Cloud Scanning - You may enable it but the scan will take longer to complete as scan connects to cloud database. And yes if cloud scan enabled internet should be connected.
Rootkit Scanning - If you are not an expert user I would advice keep it disabled as it is little FP prone i.e gives wrong detection on legit things.