You can add a domain list to allow or block specific domains. DNS Protection policies allow or block entire web categories. If you've blocked a web category in a policy but want to allow specific domains, you can create a list of those domains, add that list to the policy, and then allow that list.
When you allow or block a list in a policy, all domains in that list are allowed or blocked. For example, if you have four domains in a list and allow that list in a policy, DNS Protection allows all four domains.