS relate DDoS attack ?

Like AFM , WAF or DNS ?