Which two features are available only in next-generation firewalls? (Choose two.)

Application awareness allows NGFWs to identify and control applications regardless of port or protocol, providing more granular policy enforcement than traditional firewalls by understanding the actual application traffic.

Packet filtering is a basic firewall function available in traditional firewalls, inspecting network layer and transport layer headers, and is not exclusive to NGFWs.

Stateful inspection is a core feature of traditional firewalls, tracking the state of connections to allow return traffic, and is not exclusive to NGFWs.

Deep Packet Inspection (DPI) enables NGFWs to examine the actual content of packets to identify applications, detect threats, and enforce policies based on the specific data within the packet, not just headers.

Virtual Private Network (VPN) capabilities, while common in security appliances, are present in many traditional firewalls and routers and are not a feature *only* available in NGFWs.