Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)

Stateful traffic inspection is a fundamental feature that has been present in traditional firewalls for many years, tracking connection states to permit return traffic and block unsolicited packets.

Remote access VPN capabilities have been a standard feature of firewalls and dedicated VPN appliances long before the advent of next-generation firewalls.

While NGFWs contribute to network telemetry, 'network telemetry' itself is a broader concept for collecting network data and not an exclusive, inherent security feature provided only by NGFWs as an advanced capability.

Intrusion prevention systems (IPS) functionality is integrated into NGFWs, allowing them to detect and actively block known attacks, vulnerabilities, and exploits based on signatures and behavioral analysis, which was not a feature of traditional firewalls.

Application control in NGFWs provides granular visibility and enforcement policies based on specific applications rather than just ports, enabling more precise security control that traditional firewalls lacked.