Which features are typically found only in Next-Generation firewalls? (Choose two.)

Deep packet inspection (DPI) and reputation-based malware detection are hallmarks of Next-Generation Firewalls (NGFWs). DPI allows NGFWs to analyze the actual content of network packets, not just headers, to identify and control applications, detect intrusions, and enforce granular security policies. Reputation-based malware detection uses threat intelligence feeds to block connections to known malicious IP addresses, domains, and files. While traditional firewalls offer Network Address Translation (NAT) and various VPN capabilities (RA VPN, IPSec site-to-site VPN), these functions focus on connectivity and basic access control rather than advanced threat prevention.