An IT administrator has been tasked by the Chief Executive Officer with implementing security using a single device based on the following requirements: 1. Selective sandboxing of suspicious code to…

A Unified Threat Management device integrates multiple distinct security engines into a single appliance, including behavioral sandboxing that executes suspicious code in an isolated environment to determine malicious intent, VoIP application-layer gateways that inspect and manage SIP and H.323 signaling, and application control policies that identify and block potentially unwanted applications. No other device listed covers all three requirements from a single unit.

A Host-based Intrusion Detection System runs on individual endpoints and has no capability to inspect or manage network-level VoIP signaling protocols such as SIP or H.323.

A Network Intrusion Detection System is a passive monitoring device that detects anomalies but cannot sandbox code, handle VoIP call control, or actively block unwanted applications.

A Web Application Firewall is scoped exclusively to HTTP and HTTPS traffic for web application protection and provides none of the sandboxing, VoIP handling, or broad application blocking functions required.

A Hardware Security Module is a dedicated cryptographic processor for key management and digital signing operations and has no relevance to sandboxing, VoIP inspection, or application filtering.