Which policy is used to capture host information on the Cisco Firepower Next Generation Intrusion Prevention System?

A correlation policy is used to identify patterns of events that might indicate a security incident, not to capture host information.

An intrusion policy is used to detect and prevent malicious activity based on signatures and behavioral analysis, not to discover hosts.

An access control policy is used to define which traffic is allowed or blocked based on various criteria, not to capture host information.

The network discovery policy is specifically designed to gather information about network assets, including hosts, operating systems, services, and applications, by passively analyzing network traffic to populate the host and network map.