Which of the following are features typically only found in a Next Generation (NextGen) firewall? (Choose two.)

Network Address Translation (NAT) is a fundamental and ubiquitous feature found in both traditional and next-generation firewalls.

Secure remote access VPNs (RA VPN) are a common security feature offered by most firewalls, including traditional ones, to allow remote users to securely connect to the internal network.

Deep packet inspection (DPI) allows NGFWs to analyze the entire packet payload, not just headers, enabling granular application control, intrusion prevention, and advanced threat detection by understanding the context of network traffic.

Reputation-based malware detection leverages threat intelligence feeds and cloud analysis to block known malicious files, websites, and IP addresses, providing proactive protection against advanced persistent threats and zero-day attacks.

IPSec site-to-site VPNs are a standard functionality available in both traditional firewalls and NGFWs, used to create secure tunnels between two networks over an insecure medium.