Which two advanced security features are available on the Cisco SD-WAN WAN Edge (vEdge) device? (Choose two.)

While Cisco Umbrella can integrate with SD-WAN, its DNS security feature is not directly 'on the vEdge device' as a built-in feature in the same manner as the firewall or AMP.

Enterprise Firewall is a core security feature on Cisco SD-WAN WAN Edge devices, providing zone-based firewall capabilities for traffic inspection and policy enforcement.

Snort IPS is primarily associated with dedicated security appliances like Firepower, and while some IPS functionalities exist, 'Snort intrusion prevention system' specifically is not a standard advanced security feature directly built into the vEdge platform itself in this context.

Cisco AMP (Advanced Malware Protection) for Endpoints and AMP Threat Grid are integrated into the SD-WAN solution, offering advanced malware detection and sandboxing capabilities directly on the WAN Edge devices.

URL filtering is typically part of a more comprehensive security solution often leveraging a cloud-based service like Umbrella or a dedicated proxy, rather than a standalone advanced security feature on vEdge.